last executing test programs: 3m7.446096981s ago: executing program 0 (id=63): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000200000000000ed000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xfff9}, 0x10}, 0x94) 3m7.192821269s ago: executing program 0 (id=65): socket(0x80000000000000a, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x204, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x3, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x5}, r4, 0x7}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4000000000003, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0xe4, @rand_addr=' \x01\x00', 0x2}}, 0x0, 0x0, 0x125, 0x0, "c43b9320585854378463e5d9ac44984ed4936350a7f170f645640905822998ca06b3a771e3ab05c927d207f7d21d93b1d5e068c6a0652a79973d9cbb62bd8c26deb2eae0b68847b15bbe30539483f6e7"}, 0xd8) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000280)=0xb, r6, 0x0, 0x0, 0x1}}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8924, 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r9, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={r9, @in6={{0xa, 0x4e20, 0x1, @empty, 0x6}}, 0x3, 0x3, 0x7fff, 0x81, 0x0, 0x85e, 0xf}, &(0x7f0000000b00)=0x9c) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002fff903905800000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc06020000004603b886a5e54f8f", 0x48}], 0x1}, 0x4000000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4004084) perf_event_open(&(0x7f0000000000)={0x1, 0xfffffffffffffe66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0xc3, 0x5}, 0x1040e8, 0xfffffffffffffffc, 0xfffff7ff, 0x4, 0xf38a, 0x8001, 0xe, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xff6fbfffffffffff, r2, 0x1) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0x4, 0x0, 0x4}, 0x1c) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) 3m7.032364334s ago: executing program 0 (id=68): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) io_setup(0x7, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2}]) socket(0x40000000015, 0x5, 0x0) setitimer(0x2, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x20000103) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0d0000000a000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000400000000000000000000ffb96a1f0f7d4002280489208800c4a853"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffdd, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004a, 0x0, 0x0, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x200000004, r1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdir(0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d60a00000000007461115000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="99c236a5897a38a1fd459bba6ac84faa0f6bb7fcca68f93b6b9dca716e4a6a517809dd0f862589dc47979421bd180502f25fea39d7e3af4ee7c9d9679e7bd3ceccb624f24011391aa8fe49b97cfb88d7c356fa6ce461a87870cae8006959714a3b51c6415f95880b72741a83bd21d95395dac08c501730b4a12a55444416d9cf7a70898d37e057a2e6b6b35f953606b542dc821445592cc36f86f8da1e0647ad862b26689ba0e0ad30b819df898680854a25c515baf6d751e6626c014e0f6449", 0xc0}], 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x26}, 0x94) move_pages(0x0, 0x1, &(0x7f00000021c0)=[&(0x7f0000001000/0x1000)=nil], 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12c}, 0x0, 0xf, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x22, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r3, 0x29, 0x15, &(0x7f00000000c0), 0xb9) 3m5.448210284s ago: executing program 0 (id=76): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x400400, 0x0) mount(0x0, &(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) 3m5.417905746s ago: executing program 0 (id=78): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9c010000100001002cbc700000000000ff020000000000000000000000000001200100000000000000000000000000000000ecdf000000000200180000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000000f000000003200000000000000000000000000000000000000feffffffffffffff0100000000000000030000000000000000000000000000000000000000000000fcffffffffffffff04000000000000000900000000000000ffffffffffffff7f000840000000000009000000000000009202000000000000001087ac000000000000000000000000000000000a0004002c00000000000000600002006362632863616d656c6c696129000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000006e000b000000002000000000190000000000feffff7f00004c001400686d61632873686132353629"], 0x19c}}, 0x44050) 3m5.104157275s ago: executing program 0 (id=81): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f0000002380)=[{0x0}, {&(0x7f0000001dc0)="32f43676f20dc771d97e93365be7abd5deade058b71075fe2d8d099cd20a6f841de80a19a66d9c347917a1", 0x2b}, {&(0x7f0000001e00)="667d168db787feede34a5f54789c6f73feca07d5bd60f1c8b97ed504505100f14f4e3bb1c6d228aff9bed525ba1bcab8c50656617d218c8c05fec9ef32f8b79ddc8014968e48c88e68cda1656b02706e62ccb017b587a7bad36e5f6831b2ca5b9f21b3ac64af3c013e9b4a552aa7cf1acec72fef78f63f7690da4057948749af2037015060007448060f2c4ae4df64589bdc2bb0aaa95fa4dbd7ebf16e81351f7aad25f41855e96746a2a16e87209bf3ec694a0b28039925fcccc31fddce545b62821f4fdea12242e7bd093547f9d9782b59f543bd548e577dc3cd", 0xdb}, {&(0x7f0000001f00)="a2b5c2db6779e0a641af9ca6416b3ba4958ecbf755c8692d34753f8769404f8ccfaf327b4824c483c6b3f62af58b51162c01676f101670f0eb2d5059badd6e13f8681a7e453bfcca5ca0e7a68d23154645607cf2eedfcb518049c886f4cc309ad7495651a6230e471744ef4918289074dad8402a214b3acce614ae40a6839623e17cbf18c3e9e7e1b1e41d297bd5f53a676e7284c2e1d5a8c7044a0fa88f5331d99897aaac9b032f0b9ef0b3", 0xac}, {&(0x7f0000001fc0)="85ba04b2c40059cd28aa9c98f1382c1c3eaf43593ad6516344b0c46203279f7c039353f74e095f31b712bfe6ca38df3d470d7c42462794b9ad2d94d80e19a8c258ebc4ae51a944d7a4fbbb97957a8542f5c3e83c08a0e3103bc48bd2bfc72df79dfec598219d9d4808a3950e6a28ad0e37efba4e59c2329897abb63da52689b69b753d2859bdc30d2c1236a6f9c9ee66e9c9907ec831acd0", 0x98}, {&(0x7f00000020c0)="10f68f0d8b688fc8290e2f852c3b8d4baf1a82612ab6391f098ca266b6b5356e296c254476183444ac72da947eedbe65da61555a883a16b83738a102f9fad1e86a942b4a995092fa8d8fc29ac910089a61a78ee8eec7f8e0e19124d1a318f615cd833f9eb63fb7a78a0b9dcd0167ea8d9a53ad0477fdf538859d2493ee84286058c8c8f9593b25afc5f14ae7d1459f76f9d3211f207493e56744bee826b5fa53f5e7a7a4c3f2deee0a04e4ebaa111c2f061b997882fbe352f3e82f655aca940bfa82eb38bac41cca7cffaacb36487e9fd2421ac0df0d4dd357882a936216f57c548398495008c8060a51f9431d3f8175883d", 0xf2}, {&(0x7f00000021c0)}, {&(0x7f0000002240)="c2bda60d29c37a8860b465d14c77921dee84879d0ea7a1d488cd3032df371faf234e82fd0b002509931af5836937d8a21611d16279ae6937ca896fad89b822f371eb3bf7ba41e74d3cbcf6aa90dc550e4363a6f5c4410ae6ac955cf933d9adb4bcdad6fd6915c50f53a4a686cdddf8251537dda81b15eeb768c3ee1f35d5bda94c20970fe82a65a352599dd82ca9a92297740920c74aacc936aad6407c63bc465b4300498d44f95fa2e9a9bd9db123c9e44bd64c8ebb094cae2eb02dba6f9134cfb9736768d6a6d25c74f9d93bbb5d386228d75de6c7b4217941416831abccb26ec0b4edf74e84d09c89", 0xea}, {&(0x7f0000002340)="db54dfa009956eb2a2a4c3764d87e43dc400c8a059f5279ecde8486d2e298beb2f6bde0f0634bf416e70ed", 0x2b}], 0x9, &(0x7f00000024c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x18}}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x80}, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000025c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x2, 0x4, 0x799b, 0x4, 0x290, 0x68}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x8}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xfffffffffffffffc}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x8080) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0xc0, 0x800, 0x25, @mcast1, @remote, 0x7800, 0x1, 0x3, 0x678d}}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x90275b969abf058e}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x190, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x190}, 0x1, 0x0, 0x0, 0xc810}, 0x4010) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8080) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x9}, 0x2001, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r11 = gettid() process_vm_writev(r11, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 3m5.014428098s ago: executing program 32 (id=81): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f0000002380)=[{0x0}, {&(0x7f0000001dc0)="32f43676f20dc771d97e93365be7abd5deade058b71075fe2d8d099cd20a6f841de80a19a66d9c347917a1", 0x2b}, {&(0x7f0000001e00)="667d168db787feede34a5f54789c6f73feca07d5bd60f1c8b97ed504505100f14f4e3bb1c6d228aff9bed525ba1bcab8c50656617d218c8c05fec9ef32f8b79ddc8014968e48c88e68cda1656b02706e62ccb017b587a7bad36e5f6831b2ca5b9f21b3ac64af3c013e9b4a552aa7cf1acec72fef78f63f7690da4057948749af2037015060007448060f2c4ae4df64589bdc2bb0aaa95fa4dbd7ebf16e81351f7aad25f41855e96746a2a16e87209bf3ec694a0b28039925fcccc31fddce545b62821f4fdea12242e7bd093547f9d9782b59f543bd548e577dc3cd", 0xdb}, {&(0x7f0000001f00)="a2b5c2db6779e0a641af9ca6416b3ba4958ecbf755c8692d34753f8769404f8ccfaf327b4824c483c6b3f62af58b51162c01676f101670f0eb2d5059badd6e13f8681a7e453bfcca5ca0e7a68d23154645607cf2eedfcb518049c886f4cc309ad7495651a6230e471744ef4918289074dad8402a214b3acce614ae40a6839623e17cbf18c3e9e7e1b1e41d297bd5f53a676e7284c2e1d5a8c7044a0fa88f5331d99897aaac9b032f0b9ef0b3", 0xac}, {&(0x7f0000001fc0)="85ba04b2c40059cd28aa9c98f1382c1c3eaf43593ad6516344b0c46203279f7c039353f74e095f31b712bfe6ca38df3d470d7c42462794b9ad2d94d80e19a8c258ebc4ae51a944d7a4fbbb97957a8542f5c3e83c08a0e3103bc48bd2bfc72df79dfec598219d9d4808a3950e6a28ad0e37efba4e59c2329897abb63da52689b69b753d2859bdc30d2c1236a6f9c9ee66e9c9907ec831acd0", 0x98}, {&(0x7f00000020c0)="10f68f0d8b688fc8290e2f852c3b8d4baf1a82612ab6391f098ca266b6b5356e296c254476183444ac72da947eedbe65da61555a883a16b83738a102f9fad1e86a942b4a995092fa8d8fc29ac910089a61a78ee8eec7f8e0e19124d1a318f615cd833f9eb63fb7a78a0b9dcd0167ea8d9a53ad0477fdf538859d2493ee84286058c8c8f9593b25afc5f14ae7d1459f76f9d3211f207493e56744bee826b5fa53f5e7a7a4c3f2deee0a04e4ebaa111c2f061b997882fbe352f3e82f655aca940bfa82eb38bac41cca7cffaacb36487e9fd2421ac0df0d4dd357882a936216f57c548398495008c8060a51f9431d3f8175883d", 0xf2}, {&(0x7f00000021c0)}, {&(0x7f0000002240)="c2bda60d29c37a8860b465d14c77921dee84879d0ea7a1d488cd3032df371faf234e82fd0b002509931af5836937d8a21611d16279ae6937ca896fad89b822f371eb3bf7ba41e74d3cbcf6aa90dc550e4363a6f5c4410ae6ac955cf933d9adb4bcdad6fd6915c50f53a4a686cdddf8251537dda81b15eeb768c3ee1f35d5bda94c20970fe82a65a352599dd82ca9a92297740920c74aacc936aad6407c63bc465b4300498d44f95fa2e9a9bd9db123c9e44bd64c8ebb094cae2eb02dba6f9134cfb9736768d6a6d25c74f9d93bbb5d386228d75de6c7b4217941416831abccb26ec0b4edf74e84d09c89", 0xea}, {&(0x7f0000002340)="db54dfa009956eb2a2a4c3764d87e43dc400c8a059f5279ecde8486d2e298beb2f6bde0f0634bf416e70ed", 0x2b}], 0x9, &(0x7f00000024c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x18}}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x80}, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000025c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x2, 0x4, 0x799b, 0x4, 0x290, 0x68}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x8}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xfffffffffffffffc}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x8080) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0xc0, 0x800, 0x25, @mcast1, @remote, 0x7800, 0x1, 0x3, 0x678d}}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x90275b969abf058e}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x190, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x190}, 0x1, 0x0, 0x0, 0xc810}, 0x4010) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8080) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x9}, 0x2001, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r11 = gettid() process_vm_writev(r11, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 2m38.262423656s ago: executing program 3 (id=279): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00(\x00\x00\x00\x00\x002\x00)'], 0x50}}], 0x1, 0x0) 2m38.083952601s ago: executing program 3 (id=281): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x4, 0xcbf, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x0, 0x8, 0x0, 0xd65}}) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c"], 0x20}}, 0x0) (async) r2 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x4206, r2) waitid(0x0, 0x0, 0x0, 0xe, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a89, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, @mcast2={0xff, 0x5}, 0x700, 0x40, 0x9, 0x5}}) 2m37.80988484s ago: executing program 3 (id=285): quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x4000) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) truncate(0x0, 0x8fff5) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mremap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x140, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r2, 0x0, 0x404c880) r3 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='.\x00', 0x11624ba, &(0x7f00000007c0)=ANY=[@ANYRES8=r3, @ANYRES32=r3, @ANYRESOCT=r3, @ANYBLOB="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", @ANYRES32=r3, @ANYRES64, @ANYBLOB="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", @ANYRES8=r3, @ANYRESHEX=r3, @ANYRESHEX=r3], 0x0, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x4c, r6, 0x511, 0x400000, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0xfffffffffffffd58, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c810}, 0x2) 2m34.312835711s ago: executing program 3 (id=299): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20081e, &(0x7f0000000140), 0x1, 0x4fb, &(0x7f0000001c80)="$eJzs3c9vG1kdAPDvOHF+tNlNdtkDINgtuwsFVXUSt42qHqCcEEKVED2C1IbEjaLYcRQ7pQk9pGeuSFTiBEf+ip64c0Fw41IOSPyIQA0SByOPJ6mT2k3UJHYUfz7SaObNm/r7Xp15L/469gtgYF2JiO2IGImIhxExmZ1Psi3utrbmda92ni7s7jxdSKLRuP/PJK1vnou2f9N0OXvMsYj40fcifpq8Gbe2ubUyXy6X1rPydL2yNl3b3Lq+XJlfKi2VVovFudm5mds3bhVPra+fVEayo6++/MP2t37ebNZEdqa9H6ep1fX8fpym4Yj4wVkE64OhrD8j/W4I7yQXER9GxKfp/T8ZQ+mzCQBcZI3GZDQm28sAwEWXS3NgSa6Q5QImIpcrFFo5vI/iUq5crdWvPapurC62cmVTkc89Wi6XZrJc4VTkk2Z5Nj1+XS5G/kD5RkR8EBG/HB1Py4WFanmxn7/4AMAAu3xo/v/PaGv+BwAuuLF+NwAA6DnzPwAMHvM/AAwe8z8ADJ7W/D/e72YAAD3k9T8ADB7zPwAMlB/eu9fcGrvZ918vPt7cWKk+vr5Yqq0UKhsLhYXq+lphqVpdSr+zp3LU45Wr1bXZm7HxZOrba7X6dG1z60GlurFaf5B+r/eDUj69arsHPQMAuvngkxd/Tpoz8p3xdIu2tRzyfW0ZcNZy/W4A0DdD/W4A0DdW+4LBdYLX+NIDcEF0WKL3gLFOHxBqNBqNs2sScMaufkn+HwZVW/7fXwHDgJH/h8El/w+Dq9FIjrvmfxz3QgDgfJPjB7q8//9htv9d9ubATxYPX/H8LFsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59ve+r+FbC3wicjlCoWI9yJiKvLJo+VyaSYi3o+IP43mR5vl2T63GQA4qdzfkmz9r6uTn08cqPr48v7hSET87Nf3f/Vkvl5f/2PESPKv0b3z9efZ+WLvWw8AHG1vnk73bS/kX+08Xdjbetmev383IsZa8Xd3RmJ3P/5wDKf7schHxKV/J1m5JWnLXZzE9rOI+GKn/icxkeZAWiufHo7fjP1eT+PnDsTPpXWtffP/4gun0BYYNC+a48/dTvdfLq6k+873/1g6Qp1cNv41H2phNx0DX8ffG/+Guox/V44b4+bvv986Gn+z7lnEl4cj9mLvto0/e/GTLvE/P2b8v3zl40+71TV+E3E1OsdvjzVdr6xN1za3ri9X5pdKS6XVYnFudm7m9o1bxek0Rz3dfTb4x51r73era/b/Upf4Y0f0/+vH7P9v//fwx197S/xvftYpfi4+ekv85pz4jWNFT7qt7b0ff7FL/496/q8dK37Ey79uvbFsOADQP7XNrZX5crm0fmYH+SzSGYZwMCgH5/kH6Tu9ijUSnat+8VnrTjtU1Wi8U6xuI8ZpZN2A82D/po+I//a7MQAAAAAAAAAAAAAAQEe9+MRSv/sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxfX/AAAA///n5cqK") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181441, 0x148) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = fsmount(r2, 0x0, 0x2) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, 0x0) (async) setpgid(0x0, r6) utime(&(0x7f0000000080)='./file0\x00', 0x0) (async) truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x71}}, 0x0, 0xa}, 0x94) (async) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x7fff, 0xffff}) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) (async) io_uring_setup(0x1f3e, &(0x7f0000000100)={0x0, 0xfac7, 0x0, 0x1, 0x32c}) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20) (async) close(0x3) (async) r8 = syz_create_resource$binfmt(&(0x7f0000000000)='./file4\x00') openat$binfmt(0xffffffffffffff9c, r8, 0x41, 0x1ff) (async) socket(0x21, 0x3, 0x2) pwritev(r0, &(0x7f0000001c00)=[{&(0x7f00000001c0)="74df82", 0x3}], 0x1, 0x3, 0x1) (async) fallocate(r0, 0x20, 0x4000, 0x8000) 2m34.119852697s ago: executing program 3 (id=303): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m33.667494471s ago: executing program 3 (id=309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000036c0)={0x20, 0x2, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x84) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000100), 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r2 = io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x2000008, 0xc1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x50, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x1a, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}, {"7a9efe4b54bc"}}}}}}}, 0x0) pselect6(0x40, &(0x7f0000000380)={0xff, 0x0, 0x0, 0x8000000000008, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000000)={0x2100000001f, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m33.625043803s ago: executing program 33 (id=309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000036c0)={0x20, 0x2, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x84) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000100), 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r2 = io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x2000008, 0xc1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x50, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x1a, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}, {"7a9efe4b54bc"}}}}}}}, 0x0) pselect6(0x40, &(0x7f0000000380)={0xff, 0x0, 0x0, 0x8000000000008, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000000)={0x2100000001f, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m56.761634391s ago: executing program 1 (id=604): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000000010904000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x48}, 0x1, 0x0, 0x0, 0x8c04}, 0x40c0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$inet(0x2, 0x2, 0x1) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e20, 0x4, @loopback, 0x7}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) shutdown(r2, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r6}, &(0x7f0000001780)=0x4, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m56.678722243s ago: executing program 1 (id=606): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @mcast2, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40002142, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x2800883, &(0x7f0000000140)={[{@errors_remount}, {@noblock_validity}, {@mb_optimize_scan}]}, 0x0, 0x47e, &(0x7f0000000200)="$eJzs3MtvHEUeB/DvjD22k2zW3mz2kdeud7MrIh524jzIAQkFgcQBJCQ4BHEyjhOFODGKjUSiCAwHc0SRuCOOSPwFXAgXBJyQuIY7QopQLkScBvU8bMf22J7YsZPM5yO1XNVd01W/7i5PTfX0BOhYg0n2JflTkptJ+pOUFhcYrP+505vk9rWxUqrVV38t1cr9dvvaWLNo83U76plq1wr1zr6RjE5MjF9u5IenL749PHXl6lPnL46eGz83fmnk5MljRw/0nBg5viFx7izauve9yf17Xnz9+stjp6+/+d0XpUbcWRRHa5W26hysHbWa/tlF2/7f1p4efDsXpEvdW9gQ2jKQpLtxZd9Mf7qybW5bf174cEsbB9xX1Wq52nv3qoVvcjNV4BFWjOaBTtR8oy8+/zaXTRx+bLlbpzI3j3GnsdS3dKfcKNPep/72DCY5PfP7p8WSNc9DAADcuxunkjy5ZPx3anG5P9fmg/vm8ruS/DXJ7iR/S/L3JP9I8s826x9clF86/qn2t7nLthTjv2eS3Fky/muO/jLQ1cjtrM2XV0rFoPlw45gcSqX37PmJ8SPzu1wyXPz6+R8/blX/wvFfsRT1N8eCjXb80r1ogu7MaGV0vXE33fqgfgNgafx9ad7GKcbHe5LsbWO/ldrcYt35xz/f36rc6vGvYAPuM1U/Sx6rn/+Z3BX//F3QUsv7k0eePjFyfLgvE+OHh4ur4PCydXz/w+wrrepfV/wb4NaNarYve/3PxT9Q6kumrly9ULtfO9V+HbM/fdTyM829Xf/Toz2l12rpnsa6d0enpy8fSXpKLy1dPzL/2ma+Wb64/g8dXL7/78r8kdiXpLiIDyT5V5J/N9r+nyT/TXJwhfi/fe5/b801aM3x966wx41TxH9mtfOfhee//UTXhW++bFX/2s7/sVrqUGNNcf5Xi2utDVzPsQMAAICHRbn2HfhSeWguXS4PDdW/w78728sTk1PTT5ydfOfSmfp35QdSKTdnuvob86HN+c+BBfmRRfmjSf6S5JOubbX80NjkRDvzicDG29Gi/xd+XukBHuDR4Hkt6Fz6P3Qu/R86l/4PnUv/h861XP9/fwvaAWy+Vd7/t21WO4DNZ/wPnUv/h87VRv+fuZ/tADZVy2fjy+t65P+BS3Q/EuFUkqxc5que9f1Ww9oTKW/10XiIEs+u5aRUsuym7jX/mMU9JEpJepfdtNX/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbGHwEAAP//wXniWQ==") syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_ep_write(r1, 0x0, 0x60, &(0x7f00000000c0)="c6def3fc0e8e4355b8cfb2edf6b781a779d2c26bb24d410fe8e672cab303b824f2dfad875d10c07810c07c2022b5d90218fb047dc4c25b6e84868ca9e5778103949baccdeec80f3d5c519b6915266f3bd265b3a417e89c57fd4d6e6a4184e89c") 1m55.876363899s ago: executing program 1 (id=615): syz_socket_connect_nvme_tcp() syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x10004000) getpriority(0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80009, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) 1m55.712040204s ago: executing program 1 (id=616): futex(&(0x7f000000cffc)=0x2, 0x9, 0x2, 0x0, 0x0, 0x2) capset(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x2, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60000000001410fffe880000000000000000000000000001fe80000000000000010000006dd1b4000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000690780000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x8d350, 0xfff, 0x20da, 0x4, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x200000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@chain) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) sendmsg$NFT_BATCH(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x3a0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x13c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x7}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x41}]}}}, {0x4c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_LAST_MSECS={0xc}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}]}}}, {0x90, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x80, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4d, 0x3, "9ea0db78a122bf956d732f8136e77e702bb3a4c981f5b47c0446303f9c7d524079d7d273aa4c67a90ed0af45ff7e2b065f796ababb0afe38c9bd5d3f520ffa7f5d223c51a826f509aa"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_INFO={0x12, 0x3, "9af1926d222675c4a69656ca425e"}]}}}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x84}]}]}], {0x14}}, 0x3c8}}, 0x4048010) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) creat(&(0x7f00000002c0)='./file0\x00', 0x104) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x80000, 0x1}}, 0x40) 1m54.815609352s ago: executing program 1 (id=623): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)}, 0x20) write$cgroup_subtree(r4, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091ef"], 0xfe33) recvmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r2, 0x12) r6 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000018000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m54.291844439s ago: executing program 1 (id=625): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000"], 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0xd, 0x14, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0xc18, 0x80000000, 0x7, 0x0, 0x4, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000004c0)='cpu>\t0||\t') socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x1000000, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 1m54.231541351s ago: executing program 34 (id=625): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000"], 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0xd, 0x14, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0xc18, 0x80000000, 0x7, 0x0, 0x4, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000004c0)='cpu>\t0||\t') socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x1000000, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 21.884938617s ago: executing program 7 (id=1545): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0xf9, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xfff9}, 0x10}, 0x94) 21.862432987s ago: executing program 7 (id=1546): syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x800, &(0x7f0000000180), 0x1, 0x292, &(0x7f0000000a40)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r0, &(0x7f0000000100)='.\x00', 0x0, 0x400, &(0x7f00000003c0)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$netlink(r1, 0x0, 0x20044010) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000040)) 21.495672979s ago: executing program 7 (id=1552): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000e000001000000000000000807010000080700ffe500fcff0000000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0xfa, &(0x7f0000000300)=""/250}, 0x94) 21.157665869s ago: executing program 7 (id=1560): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x200000, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$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") creat(&(0x7f0000000080)='./file0\x00', 0x42) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x4c, 0x0, 0x1, 0x1000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0xbc}, 0x1, 0x0, 0x0, 0x801}, 0x91) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = gettid() r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060128750000000000000007000000140007800800114000000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x60}, 0x1, 0x2000000, 0x0, 0x20000810}, 0x20004000) kcmp(r2, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 20.388967274s ago: executing program 7 (id=1570): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000e000001000000000000000807010000080700ffe500fcff0000000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0xfa, &(0x7f0000000300)=""/250}, 0x94) 20.248251648s ago: executing program 7 (id=1573): r0 = socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x14, &(0x7f0000000300)={[{@resgid}]}, 0x5, 0x7e5, &(0x7f0000000600)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x14, &(0x7f0000000300)={[{@resgid}]}, 0x5, 0x7e5, &(0x7f0000000600)="$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") write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) (async) write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x7, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r1}]}, 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x4810, &(0x7f0000000140)={[{@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpquota}, {@abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@errors_remount}, {@init_itable}, {@noauto_da_alloc}]}, 0x0, 0x4ec, &(0x7f0000000c40)="$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") (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x4810, &(0x7f0000000140)={[{@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpquota}, {@abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@errors_remount}, {@init_itable}, {@noauto_da_alloc}]}, 0x0, 0x4ec, &(0x7f0000000c40)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000540)='./bus\x00', 0x400, 0x0) (async) r2 = open(&(0x7f0000000540)='./bus\x00', 0x400, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x1261, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x1261, 0x0) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000040)={0xf, 0x1}) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @remote, 0x40, 0x20, 0x0, 0xfffffffe}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x24004000) io_uring_setup(0x50c3, &(0x7f0000000300)={0x0, 0x115f, 0x1000, 0x3, 0x304, 0x0, r2}) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x2080) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x840, &(0x7f0000000180), 0x1, 0x286, &(0x7f0000000780)="$eJzs3T9oM2UcB/DfXRL7tm/QVwURxT8gIloor5sggi4KBZEiIqhQEXGSVqgWt8bJxUFnlU4uRdysjuJSXISuVTtUBBFLB4uDDpG7SySmia2XfzX5fCC9e+6e555Lue9zD6W5BDCzrkXE4xFRiYjFiKhFRNJZ4d7ida1V3J7fW41oNp89SfJ6RbnQbnc1IhoR8UhEtb1vc/fFo98Pnnrgvbdq93+y+8L8GN5apXvD8dHh06cfP/Pu58sPb6atbfXWsvN9DNEdN/XYWE0ibhlBZ5dFUp30GRBz51dZefuz77KQ3BoR9+X5r0Xaiuz7Gzd8XYuHPurX9oNf9+8c6vkCY9ds1rJ7YKMJzJw0nwMn6VJEFOtpurRUzOG/ryykr69vvLn42npl7dXOCcU4pu/AqNQjDp/8cu6Lq135/7lS5B+YXln+n1vZ+SFbPz3zlzJgKt1VLLL8L7689WDIP8wc+YfpsFCijfzDVKiXbCT/8H9XMrsl8n/bT/uPlesMuFQumP9fxnlOwHiY/8MUq7VXGj13yz/Mrgvn37/6wtRp59+tH2ZP5/0fAJgtzblJfwIZmJRJjz8AAAAAAAAAAAAAAAAAAMBZ2/N7q+1XRDKWPr/5MOL4iYiodvcf+RcbpPnySv5z4bckq/a3pGiWr5V9ROFL9wx2/oP6dPSfvq52la90Fm78ceT9/6tv7x7Ncd/5Z7Hv5bG1FtHIKl+vVs9ef0nr+ivv5nP2114ZsIP/qDvVjz4/vGOf9N3T/7f4587w+i9j+SDiq2z8ud5r/Enj9nzZe/ypdz5iuaQ3/hjwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIzNXwEAAP//aQ9tAw==") socket$nl_sock_diag(0x10, 0x3, 0x4) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8080c61) (async) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8080c61) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x400, &(0x7f00000ce000/0x1000)=nil, 0x3) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40, 0x42, 0x5c}) 20.222694319s ago: executing program 35 (id=1573): r0 = socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x14, &(0x7f0000000300)={[{@resgid}]}, 0x5, 0x7e5, &(0x7f0000000600)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x14, &(0x7f0000000300)={[{@resgid}]}, 0x5, 0x7e5, &(0x7f0000000600)="$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") write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) (async) write(r0, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x7, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r1}]}, 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x4810, &(0x7f0000000140)={[{@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpquota}, {@abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@errors_remount}, {@init_itable}, {@noauto_da_alloc}]}, 0x0, 0x4ec, &(0x7f0000000c40)="$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") (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x4810, &(0x7f0000000140)={[{@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpquota}, {@abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@errors_remount}, {@init_itable}, {@noauto_da_alloc}]}, 0x0, 0x4ec, &(0x7f0000000c40)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000540)='./bus\x00', 0x400, 0x0) (async) r2 = open(&(0x7f0000000540)='./bus\x00', 0x400, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x1261, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x1261, 0x0) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000040)={0xf, 0x1}) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @remote, 0x40, 0x20, 0x0, 0xfffffffe}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x24004000) io_uring_setup(0x50c3, &(0x7f0000000300)={0x0, 0x115f, 0x1000, 0x3, 0x304, 0x0, r2}) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x2080) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x840, &(0x7f0000000180), 0x1, 0x286, &(0x7f0000000780)="$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") socket$nl_sock_diag(0x10, 0x3, 0x4) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8080c61) (async) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8080c61) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x400, &(0x7f00000ce000/0x1000)=nil, 0x3) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40, 0x42, 0x5c}) 2.103858213s ago: executing program 5 (id=1722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8910, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @remote}, 0x8000, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) socket$inet6(0xa, 0x80002, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000240)={0x28, 0x0, 0x0, @hyper}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) 1.956123548s ago: executing program 8 (id=1724): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4087, 0xff7) 1.905713029s ago: executing program 8 (id=1725): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) fsmount(0xffffffffffffffff, 0x0, 0x4) 1.752188074s ago: executing program 4 (id=1727): r0 = syz_io_uring_setup(0x2f8d, &(0x7f0000000540)={0x0, 0xc383, 0x0, 0x3, 0x200004}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)) syz_io_uring_modify_offsets$generic(r1, r2, 0x50, 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x10000004}) 1.601609839s ago: executing program 4 (id=1729): setrlimit(0x2, &(0x7f00000000c0)={0x2000000, 0xffffffffffffffff}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) 1.492012612s ago: executing program 2 (id=1731): r0 = socket(0x11, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) syz_emit_ethernet(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r1, 0xfffffffffffffffd, 0xbb) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x810) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$TCSETS(r2, 0x545c, 0x0) 1.462914773s ago: executing program 8 (id=1732): r0 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000180)={@dev, @empty}, &(0x7f00000001c0)=0xc) 1.378638596s ago: executing program 4 (id=1734): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="04010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542b0000880ac000080060005002100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a00fffc00000000ff020000000000000000000000000001000000001400040002000000ac1414aa00000000000000004800098028000080060001000a0000001400020000000000000000000000ffffe000000205000300000000001cbcb47def472350ce00000008000200e0000002050003000000000014000200776730"], 0x104}}, 0x0) 1.378314466s ago: executing program 4 (id=1735): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@discard}, {@errors_remount}, {@noinit_itable}, {@abort}, {@noauto_da_alloc}, {@errors_continue}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIy10Kc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4UuwQWUqtzweOdO7Rvfqeo4uO7rn3cBVA3zoVEacj4kG1Wj0bEcON8kwjxWY91da7f+/WTC0lUa1e/SyJSOpltdXGtrznkcZmByPir3+K+EfyZNzy+sbidLFYWG0s5ytLK/ny+sa5haXp+cJ8YXlycuLi1KWpC1PjHWnnUERc/sNH///Pa3+8/Navbrx/7ZOxfyaN8ohH7ei0etOz6WfRNBgRq3sRrEcG0xYCAPB90DzO/3lEnI3hGEiP5gAAAID9pPrbofgmiagCAAAA+1YmnQObZHKNeQBDkcnkcvU5vD+Ow5liqVz55VxpbXm2Pld2JLKZuYViYbwxV3gksklteSLNP1o+v215MiKORcT/hg+ly7mZUnG21yc/AAAAoE8c2Tb+/3K4Pv7f4uueVQ4AAADonJFeVwAAAADYc8b/AAAAsP8Z/wMAAMC+9ucrV2qp2vz/69nr62uLpevnZgvlxdzS2kxuprS6kpsvlebTe/Yt7fR+xVJp5dexvHYzXymUK/ny+sa1pdLacuXawmN/gQ0AAAB00bGf3XkviYjN3xxKU82BXlcK6IrBZ1n5w72rB9B9A72uANAzz/T7D+wr2V5XAOi5ZIfX207eebvzdQEAAPbG6E9aX/8f2PHcwGamS1UE9ojzf9C/XP+H/uX6P/SvbAyEgTz0t51uAfr81/+r1WeqEAAA0HFDaUoyuYj0PMBQZDK5XMTRdEyQTeYWioXxiPhhRLw7nP1BbXki3TLZcc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAPa1iMzHSXo3/4jR4TND288PHEi+Gk6fI+LGK1dfujldqaxO1Mo/f1heeblRfr4XZzAAAACA7Zrj9OY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66f69WzPN1M24n/4+IkZaxR+Mg+nzwchGxOEvkhjcsl0SEQMdiL95OyKOt4qf1KoVI41atIp/qMfxj3QgPvSzO7X+53etvn+ZOJU+t/7+XUx7qOfXvv/LPOz/BlrEr5Ud3WWME3ffyLeNfzvixGDr/qcZP2nT/5zeZfy//21jo91r1VcjRlv+/iSPxcpXllby5fWNcwtL0/OF+cLy5OTExalLUxemxvNzC8VC47FljP/+9M0HT2v/4TbxR3Zo/5ldtv/buzfv/aiezT7cPHkUf+x06/1/vE38TGP//6KRr70+2sxv1vNbnXz9nZNPa/9sm/bvtP/Hdtn+s3/59we7XBUA6ILy+sbidLFYWO3rzHN9GrXDoheiFS9mpva5vgDVaJn51x68c+3IvNft6kSmp90SAACwB54cAwMAAAAAAAAAAAAAAAAAAADd1o3biWW3xdxMHztx93wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM75LgAA///6fNJN") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2200008, &(0x7f00000003c0)={[{@data_err_abort}, {@init_itable}, {@norecovery}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@inlinecrypt}, {@grpquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}]}, 0x3, 0x5ad, &(0x7f0000001000)="$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") io_setup(0x5, 0x0) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee00, 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x40, 0x1}, 0x48) 1.377794326s ago: executing program 8 (id=1736): socket$igmp(0x2, 0x3, 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x100000000000, 0x0, 0x0, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write(r2, 0x0, 0x0) 1.136170114s ago: executing program 5 (id=1737): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x181402, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0x6, 0x3737a905e49f7b56, 0xc}) 1.127671264s ago: executing program 5 (id=1738): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x22181) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, 0x0) 964.185559ms ago: executing program 5 (id=1740): prlimit64(0x0, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48810}}], 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000002, 0x0, 0x0, 0x83, "00008000effffd000000ffff000000007200"}) r1 = syz_open_pts(r0, 0x0) poll(&(0x7f0000000000)=[{r1, 0xa}], 0x1, 0xa1) r2 = dup3(r1, r0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000bc0)={0x7, 0xdac0, 0x8, 0x7, 0x13, "4dd5d26bd8b1eb227705ecfba7288d29559dba", 0x7, 0xa4}) 619.70161ms ago: executing program 5 (id=1744): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000440)={0x1, 0x4, 0x1, 0xde3a, @vifc_lcl_ifindex, @broadcast}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) 605.526211ms ago: executing program 2 (id=1745): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c0007"], 0x40c}}, 0x4000000) 556.042182ms ago: executing program 6 (id=1746): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800700, &(0x7f0000000cc0)={[{@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@oldalloc}, {@grpquota}, {@usrjquota}, {@oldalloc}]}, 0xb, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") chdir(&(0x7f0000000400)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 499.664354ms ago: executing program 2 (id=1747): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4, 0x3c}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 474.892915ms ago: executing program 4 (id=1748): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 436.405916ms ago: executing program 8 (id=1749): socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x1000011, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff3]}, 0x8, 0x80000) unshare(0x2040600) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) 328.182759ms ago: executing program 2 (id=1750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) bind$netlink(r0, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfe, 0x281a5faa01ef99b3}, 0xc) 299.470281ms ago: executing program 2 (id=1751): r0 = syz_io_uring_setup(0x2f8d, &(0x7f0000000540)={0x0, 0xc383, 0x0, 0x3, 0x200004}, &(0x7f0000000240), &(0x7f0000000140), &(0x7f0000000000)) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x10000004}) 260.972901ms ago: executing program 2 (id=1752): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x801, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000200)={{[0xffff, 0x1, 0x40]}, 0x0, 0x2, 0xa021, 0x0, &(0x7f0000000040)=[{{@align=0x660f, {0x2, 0x3, 0x9, 0x1}}, 0x2, 0x0, 'tasks\x00'}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r2, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x1, 0x4) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc534, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xf, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io(r4, &(0x7f0000000140)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="40213b0000003b01f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d454aa4fbf6fc93f080825"], 0x0, 0x0, 0x0, 0x0}, 0x0) 199.842364ms ago: executing program 6 (id=1753): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, 0x0, 0x0}, 0x20) 199.556634ms ago: executing program 5 (id=1754): r0 = eventfd2(0x0, 0x0) epoll_create1(0x0) r1 = epoll_create(0x5727) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x181) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000001640)={0x1, 0x1, 0x15, 0x1d, 0x39, &(0x7f0000001240)}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000040), 0x4, 0xbbf, &(0x7f0000000680)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x1, 0x0, &(0x7f0000000140)) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x474283, 0x0, 0x14}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000004}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000740)={0x2c, &(0x7f0000000140)={0x40, 0xd, 0x2, {0x2, 0xc}}, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0, 0x0}, &(0x7f0000000b80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x40, 0x13, 0x6, @random="5bafe747e5ae"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0xa}}) syz_usb_ep_write(r4, 0x81, 0xf1, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d") 175.106614ms ago: executing program 4 (id=1755): r0 = socket(0x11, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) syz_emit_ethernet(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r1, 0xfffffffffffffffd, 0xbb) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x810) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$TCSETS(r2, 0x545c, 0x0) 115.210976ms ago: executing program 8 (id=1756): prlimit64(0x0, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48810}}], 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000002, 0x0, 0x0, 0x83, "00008000effffd000000ffff000000007200"}) r1 = syz_open_pts(r0, 0x0) poll(&(0x7f0000000000)=[{r1, 0xa}], 0x1, 0xa1) r2 = dup3(r1, r0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000bc0)={0x7, 0xdac0, 0x8, 0x7, 0x13, "4dd5d26bd8b1eb227705ecfba7288d29559dba", 0x7, 0xa4}) 115.070407ms ago: executing program 6 (id=1757): getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x76, 0x101301) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000440)=@urb_type_iso={0x0, {0x1, 0x1}, 0x402, 0x2, 0x0, 0x0, 0x2, 0x3, 0x3f, 0x1, 0x8001, 0x0}) 24.169579ms ago: executing program 6 (id=1758): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/pid\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 24.001139ms ago: executing program 6 (id=1759): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x4, 0x30, 0x64, 0x0, 0x2, 0x1, 0x0, @remote, @multicast1}, @parameter_prob={0xc, 0x0, 0x0, 0xf, 0x10, 0x0, {0x5, 0x4, 0x1, 0x7, 0x757, 0x68, 0xb, 0x6a, 0xc, 0x0, @rand_addr=0x64010101, @multicast1}}}}}}, 0x0) 0s ago: executing program 6 (id=1760): r0 = socket$packet(0x11, 0x3, 0x300) fcntl$setstatus(r0, 0x4, 0x800) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/87, 0x57}], 0x1) kernel console output (not intermixed with test programs): ytes left [ 142.350982][ T7611] team0: Device gtp0 is of different type [ 142.521061][ T7613] loop5: detected capacity change from 0 to 512 [ 143.324498][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.768609][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 143.768624][ T28] audit: type=1400 audit(1780698595.926:879): avc: denied { bind } for pid=7619 comm="syz.4.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 143.791257][ T28] audit: type=1326 audit(1780698595.946:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.4.936" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b1ace59 code=0x7ffc0000 [ 143.791395][ T28] audit: type=1326 audit(1780698595.946:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.4.936" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b1ace59 code=0x7ffc0000 [ 143.791486][ T28] audit: type=1326 audit(1780698595.946:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.4.936" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b1ace59 code=0x7ffc0000 [ 143.791916][ T28] audit: type=1326 audit(1780698595.946:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.4.936" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b1ace59 code=0x7ffc0000 [ 143.792029][ T28] audit: type=1326 audit(1780698595.946:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.4.936" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f6c0b1ace59 code=0x7ffc0000 [ 143.792216][ T28] audit: type=1326 audit(1780698595.946:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.4.936" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b1ace59 code=0x7ffc0000 [ 143.794403][ T28] audit: type=1326 audit(1780698595.946:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.4.936" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b1ace59 code=0x7ffc0000 [ 143.794564][ T28] audit: type=1326 audit(1780698595.956:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.4.936" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b1ace59 code=0x7ffc0000 [ 143.794981][ T28] audit: type=1326 audit(1780698595.956:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7619 comm="syz.4.936" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b1ace59 code=0x7ffc0000 [ 144.081322][ T7637] netlink: 'syz.5.941': attribute type 1 has an invalid length. [ 144.127971][ T7635] loop5: detected capacity change from 0 to 1024 [ 144.893325][ T7664] loop5: detected capacity change from 0 to 256 [ 144.950006][ T7664] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.610178][ T7671] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.952'. [ 145.632816][ T7669] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.952'. [ 145.724190][ T7680] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.952'. [ 146.012615][ T7695] loop6: detected capacity change from 0 to 4096 [ 146.190274][ T7695] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.623752][ T4967] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.680458][ T7716] loop6: detected capacity change from 0 to 4096 [ 146.688218][ T7716] EXT4-fs: Ignoring removed bh option [ 146.785639][ T7716] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.818966][ T7723] team0: Device gtp0 is of different type [ 146.852957][ T4967] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.895983][ T7727] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 146.919893][ T7727] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 147.102717][ T7747] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.977'. [ 147.117637][ T7738] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.977'. [ 147.154536][ T7738] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.977'. [ 147.244099][ T7761] netlink: 48 bytes leftover after parsing attributes in process `syz.6.986'. [ 147.253572][ T7761] netlink: 24 bytes leftover after parsing attributes in process `syz.6.986'. [ 147.263017][ T7761] netlink: 24 bytes leftover after parsing attributes in process `syz.6.986'. [ 147.272127][ T7761] netlink: 40 bytes leftover after parsing attributes in process `syz.6.986'. [ 147.914180][ T7783] loop6: detected capacity change from 0 to 512 [ 147.931759][ T7783] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 147.957841][ T7783] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.993: invalid indirect mapped block 9 (level 0) [ 147.972849][ T7783] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 147.973082][ T7783] EXT4-fs (loop6): 1 truncate cleaned up [ 147.987914][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 147.987935][ C0] EXT4-fs (loop6): initial error at time 1780698600: ext4_free_branches:1023: inode 11 [ 147.987967][ C0] EXT4-fs (loop6): last error at time 1780698600: ext4_free_branches:1023: inode 11 [ 148.014294][ T7783] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.029864][ T7773] loop4: detected capacity change from 0 to 512 [ 148.043556][ T7773] EXT4-fs: Ignoring removed orlov option [ 148.059894][ T7773] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 148.088268][ T7773] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.989: invalid indirect mapped block 32768 (level 2) [ 148.103979][ T7773] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 148.105707][ T7773] EXT4-fs (loop4): 1 orphan inode deleted [ 148.115149][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 148.115199][ C0] EXT4-fs (loop4): initial error at time 1780698600: ext4_free_branches:1023: inode 16 [ 148.115536][ C0] EXT4-fs (loop4): last error at time 1780698600: ext4_free_branches:1023: inode 16 [ 148.154399][ T7773] EXT4-fs (loop4): 1 truncate cleaned up [ 148.175474][ T7773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.185601][ T7795] team0: Device gtp0 is of different type [ 148.222138][ T4967] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.631459][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.748649][ T35] IPVS: starting estimator thread 0... [ 148.842707][ T7842] IPVS: using max 2304 ests per chain, 115200 per kthread [ 148.848627][ T7852] loop6: detected capacity change from 0 to 2048 [ 148.879052][ T7852] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.928928][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 148.928943][ T28] audit: type=1400 audit(1780698601.086:954): avc: denied { write } for pid=7851 comm="syz.6.1019" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.981006][ T7862] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7862 comm=syz.4.1024 [ 148.994486][ T7862] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7862 comm=syz.4.1024 [ 149.007559][ T7862] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.010341][ T28] audit: type=1400 audit(1780698601.116:955): avc: denied { map } for pid=7851 comm="syz.6.1019" path="/165/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 149.020591][ T7862] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 149.058639][ T4967] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.073143][ T28] audit: type=1400 audit(1780698601.116:956): avc: denied { execute } for pid=7851 comm="syz.6.1019" path="/165/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 149.175669][ T7874] loop6: detected capacity change from 0 to 128 [ 149.177172][ T7870] team0: Device gtp0 is of different type [ 149.188605][ T7874] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 149.458754][ T7883] loop2: detected capacity change from 0 to 512 [ 150.147408][ T28] audit: type=1400 audit(1780698602.306:957): avc: denied { getopt } for pid=7901 comm="syz.7.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 150.182209][ T7900] loop4: detected capacity change from 0 to 2048 [ 150.224959][ T7900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.261259][ T28] audit: type=1400 audit(1780698602.416:958): avc: denied { write } for pid=7899 comm="syz.4.1040" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.301103][ T7900] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 150.339837][ T7912] sctp: [Deprecated]: syz.7.1045 (pid 7912) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.339837][ T7912] Use struct sctp_sack_info instead [ 150.385269][ T4104] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 150.404640][ T7900] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 150.444401][ T7912] loop7: detected capacity change from 0 to 2048 [ 150.472660][ T7900] EXT4-fs (loop4): This should not happen!! Data will be lost [ 150.472660][ T7900] [ 150.489605][ T7917] sctp: [Deprecated]: syz.5.1047 (pid 7917) Use of int in max_burst socket option. [ 150.489605][ T7917] Use struct sctp_assoc_value instead [ 150.515363][ T7912] loop7: p3 < > p4 < > [ 150.520994][ T7912] loop7: partition table partially beyond EOD, truncated [ 150.528879][ T7900] EXT4-fs (loop4): Total free blocks count 0 [ 150.546235][ T7912] loop7: p3 start 4284289 is beyond EOD, truncated [ 150.554069][ T7900] EXT4-fs (loop4): Free/Dirty block details [ 150.566811][ T7923] netlink: 'syz.6.1049': attribute type 8 has an invalid length. [ 150.576641][ T7900] EXT4-fs (loop4): free_blocks=2415919104 [ 150.603043][ T7900] EXT4-fs (loop4): dirty_blocks=16 [ 150.624687][ T7900] EXT4-fs (loop4): Block reservation details [ 150.651888][ T7900] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 150.700364][ T4122] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 150.736017][ T3302] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 150.752018][ T7923] loop6: detected capacity change from 0 to 512 [ 150.803853][ T7923] EXT4-fs: Mount option(s) incompatible with ext2 [ 150.825436][ T7937] __nla_validate_parse: 6 callbacks suppressed [ 150.825451][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1052'. [ 151.169333][ T3682] IPVS: starting estimator thread 0... [ 151.232680][ T7961] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1061'. [ 151.303047][ T7964] IPVS: using max 2448 ests per chain, 122400 per kthread [ 151.583736][ T28] audit: type=1400 audit(1780698603.746:959): avc: denied { connect } for pid=7966 comm="syz.7.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 151.831206][ T7975] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1069'. [ 151.861429][ T7982] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1069'. [ 151.889608][ T7975] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1069'. [ 152.489074][ T7955] syz.6.1061 (7955) used greatest stack depth: 8504 bytes left [ 152.619987][ T8002] loop2: detected capacity change from 0 to 128 [ 152.712031][ T8002] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 152.721043][ T8002] FAT-fs (loop2): Filesystem has been set read-only [ 152.774547][ T8004] loop4: detected capacity change from 0 to 4096 [ 152.787043][ T8004] EXT4-fs: Ignoring removed bh option [ 152.808654][ T8004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.829500][ T28] audit: type=1400 audit(1780698604.986:960): avc: denied { write } for pid=8003 comm="syz.4.1079" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 152.851847][ T8004] EXT4-fs error (device loop4): ext4_empty_dir:3101: inode #12: block 80: comm syz.4.1079: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 152.877504][ T8004] EXT4-fs warning (device loop4): ext4_empty_dir:3104: inode #12: comm syz.4.1079: directory missing '..' [ 152.906705][ T8025] bond1: entered promiscuous mode [ 152.912586][ T8025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.932374][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.267746][ T8042] loop5: detected capacity change from 0 to 512 [ 153.297018][ T8043] syzkaller0: entered promiscuous mode [ 153.302624][ T8043] syzkaller0: entered allmulticast mode [ 153.332586][ T28] audit: type=1400 audit(1780698605.266:961): avc: denied { create } for pid=8035 comm="syz.6.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 153.541348][ T28] audit: type=1400 audit(1780698605.686:962): avc: denied { create } for pid=8039 comm="syz.4.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 154.473315][ T8066] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1097'. [ 154.566884][ T8063] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1097'. [ 154.719526][ T8073] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1097'. [ 155.063949][ T28] audit: type=1400 audit(1780698607.216:963): avc: denied { watch_reads } for pid=8079 comm="syz.7.1104" path="/78/control" dev="tmpfs" ino=418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 155.371296][ T8105] loop2: detected capacity change from 0 to 512 [ 155.382106][ T8105] EXT4-fs: Ignoring removed orlov option [ 156.202721][ T8105] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 157.476191][ T8107] loop4: detected capacity change from 0 to 512 [ 157.488064][ T8107] EXT4-fs: Ignoring removed orlov option [ 158.342740][ T8105] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1109: invalid indirect mapped block 32768 (level 2) [ 158.356660][ T8105] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 158.357586][ T8107] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 158.367008][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 158.367119][ C1] EXT4-fs (loop2): initial error at time 1780698610: ext4_free_branches:1023: inode 16 [ 158.367248][ C1] EXT4-fs (loop2): last error at time 1780698610: ext4_free_branches:1023: inode 16 [ 158.452646][ T8087] syz.7.1104 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 158.473313][ T8087] CPU: 0 UID: 0 PID: 8087 Comm: syz.7.1104 Not tainted syzkaller #0 PREEMPT(lazy) [ 158.473338][ T8087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 158.473350][ T8087] Call Trace: [ 158.473357][ T8087] [ 158.473364][ T8087] __dump_stack+0x1d/0x30 [ 158.473467][ T8087] dump_stack_lvl+0x95/0xd0 [ 158.473485][ T8087] dump_stack+0x15/0x1b [ 158.473501][ T8087] dump_header+0x80/0x240 [ 158.473521][ T8087] oom_kill_process+0x295/0x350 [ 158.473631][ T8087] out_of_memory+0x97d/0xb80 [ 158.473666][ T8087] try_charge_memcg+0x62f/0xa10 [ 158.473723][ T8087] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 158.473750][ T8087] __alloc_frozen_pages_noprof+0x18a/0x350 [ 158.473862][ T8087] alloc_pages_mpol+0xb3/0x260 [ 158.473889][ T8087] alloc_pages_noprof+0x8f/0x140 [ 158.473917][ T8087] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 158.473954][ T8087] __kvmalloc_node_noprof+0x3d4/0x640 [ 158.473977][ T8087] ? futex_hash_allocate+0x190/0x9a0 [ 158.474008][ T8087] ? futex_hash_allocate+0x190/0x9a0 [ 158.474186][ T8087] futex_hash_allocate+0x190/0x9a0 [ 158.474224][ T8087] ? __schedule+0x951/0xd40 [ 158.474250][ T8087] ? cap_task_prctl+0x13f/0x6b0 [ 158.474274][ T8087] futex_hash_prctl+0xd8/0xf0 [ 158.474309][ T8087] __se_sys_prctl+0x4f4/0x1400 [ 158.474400][ T8087] __x64_sys_prctl+0x67/0x80 [ 158.474423][ T8087] x64_sys_call+0x2533/0x3020 [ 158.474465][ T8087] do_syscall_64+0x12c/0x3b0 [ 158.474524][ T8087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.474548][ T8087] RIP: 0033:0x7ff5f986ce59 [ 158.474569][ T8087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.474618][ T8087] RSP: 002b:00007ff5f82a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 158.474641][ T8087] RAX: ffffffffffffffda RBX: 00007ff5f9ae6090 RCX: 00007ff5f986ce59 [ 158.474658][ T8087] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 158.474673][ T8087] RBP: 00007ff5f9902d6f R08: 0000000000000000 R09: 0000000000000000 [ 158.474687][ T8087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.474774][ T8087] R13: 00007ff5f9ae6128 R14: 00007ff5f9ae6090 R15: 00007fff6f0392b8 [ 158.474796][ T8087] [ 158.475012][ T8087] memory: usage 307200kB, limit 307200kB, failcnt 79 [ 159.094456][ T8087] memory+swap: usage 285060kB, limit 9007199254740988kB, failcnt 0 [ 159.106527][ T8105] EXT4-fs (loop2): 1 orphan inode deleted [ 159.112756][ T8105] EXT4-fs (loop2): 1 truncate cleaned up [ 159.121706][ T8105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.163360][ T8107] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1110: invalid indirect mapped block 32768 (level 2) [ 159.163467][ T8087] kmem: usage 284624kB, limit 9007199254740988kB, failcnt 0 [ 159.177433][ T8087] Memory cgroup stats for /syz7: [ 159.177615][ T8087] cache 0 [ 159.177625][ T8087] rss 16384 [ 159.177632][ T8087] shmem 0 [ 159.177640][ T8087] mapped_file 0 [ 159.177647][ T8087] dirty 0 [ 159.185440][ T8107] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 159.190431][ T8087] writeback 0 [ 159.197718][ T8107] EXT4-fs (loop4): 1 orphan inode deleted [ 159.199524][ T8087] workingset_refault_anon 23 [ 159.203129][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 159.206122][ T8087] workingset_refault_file 0 [ 159.206132][ T8087] swap 172032 [ 159.206140][ T8087] swapcached 6340608 [ 159.206148][ T8087] pgpgin 36248 [ 159.206156][ T8087] pgpgout 36239 [ 159.206164][ T8087] pgfault 50643 [ 159.206172][ T8087] pgmajfault 10 [ 159.206179][ T8087] inactive_anon 12288 [ 159.206188][ T8087] active_anon 24576 [ 159.206196][ T8087] inactive_file 0 [ 159.206204][ T8087] active_file 0 [ 159.206212][ T8087] unevictable 0 [ 159.206239][ T8087] hierarchical_memory_limit 314572800 [ 159.206248][ T8087] hierarchical_memsw_limit 9223372036854771712 [ 159.206259][ T8087] total_cache 0 [ 159.206266][ T8087] total_rss 16384 [ 159.206274][ T8087] total_shmem 0 [ 159.206282][ T8087] total_mapped_file 0 [ 159.206291][ T8087] total_dirty 0 [ 159.206299][ T8087] total_writeback 0 [ 159.206372][ T8087] total_workingset_refault_anon 23 [ 159.206382][ T8087] total_workingset_refault_file 0 [ 159.206390][ T8087] total_swap 172032 [ 159.206397][ T8087] total_swapcached 6340608 [ 159.206405][ T8087] total_pgpgin 36248 [ 159.206461][ T8087] total_pgpgout 36239 [ 159.206469][ T8087] total_pgfault 50643 [ 159.206477][ T8087] total_pgmajfault 10 [ 159.206486][ T8087] total_inactive_anon 12288 [ 159.206495][ T8087] total_active_anon 24576 [ 159.206518][ T8087] total_inactive_file 0 [ 159.206527][ T8087] total_active_file 0 [ 159.206535][ T8087] total_unevictable 0 [ 159.206544][ T8087] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg= [ 159.215829][ C1] EXT4-fs (loop4): initial error at time 1780698611: ext4_free_branches:1023 [ 159.222621][ T8087] /syz7 [ 159.225059][ C1] : inode 16 [ 159.230029][ T8087] ,task=syz.7.1104,pid=8079,uid=0 [ 159.230085][ T8087] Memory cgroup out of memory: Killed process 8079 (syz.7.1104) total-vm:98536kB, anon-rss:1248kB, file-rss:26640kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 159.262529][ T8112] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, [ 159.263096][ C1] [ 159.266537][ T8112] block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 159.439064][ C1] EXT4-fs (loop4): last error at time 1780698611: ext4_free_branches:1023: inode 16 [ 159.482387][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.504546][ T8107] EXT4-fs (loop4): 1 truncate cleaned up [ 159.513809][ T8107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.593656][ T8126] loop7: detected capacity change from 0 to 512 [ 159.602252][ T8126] EXT4-fs error (device loop7): __ext4_fill_super:5596: inode #2: comm syz.7.1117: iget: bad extended attribute block 2037609061 [ 159.624174][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.682930][ T8126] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 159.683938][ T8126] EXT4-fs (loop7): get root inode failed [ 159.693121][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 159.693143][ C0] EXT4-fs (loop7): initial error at time 1780698611: __ext4_fill_super:5596: inode 2 [ 159.693181][ C0] EXT4-fs (loop7): last error at time 1780698611: __ext4_fill_super:5596: inode 2 [ 159.745271][ T8133] loop5: detected capacity change from 0 to 512 [ 159.785951][ T8126] EXT4-fs (loop7): mount failed [ 159.845515][ T8133] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 159.854098][ T8133] EXT4-fs (loop5): orphan cleanup on readonly fs [ 159.866378][ T8133] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 159.881817][ T8133] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 159.889418][ T8133] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1120: bg 0: block 64: padding at end of block bitmap is not set [ 159.907277][ T8133] loop5: lost filesystem error report for type 5 error -117 [ 159.907824][ T8133] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 159.915249][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 159.915263][ C0] EXT4-fs (loop5): initial error at time 1780698612: ext4_validate_block_bitmap:441 [ 159.915281][ C0] EXT4-fs (loop5): last error at time 1780698612: ext4_validate_block_bitmap:441 [ 159.954040][ T8133] loop5: lost filesystem error report for type 5 error -117 [ 159.954966][ T8133] EXT4-fs (loop5): 1 truncate cleaned up [ 159.972245][ T8133] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 159.986559][ T8133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.382532][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1132'. [ 160.383010][ T8165] loop7: detected capacity change from 0 to 4096 [ 160.417915][ T8165] EXT4-fs: Ignoring removed bh option [ 160.435311][ T8165] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.452642][ T8178] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1135'. [ 160.465003][ T8165] FAULT_INJECTION: forcing a failure. [ 160.465003][ T8165] name failslab, interval 1, probability 0, space 0, times 0 [ 160.477878][ T8176] loop5: detected capacity change from 0 to 4096 [ 160.484729][ T8176] EXT4-fs: Ignoring removed bh option [ 160.525798][ T8176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.557524][ T8165] CPU: 1 UID: 0 PID: 8165 Comm: syz.7.1131 Not tainted syzkaller #0 PREEMPT(lazy) [ 160.557553][ T8165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.557564][ T8165] Call Trace: [ 160.557572][ T8165] [ 160.557579][ T8165] __dump_stack+0x1d/0x30 [ 160.557647][ T8165] dump_stack_lvl+0x95/0xd0 [ 160.557668][ T8165] dump_stack+0x15/0x1b [ 160.557683][ T8165] should_fail_ex+0x263/0x280 [ 160.557765][ T8165] should_failslab+0x8c/0xb0 [ 160.557789][ T8165] __kmalloc_noprof+0xb8/0x4d0 [ 160.557818][ T8165] ? ext4_find_extent+0x17a/0x790 [ 160.557844][ T8165] ext4_find_extent+0x17a/0x790 [ 160.557922][ T8165] ? __account_obj_stock+0x3ba/0x5f0 [ 160.557945][ T8165] ? xas_load+0x413/0x430 [ 160.557967][ T8165] ext4_ext_map_blocks+0x10d/0x2ea0 [ 160.558033][ T8165] ? xa_load+0xb1/0xe0 [ 160.558061][ T8165] ? memcg_list_lru_alloc+0xd0/0x4f0 [ 160.558085][ T8165] ? __account_obj_stock+0x3ba/0x5f0 [ 160.558156][ T8165] ? __account_obj_stock+0x3ba/0x5f0 [ 160.558178][ T8165] ? avc_has_perm_noaudit+0xab/0x130 [ 160.558209][ T8165] ext4_map_query_blocks+0xb2/0x550 [ 160.558281][ T8165] ? ext4_es_lookup_extent+0x3a2/0x500 [ 160.558312][ T8165] ext4_map_blocks+0x306/0x970 [ 160.558367][ T8165] ext4_getblk+0x128/0x530 [ 160.558451][ T8165] ext4_bread_batch+0x5c/0x320 [ 160.558505][ T8165] __ext4_find_entry+0x852/0xdf0 [ 160.558534][ T8165] ? kmem_cache_alloc_lru_noprof+0x1eb/0x400 [ 160.558621][ T8165] ? __d_alloc+0x37/0x340 [ 160.558644][ T8165] ext4_lookup+0xcd/0x3a0 [ 160.558671][ T8165] lookup_one_qstr_excl+0xc7/0x240 [ 160.558698][ T8165] filename_rmdir+0x161/0x360 [ 160.558764][ T8165] __se_sys_rmdir+0x2b/0xe0 [ 160.558787][ T8165] __x64_sys_rmdir+0x1f/0x30 [ 160.558809][ T8165] x64_sys_call+0x2448/0x3020 [ 160.558835][ T8165] do_syscall_64+0x12c/0x3b0 [ 160.558867][ T8165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.558889][ T8165] RIP: 0033:0x7ff5f986ce59 [ 160.558906][ T8165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.558922][ T8165] RSP: 002b:00007ff5f82c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 160.558942][ T8165] RAX: ffffffffffffffda RBX: 00007ff5f9ae5fa0 RCX: 00007ff5f986ce59 [ 160.558953][ T8165] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 160.559065][ T8165] RBP: 00007ff5f82c7090 R08: 0000000000000000 R09: 0000000000000000 [ 160.559076][ T8165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.559089][ T8165] R13: 00007ff5f9ae6038 R14: 00007ff5f9ae5fa0 R15: 00007fff6f0392b8 [ 160.559108][ T8165] [ 160.722888][ T28] audit: type=1400 audit(1780698612.786:964): avc: denied { create } for pid=8177 comm="syz.4.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 160.789972][ T8184] loop2: detected capacity change from 0 to 128 [ 160.906300][ T8184] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 160.920561][ T6325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.976393][ T8184] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.999419][ T8176] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1134'. [ 161.010814][ T28] audit: type=1326 audit(1780698613.166:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8174 comm="syz.5.1134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2bd7eece59 code=0x0 [ 161.041247][ T8184] ext2 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.067722][ T28] audit: type=1400 audit(1780698613.226:966): avc: denied { write } for pid=8174 comm="syz.5.1134" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.131811][ T8198] EXT4-fs error (device loop5): ext4_empty_dir:3101: inode #12: block 80: comm syz.5.1134: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 161.133067][ T28] audit: type=1400 audit(1780698613.286:967): avc: denied { write } for pid=8174 comm="syz.5.1134" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.199920][ T8198] EXT4-fs warning (device loop5): ext4_empty_dir:3104: inode #12: comm syz.5.1134: directory missing '..' [ 161.240172][ T3297] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.336954][ T8206] loop6: detected capacity change from 0 to 512 [ 161.366344][ T8206] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 161.381004][ T8214] loop2: detected capacity change from 0 to 512 [ 161.388202][ T3761] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.403744][ T8214] EXT4-fs: inline encryption not supported [ 161.412586][ T8214] ext4: Bad value for 'journal_dev' [ 161.430840][ T8219] 9pnet_fd: p9_fd_create_unix (8219): problem connecting socket: ./file0: -2 [ 161.456463][ T8206] EXT4-fs (loop6): 1 truncate cleaned up [ 161.499106][ T8206] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.570495][ T8233] loop5: detected capacity change from 0 to 512 [ 161.608621][ T4967] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.626729][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1157'. [ 161.675858][ T8233] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1154'. [ 161.686107][ T8233] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1154'. [ 161.710177][ T8243] team0: Device gtp0 is of different type [ 161.736412][ T8233] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.816904][ T8251] syzkaller0: entered promiscuous mode [ 161.823183][ T8251] syzkaller0: entered allmulticast mode [ 162.105421][ T8261] netlink: 'syz.7.1166': attribute type 21 has an invalid length. [ 162.147149][ T8261] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1166'. [ 162.714411][ T8275] loop7: detected capacity change from 0 to 4096 [ 162.779622][ T8275] EXT4-fs: Ignoring removed bh option [ 162.871871][ T8275] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.953883][ T8275] FAULT_INJECTION: forcing a failure. [ 162.953883][ T8275] name failslab, interval 1, probability 0, space 0, times 0 [ 162.966606][ T8275] CPU: 0 UID: 0 PID: 8275 Comm: syz.7.1170 Not tainted syzkaller #0 PREEMPT(lazy) [ 162.966627][ T8275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 162.966671][ T8275] Call Trace: [ 162.966679][ T8275] [ 162.966688][ T8275] __dump_stack+0x1d/0x30 [ 162.966785][ T8275] dump_stack_lvl+0x95/0xd0 [ 162.966935][ T8275] dump_stack+0x15/0x1b [ 162.966951][ T8275] should_fail_ex+0x263/0x280 [ 162.966970][ T8275] should_failslab+0x8c/0xb0 [ 162.967004][ T8275] kmem_cache_alloc_noprof+0x66/0x3f0 [ 162.967089][ T8275] ? __es_insert_extent+0x508/0xee0 [ 162.967156][ T8275] __es_insert_extent+0x508/0xee0 [ 162.967186][ T8275] ? xas_load+0x413/0x430 [ 162.967209][ T8275] ext4_es_cache_extent+0x37e/0x5a0 [ 162.967400][ T8275] ext4_find_extent+0x341/0x790 [ 162.967421][ T8275] ext4_ext_map_blocks+0x10d/0x2ea0 [ 162.967443][ T8275] ? xa_load+0xb1/0xe0 [ 162.967483][ T8275] ? memcg_list_lru_alloc+0xd0/0x4f0 [ 162.967506][ T8275] ? __account_obj_stock+0x3ba/0x5f0 [ 162.967529][ T8275] ? __account_obj_stock+0x3ba/0x5f0 [ 162.967565][ T8275] ? avc_has_perm_noaudit+0xab/0x130 [ 162.967592][ T8275] ext4_map_query_blocks+0xb2/0x550 [ 162.967620][ T8275] ? ext4_es_lookup_extent+0x3a2/0x500 [ 162.967651][ T8275] ext4_map_blocks+0x306/0x970 [ 162.967775][ T8275] ext4_getblk+0x128/0x530 [ 162.967804][ T8275] ext4_bread_batch+0x5c/0x320 [ 162.967836][ T8275] __ext4_find_entry+0x852/0xdf0 [ 162.967915][ T8275] ? kmem_cache_alloc_lru_noprof+0x1eb/0x400 [ 162.968007][ T8275] ? __d_alloc+0x37/0x340 [ 162.968027][ T8275] ext4_lookup+0xcd/0x3a0 [ 162.968052][ T8275] lookup_one_qstr_excl+0xc7/0x240 [ 162.968093][ T8275] filename_rmdir+0x161/0x360 [ 162.968133][ T8275] __se_sys_rmdir+0x2b/0xe0 [ 162.968157][ T8275] __x64_sys_rmdir+0x1f/0x30 [ 162.968179][ T8275] x64_sys_call+0x2448/0x3020 [ 162.968301][ T8275] do_syscall_64+0x12c/0x3b0 [ 162.968349][ T8275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.968367][ T8275] RIP: 0033:0x7ff5f986ce59 [ 162.968381][ T8275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.968396][ T8275] RSP: 002b:00007ff5f82c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 162.968436][ T8275] RAX: ffffffffffffffda RBX: 00007ff5f9ae5fa0 RCX: 00007ff5f986ce59 [ 162.968450][ T8275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 162.968463][ T8275] RBP: 00007ff5f82c7090 R08: 0000000000000000 R09: 0000000000000000 [ 162.968474][ T8275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.968485][ T8275] R13: 00007ff5f9ae6038 R14: 00007ff5f9ae5fa0 R15: 00007fff6f0392b8 [ 162.968518][ T8275] [ 162.968848][ T28] audit: type=1400 audit(1780698615.126:968): avc: denied { write } for pid=8274 comm="syz.7.1170" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.097749][ T8275] EXT4-fs error (device loop7): ext4_empty_dir:3101: inode #12: block 80: comm syz.7.1170: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 163.305233][ T8275] EXT4-fs warning (device loop7): ext4_empty_dir:3104: inode #12: comm syz.7.1170: directory missing '..' [ 163.325864][ T6325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.487032][ T8319] tipc: Enabling of bearer rejected, already enabled [ 163.545449][ T8325] loop4: detected capacity change from 0 to 1024 [ 163.570964][ T8325] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 163.581712][ T8325] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 163.591468][ T8325] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.1193: Failed to acquire dquot type 0 [ 163.604669][ T8325] loop4: lost filesystem error report for type 5 error -117 [ 163.604964][ T8325] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 163.626773][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 163.626794][ C0] EXT4-fs (loop4): initial error at time 1780698615: ext4_acquire_dquot:7034 [ 163.626816][ C0] EXT4-fs (loop4): last error at time 1780698615: ext4_acquire_dquot:7034 [ 163.669538][ T8325] EXT4-fs (loop4): 1 truncate cleaned up [ 163.675710][ T8325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.712216][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.889577][ T8343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1198'. [ 165.359575][ T8358] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1203'. [ 165.410295][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1203'. [ 165.432437][ T8361] Cannot find add_set index 0 as target [ 165.475019][ T8361] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 165.582705][ T8365] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1204'. [ 165.617016][ T8365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.625809][ T8365] bond_slave_0: left allmulticast mode [ 166.019758][ T8365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.129866][ T8372] set_capacity_and_notify: 1 callbacks suppressed [ 166.129882][ T8372] loop4: detected capacity change from 0 to 256 [ 166.286554][ T8365] bond_slave_1: left allmulticast mode [ 166.373531][ T8365] bond0 (unregistering): Released all slaves [ 166.971827][ T3377] syz1: Port: 1 Link DOWN [ 166.979840][ T8369] loop2: detected capacity change from 0 to 8165 [ 167.272004][ T8400] team0: Device gtp0 is of different type [ 168.372842][ T8427] random: crng reseeded on system resumption [ 168.604205][ T28] audit: type=1400 audit(1780698620.526:969): avc: denied { read write } for pid=8412 comm="syz.7.1216" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 168.628802][ T28] audit: type=1400 audit(1780698620.536:970): avc: denied { ioctl open } for pid=8412 comm="syz.7.1216" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 168.653860][ T28] audit: type=1326 audit(1780698620.586:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8428 comm="syz.2.1225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 168.721859][ T8423] loop4: detected capacity change from 0 to 1024 [ 168.744471][ T28] audit: type=1326 audit(1780698620.586:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8428 comm="syz.2.1225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 168.790463][ T8423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.804176][ T28] audit: type=1326 audit(1780698620.586:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8428 comm="syz.2.1225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 168.865060][ T8423] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 168.918306][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.920596][ T28] audit: type=1326 audit(1780698620.586:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8428 comm="syz.2.1225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 169.051025][ T8439] random: crng reseeded on system resumption [ 169.161243][ T8446] loop7: detected capacity change from 0 to 512 [ 169.179258][ T28] audit: type=1326 audit(1780698620.586:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8428 comm="syz.2.1225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=470 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 169.199482][ T8446] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.1233: inode has both inline data and extents flags [ 169.236995][ T8446] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 169.239882][ T8446] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.1233: couldn't read orphan inode 15 (err -117) [ 169.249101][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 169.249122][ C1] EXT4-fs (loop7): initial error at time 1780698621: ext4_orphan_get:1397: inode 15 [ 169.249168][ C1] EXT4-fs (loop7): last error at time 1780698621: ext4_orphan_get:1397: inode 15 [ 169.330534][ T28] audit: type=1326 audit(1780698620.586:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8428 comm="syz.2.1225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 169.428612][ T28] audit: type=1326 audit(1780698620.586:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8428 comm="syz.2.1225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 169.465006][ T8446] loop7: lost filesystem error report for type 5 error -117 [ 169.465735][ T8446] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.492760][ T28] audit: type=1326 audit(1780698620.586:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8428 comm="syz.2.1225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 169.682430][ T8464] loop6: detected capacity change from 0 to 512 [ 170.959409][ T6325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.382439][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1237'. [ 171.662236][ T8475] loop5: detected capacity change from 0 to 2048 [ 171.729898][ T8478] loop6: detected capacity change from 0 to 512 [ 171.736974][ T8475] loop5: p1 p4 [ 171.763098][ T8475] loop5: p4 size 589824 extends beyond EOD, truncated [ 171.889256][ T8478] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 171.992269][ T8478] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 172.229617][ T8483] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.1238'. [ 172.355815][ T8480] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.1238'. [ 172.784900][ T8490] IPVS: set_ctl: invalid protocol: 2 172.30.0.7:20003 [ 172.809637][ T8489] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.1238'. [ 173.182148][ T8508] loop2: detected capacity change from 0 to 1024 [ 173.201870][ T8508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.346701][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.541228][ T8514] loop2: detected capacity change from 0 to 512 [ 173.594224][ T8514] EXT4-fs: Ignoring removed i_version option [ 173.667413][ T8514] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 173.745712][ T8514] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1251: invalid block [ 173.820793][ T8514] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 173.822023][ T8514] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1251: invalid indirect mapped block 4294967295 (level 1) [ 173.831257][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 173.831278][ C0] EXT4-fs (loop2): initial error at time 1780698625: ext4_get_branch:178: inode 11: block 4294967295 [ 173.831308][ C0] EXT4-fs (loop2): last error at time 1780698625: ext4_get_branch:178: inode 11: block 4294967295 [ 173.879219][ T8517] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1248'. [ 174.137799][ T8520] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 174.158411][ T8517] loop7: detected capacity change from 0 to 128 [ 174.193861][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1248'. [ 174.215256][ T8514] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 174.215439][ T8514] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1251: invalid indirect mapped block 4294967295 (level 1) [ 174.307490][ T8514] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 174.307807][ T8514] EXT4-fs (loop2): 2 truncates cleaned up [ 174.367478][ T8514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.427854][ T28] kauditd_printk_skb: 155 callbacks suppressed [ 174.427867][ T28] audit: type=1400 audit(1780698626.586:1134): avc: denied { write } for pid=8513 comm="syz.2.1251" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.505424][ T8514] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1251: bg 0: block 5: invalid block bitmap [ 174.539420][ T28] audit: type=1400 audit(1780698626.626:1135): avc: denied { setattr } for pid=8513 comm="syz.2.1251" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 174.627592][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.655845][ T28] audit: type=1400 audit(1780698626.666:1136): avc: denied { write } for pid=8513 comm="syz.2.1251" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.062458][ T28] audit: type=1400 audit(1780698627.216:1137): avc: denied { name_bind } for pid=8548 comm="syz.5.1261" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 175.154751][ T8551] loop4: detected capacity change from 0 to 256 [ 175.180210][ T8551] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 175.302896][ T8556] sctp: [Deprecated]: syz.5.1264 (pid 8556) Use of int in max_burst socket option. [ 175.302896][ T8556] Use struct sctp_assoc_value instead [ 175.542422][ T28] audit: type=1326 audit(1780698627.676:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8570 comm="syz.2.1267" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 175.614838][ T28] audit: type=1326 audit(1780698627.676:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8570 comm="syz.2.1267" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 175.641069][ T28] audit: type=1326 audit(1780698627.676:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8570 comm="syz.2.1267" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 175.814653][ T28] audit: type=1326 audit(1780698627.676:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8570 comm="syz.2.1267" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 175.922078][ T8584] tipc: Started in network mode [ 175.927266][ T8584] tipc: Node identity ac1414aa, cluster identity 4711 [ 175.940868][ T8584] tipc: Enabled bearer , priority 10 [ 175.960713][ T28] audit: type=1326 audit(1780698627.676:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8570 comm="syz.2.1267" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 176.490668][ T28] audit: type=1326 audit(1780698627.726:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8570 comm="syz.2.1267" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f91a4f3d68e code=0x7ffc0000 [ 177.550395][ T5200] tipc: Node number set to 2886997162 [ 177.587583][ T8630] loop5: detected capacity change from 0 to 4096 [ 177.602130][ T8636] loop4: detected capacity change from 0 to 2048 [ 177.609386][ T8630] EXT4-fs: Ignoring removed bh option [ 177.686801][ T8630] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.760288][ T8636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.861236][ T8630] EXT4-fs error (device loop5): ext4_empty_dir:3101: inode #12: block 80: comm syz.5.1276: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 177.920602][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.952942][ T8630] EXT4-fs warning (device loop5): ext4_empty_dir:3104: inode #12: comm syz.5.1276: directory missing '..' [ 178.039472][ T3761] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.719696][ T8669] team0: Device gtp0 is of different type [ 179.318928][ T8698] loop7: detected capacity change from 0 to 512 [ 179.329973][ T8698] EXT4-fs: Ignoring removed orlov option [ 179.377041][ T8698] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 179.426407][ T8698] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.1290: invalid indirect mapped block 32768 (level 2) [ 179.440884][ T8698] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 179.445766][ T8698] EXT4-fs (loop7): 1 orphan inode deleted [ 179.455146][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 179.455306][ C0] EXT4-fs (loop7): initial error at time 1780698631: ext4_free_branches:1023: inode 16 [ 179.455716][ C0] EXT4-fs (loop7): last error at time 1780698631: ext4_free_branches:1023: inode 16 [ 179.487640][ T8698] EXT4-fs (loop7): 1 truncate cleaned up [ 179.503151][ T8698] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.765045][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 180.772435][ T28] audit: type=1400 audit(1780698632.926:1153): avc: denied { connect } for pid=8711 comm="syz.2.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 180.843132][ T6325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.983569][ T8725] loop4: detected capacity change from 0 to 256 [ 181.000312][ T28] audit: type=1400 audit(1780698632.926:1154): avc: denied { ioctl } for pid=8711 comm="syz.2.1300" path="socket:[19018]" dev="sockfs" ino=19018 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 181.044818][ T8725] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 181.089971][ T8733] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 181.150244][ T8735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.158863][ T8735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.670528][ T8746] loop7: detected capacity change from 0 to 512 [ 182.002254][ T8748] loop2: detected capacity change from 0 to 512 [ 182.138003][ T8748] EXT4-fs: Mount option(s) incompatible with ext2 [ 184.042581][ T8761] loop2: detected capacity change from 0 to 512 [ 184.052067][ T8761] EXT4-fs: Ignoring removed orlov option [ 184.669443][ T8761] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 184.690340][ T8761] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1314: invalid indirect mapped block 32768 (level 2) [ 184.704624][ T8761] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 184.707308][ T8761] EXT4-fs (loop2): 1 orphan inode deleted [ 184.716864][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 184.717021][ C0] EXT4-fs (loop2): initial error at time 1780698636: ext4_free_branches:1023: inode 16 [ 184.717384][ C0] EXT4-fs (loop2): last error at time 1780698636: ext4_free_branches:1023: inode 16 [ 184.751487][ T8761] EXT4-fs (loop2): 1 truncate cleaned up [ 184.761904][ T8761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.009717][ T8783] netlink: 'syz.6.1324': attribute type 1 has an invalid length. [ 185.157668][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.181502][ T8783] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.250275][ T8793] bond2: (slave geneve2): making interface the new active one [ 185.276085][ T8793] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 185.408411][ T28] audit: type=1400 audit(1780698637.566:1155): avc: denied { read } for pid=8782 comm="syz.6.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 185.631514][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1334'. [ 185.641103][ T8816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.660173][ T8816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.694285][ T8819] netlink: 'syz.2.1334': attribute type 1 has an invalid length. [ 185.703652][ T8819] netlink: 'syz.2.1334': attribute type 2 has an invalid length. [ 185.711609][ T8819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1334'. [ 185.883344][ T8823] loop4: detected capacity change from 0 to 512 [ 185.893667][ T8823] EXT4-fs: Ignoring removed orlov option [ 185.966104][ T8823] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 186.001190][ T8823] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1335: invalid indirect mapped block 32768 (level 2) [ 186.015233][ T8823] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 186.018904][ T8823] EXT4-fs (loop4): 1 orphan inode deleted [ 186.028581][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 186.028615][ C1] EXT4-fs (loop4): initial error at time 1780698638: ext4_free_branches:1023: inode 16 [ 186.028937][ C1] EXT4-fs (loop4): last error at time 1780698638: ext4_free_branches:1023: inode 16 [ 186.062897][ T8823] EXT4-fs (loop4): 1 truncate cleaned up [ 186.072921][ T8823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.252952][ T28] audit: type=1400 audit(1780698638.416:1156): avc: denied { watch } for pid=8829 comm="syz.6.1339" path="/238/file0" dev="tmpfs" ino=1254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 186.344263][ T8828] loop5: detected capacity change from 0 to 4096 [ 186.368336][ T8828] EXT4-fs: Ignoring removed bh option [ 186.410862][ T8828] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.594135][ T28] audit: type=1400 audit(1780698638.756:1157): avc: denied { write } for pid=8827 comm="syz.5.1338" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.640601][ T8828] EXT4-fs error (device loop5): ext4_empty_dir:3101: inode #12: block 80: comm syz.5.1338: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 186.737502][ T8828] EXT4-fs warning (device loop5): ext4_empty_dir:3104: inode #12: comm syz.5.1338: directory missing '..' [ 186.752310][ T28] audit: type=1400 audit(1780698638.796:1158): avc: denied { setattr } for pid=8827 comm="syz.5.1338" name="#18" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 186.797472][ T8831] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.856023][ T28] audit: type=1400 audit(1780698638.796:1159): avc: denied { write } for pid=8827 comm="syz.5.1338" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.887346][ T8831] tipc: Resetting bearer [ 186.986481][ T8831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.014613][ T3761] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.037715][ T8831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.288048][ T8835] team0: Device gtp0 is of different type [ 187.298858][ T4080] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.308404][ T4080] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.323509][ T4080] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.342801][ T4080] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.372593][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.767902][ T8861] batman_adv: batadv0: Adding interface: dummy0 [ 187.774493][ T8861] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.800632][ T8861] batman_adv: batadv0: Interface activated: dummy0 [ 188.505700][ T8866] loop4: detected capacity change from 0 to 512 [ 188.517509][ T8866] EXT4-fs: Ignoring removed orlov option [ 188.532166][ T8866] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 188.568929][ T8866] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1352: invalid indirect mapped block 32768 (level 2) [ 188.582983][ T8866] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 188.585900][ T8866] EXT4-fs (loop4): 1 orphan inode deleted [ 188.595372][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 188.595412][ C1] EXT4-fs (loop4): initial error at time 1780698640: ext4_free_branches:1023: inode 16 [ 188.595543][ C1] EXT4-fs (loop4): last error at time 1780698640: ext4_free_branches:1023: inode 16 [ 188.628125][ T8866] EXT4-fs (loop4): 1 truncate cleaned up [ 188.643785][ T8866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.736898][ T8871] loop7: detected capacity change from 0 to 1024 [ 188.972041][ T8871] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 189.011358][ T8881] loop2: detected capacity change from 0 to 512 [ 189.017463][ T8868] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 189.086483][ T8881] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 189.113218][ T8871] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.198405][ T3285] udevd[3285]: incorrect ext4 checksum on /dev/loop2 [ 189.206959][ T8871] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 189.260185][ T5519] udevd[5519]: incorrect ext4 checksum on /dev/loop2 [ 189.318367][ T5519] udevd[5519]: incorrect ext4 checksum on /dev/loop2 [ 189.389987][ T28] audit: type=1400 audit(1780698641.546:1160): avc: denied { accept } for pid=8888 comm="syz.5.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 189.796562][ T8897] loop5: detected capacity change from 0 to 1024 [ 189.877323][ T8897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.932015][ T8897] EXT4-fs error (device loop5): ext4_lookup:1785: comm syz.5.1365: inode #12: comm syz.5.1365: iget: illegal inode # [ 189.980575][ T8897] EXT4-fs (loop5): Remounting filesystem read-only [ 190.032181][ T3761] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.064686][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.097673][ T8913] team0: Device gtp0 is of different type [ 190.163524][ T8919] ipt_REJECT: TCP_RESET invalid for non-tcp [ 190.200450][ T8919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1369'. [ 190.344277][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1373'. [ 191.083654][ T28] audit: type=1400 audit(1780698643.246:1161): avc: denied { bind } for pid=8940 comm="syz.5.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 191.083688][ T28] audit: type=1400 audit(1780698643.246:1162): avc: denied { name_bind } for pid=8940 comm="syz.5.1380" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 191.083770][ T28] audit: type=1400 audit(1780698643.246:1163): avc: denied { node_bind } for pid=8940 comm="syz.5.1380" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 191.088067][ T8941] loop5: detected capacity change from 0 to 1024 [ 191.146317][ T28] audit: type=1400 audit(1780698643.286:1164): avc: denied { open } for pid=8935 comm="syz.2.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 191.179157][ T28] audit: type=1400 audit(1780698643.286:1165): avc: denied { kernel } for pid=8935 comm="syz.2.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 191.229656][ T8941] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 191.264235][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 191.264249][ T28] audit: type=1326 audit(1780698643.416:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.2.1378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 191.306459][ T28] audit: type=1326 audit(1780698643.456:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.2.1378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 191.350432][ T28] audit: type=1326 audit(1780698643.456:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.2.1378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 191.385622][ T28] audit: type=1326 audit(1780698643.466:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.2.1378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 191.501300][ T8946] loop6: detected capacity change from 0 to 512 [ 191.511998][ T8946] EXT4-fs: Ignoring removed orlov option [ 191.520073][ T8946] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 191.549703][ T8946] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.1381: invalid indirect mapped block 32768 (level 2) [ 191.568580][ T8946] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 191.572322][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 191.587875][ C0] EXT4-fs (loop6): initial error at time 1780698643: ext4_free_branches:1023: inode 16 [ 191.597632][ C0] EXT4-fs (loop6): last error at time 1780698643: ext4_free_branches:1023: inode 16 [ 191.610505][ T8946] EXT4-fs (loop6): 1 orphan inode deleted [ 191.616584][ T8946] EXT4-fs (loop6): 1 truncate cleaned up [ 191.626752][ T8946] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.636347][ T28] audit: type=1326 audit(1780698643.466:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.2.1378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 193.114107][ T28] audit: type=1326 audit(1780698643.466:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.2.1378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 194.111517][ T28] audit: type=1326 audit(1780698643.466:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.2.1378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 194.190355][ T4967] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.264724][ T28] audit: type=1326 audit(1780698643.466:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.2.1378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 194.619185][ T28] audit: type=1326 audit(1780698643.466:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.2.1378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f91a4f3d68e code=0x7ffc0000 [ 194.670127][ T8972] loop5: detected capacity change from 0 to 4096 [ 194.693053][ T8972] EXT4-fs: Ignoring removed bh option [ 194.748245][ T8972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.785160][ T28] audit: type=1326 audit(1780698643.466:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.2.1378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 194.818836][ T8978] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1389'. [ 194.846574][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1389'. [ 194.857853][ T8972] EXT4-fs error (device loop5): ext4_empty_dir:3101: inode #12: block 80: comm syz.5.1394: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 194.882975][ T8972] EXT4-fs warning (device loop5): ext4_empty_dir:3104: inode #12: comm syz.5.1394: directory missing '..' [ 194.885024][ T8978] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 194.939061][ T3761] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.024992][ T8994] FAULT_INJECTION: forcing a failure. [ 195.024992][ T8994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.038783][ T8994] CPU: 0 UID: 0 PID: 8994 Comm: syz.6.1401 Not tainted syzkaller #0 PREEMPT(lazy) [ 195.038827][ T8994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 195.038843][ T8994] Call Trace: [ 195.038852][ T8994] [ 195.038860][ T8994] __dump_stack+0x1d/0x30 [ 195.038883][ T8994] dump_stack_lvl+0x95/0xd0 [ 195.038934][ T8994] dump_stack+0x15/0x1b [ 195.038964][ T8994] should_fail_ex+0x263/0x280 [ 195.038985][ T8994] should_fail+0xb/0x20 [ 195.039002][ T8994] should_fail_usercopy+0x1a/0x20 [ 195.039049][ T8994] _copy_from_user+0x1c/0xb0 [ 195.039073][ T8994] sctp_setsockopt+0x164/0xea0 [ 195.039095][ T8994] sock_common_setsockopt+0x69/0x80 [ 195.039133][ T8994] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 195.039165][ T8994] __sys_setsockopt+0x184/0x200 [ 195.039189][ T8994] __x64_sys_setsockopt+0x64/0x80 [ 195.039234][ T8994] x64_sys_call+0x2327/0x3020 [ 195.039257][ T8994] do_syscall_64+0x12c/0x3b0 [ 195.039287][ T8994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.039344][ T8994] RIP: 0033:0x7f5a5656ce59 [ 195.039360][ T8994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.039377][ T8994] RSP: 002b:00007f5a54fc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 195.039397][ T8994] RAX: ffffffffffffffda RBX: 00007f5a567e5fa0 RCX: 00007f5a5656ce59 [ 195.039413][ T8994] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 195.039426][ T8994] RBP: 00007f5a54fc7090 R08: 000000000000009c R09: 0000000000000000 [ 195.039439][ T8994] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 195.039452][ T8994] R13: 00007f5a567e6038 R14: 00007f5a567e5fa0 R15: 00007ffd98fc4958 [ 195.039471][ T8994] [ 195.390213][ T9006] loop2: detected capacity change from 0 to 512 [ 195.400763][ T9006] EXT4-fs: Ignoring removed orlov option [ 195.480525][ T9006] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 195.613947][ T9006] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1399: invalid indirect mapped block 32768 (level 2) [ 195.628200][ T9006] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 195.632301][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 195.647876][ C1] EXT4-fs (loop2): initial error at time 1780698647: ext4_free_branches:1023: inode 16 [ 195.657556][ C1] EXT4-fs (loop2): last error at time 1780698647: ext4_free_branches:1023: inode 16 [ 195.677791][ T9006] EXT4-fs (loop2): 1 orphan inode deleted [ 195.684260][ T9006] EXT4-fs (loop2): 1 truncate cleaned up [ 195.694391][ T9006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.081280][ T9017] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 196.399920][ T35] IPVS: starting estimator thread 0... [ 196.492360][ T9034] IPVS: using max 2400 ests per chain, 120000 per kthread [ 196.497950][ T9039] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1413'. [ 196.522689][ T9028] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.1412'. [ 196.795927][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.821733][ T9042] netdevsim netdevsim7 netdevsim0: left allmulticast mode [ 196.904600][ T9052] team0: Device gtp0 is of different type [ 196.922034][ T9037] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.1412'. [ 196.934064][ T9043] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.1412'. [ 197.011815][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 197.011828][ T28] audit: type=1400 audit(1780698649.166:1214): avc: denied { mount } for pid=9056 comm="syz.7.1421" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 197.228388][ T9045] loop4: detected capacity change from 0 to 1024 [ 197.240349][ T28] audit: type=1400 audit(1780698649.386:1215): avc: denied { unmount } for pid=6325 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 197.251466][ T9059] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.1422'. [ 197.292579][ T9045] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 197.327808][ T9060] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.1422'. [ 197.328198][ T9069] FAULT_INJECTION: forcing a failure. [ 197.328198][ T9069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.368494][ T9067] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.1422'. [ 197.398161][ T9069] CPU: 0 UID: 0 PID: 9069 Comm: syz.2.1425 Not tainted syzkaller #0 PREEMPT(lazy) [ 197.398214][ T9069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 197.398224][ T9069] Call Trace: [ 197.398230][ T9069] [ 197.398238][ T9069] __dump_stack+0x1d/0x30 [ 197.398262][ T9069] dump_stack_lvl+0x95/0xd0 [ 197.398283][ T9069] dump_stack+0x15/0x1b [ 197.398319][ T9069] should_fail_ex+0x263/0x280 [ 197.398338][ T9069] should_fail+0xb/0x20 [ 197.398408][ T9069] should_fail_usercopy+0x1a/0x20 [ 197.398542][ T9069] _copy_to_user+0x20/0xa0 [ 197.398637][ T9069] simple_read_from_buffer+0xb5/0x130 [ 197.398667][ T9069] proc_fail_nth_read+0x10e/0x150 [ 197.398690][ T9069] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.398763][ T9069] vfs_read+0x1ab/0x7f0 [ 197.398794][ T9069] ? __rcu_read_unlock+0x4e/0x70 [ 197.398841][ T9069] ? __fget_files+0x184/0x1c0 [ 197.398907][ T9069] ? mutex_lock+0x57/0x90 [ 197.398999][ T9069] ksys_read+0xdc/0x1a0 [ 197.399022][ T9069] __x64_sys_read+0x40/0x50 [ 197.399050][ T9069] x64_sys_call+0x2886/0x3020 [ 197.399079][ T9069] do_syscall_64+0x12c/0x3b0 [ 197.399237][ T9069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.399255][ T9069] RIP: 0033:0x7f91a4f3d68e [ 197.399269][ T9069] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 197.399358][ T9069] RSP: 002b:00007f91a39d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 197.399375][ T9069] RAX: ffffffffffffffda RBX: 00007f91a39d76c0 RCX: 00007f91a4f3d68e [ 197.399390][ T9069] RDX: 000000000000000f RSI: 00007f91a39d70a0 RDI: 0000000000000004 [ 197.399403][ T9069] RBP: 00007f91a39d7090 R08: 0000000000000000 R09: 0000000000000000 [ 197.399414][ T9069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.399440][ T9069] R13: 00007f91a51f6038 R14: 00007f91a51f5fa0 R15: 00007fff263c0d68 [ 197.399456][ T9069] [ 197.741360][ T28] audit: type=1326 audit(1780698649.896:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9072 comm="syz.4.1427" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b1ace59 code=0x7ffc0000 [ 197.814707][ T9088] tipc: Enabling of bearer rejected, already enabled [ 197.846368][ T28] audit: type=1326 audit(1780698649.926:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9072 comm="syz.4.1427" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b1ace59 code=0x7ffc0000 [ 197.940672][ T28] audit: type=1326 audit(1780698649.926:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9072 comm="syz.4.1427" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b1ace59 code=0x7ffc0000 [ 197.977164][ T9101] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1439'. [ 197.999441][ T9101] batman_adv: batadv0: Interface deactivated: dummy0 [ 198.014508][ T28] audit: type=1326 audit(1780698649.926:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9072 comm="syz.4.1427" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6c0b1ace59 code=0x7ffc0000 [ 198.086275][ T28] audit: type=1400 audit(1780698649.966:1220): avc: denied { write } for pid=9083 comm="syz.2.1432" lport=37497 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 198.148497][ T28] audit: type=1326 audit(1780698649.986:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9072 comm="syz.4.1427" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b1ace59 code=0x7ffc0000 [ 198.214084][ T28] audit: type=1326 audit(1780698649.986:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9072 comm="syz.4.1427" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b1ace59 code=0x7ffc0000 [ 198.239768][ T28] audit: type=1326 audit(1780698649.986:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9072 comm="syz.4.1427" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c0b1ace59 code=0x7ffc0000 [ 198.733945][ T9101] batman_adv: batadv0: Removing interface: dummy0 [ 198.779122][ T9126] loop4: detected capacity change from 0 to 512 [ 198.800018][ T9126] EXT4-fs (loop4): 1 orphan inode deleted [ 198.806317][ T9126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.818915][ T9126] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.820529][ T9138] loop7: detected capacity change from 0 to 1024 [ 198.836279][ T9138] EXT4-fs: test_dummy_encryption option not supported [ 198.913927][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.088273][ T9147] loop7: detected capacity change from 0 to 512 [ 199.211383][ T9147] EXT4-fs (loop7): 1 orphan inode deleted [ 199.223516][ T9147] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.245225][ T9147] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.307214][ T9147] netlink: 'syz.7.1451': attribute type 298 has an invalid length. [ 199.591962][ T9158] loop4: detected capacity change from 0 to 512 [ 199.722662][ T9158] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 199.771693][ T9158] System zones: 0-2, 18-18, 34-34 [ 199.795561][ T9158] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #3: comm syz.4.1455: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 199.873729][ T9158] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 199.873981][ T9158] EXT4-fs (loop4): Remounting filesystem read-only [ 199.883174][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 199.883188][ C1] EXT4-fs (loop4): initial error at time 1780698652: ext4_ext_check_inode:521: inode 3 [ 199.883211][ C1] EXT4-fs (loop4): last error at time 1780698652: ext4_ext_check_inode:521: inode 3 [ 199.945576][ T4089] EXT4-fs error (device loop7): ext4_release_dquot:7070: comm kworker/u8:24: Failed to release dquot type 1 [ 200.065230][ T9158] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 200.080594][ T9158] EXT4-fs (loop4): mount failed [ 200.574533][ T6325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.683396][ T9192] loop6: detected capacity change from 0 to 1024 [ 200.705862][ T9192] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.1469: Failed to acquire dquot type 0 [ 200.729030][ T9192] loop6: lost filesystem error report for type 5 error -117 [ 200.729430][ T9192] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, [ 200.736904][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 200.736926][ C1] EXT4-fs (loop6): initial error at time 1780698652: ext4_acquire_dquot:7034 [ 200.736949][ C1] EXT4-fs (loop6): last error at time 1780698652: ext4_acquire_dquot:7034 [ 200.768804][ T9192] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 200.780059][ T9192] EXT4-fs (loop6): 1 truncate cleaned up [ 200.786888][ T9192] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.821694][ T9215] loop4: detected capacity change from 0 to 512 [ 200.872889][ T4967] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.935556][ T9231] loop2: detected capacity change from 0 to 512 [ 200.987441][ T9231] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.1477: bad orphan inode 15 [ 201.061608][ T9231] loop2: lost filesystem error report for type 5 error -117 [ 201.062315][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 201.076760][ C1] EXT4-fs (loop2): initial error at time 1780698653: ext4_orphan_get:1423 [ 201.085649][ C1] EXT4-fs (loop2): last error at time 1780698653: ext4_orphan_get:1423 [ 201.106205][ T9231] ext4_test_bit(bit=14, block=5) = 0 [ 201.139154][ T9231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.250972][ T9254] __nla_validate_parse: 4 callbacks suppressed [ 201.251195][ T9254] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1492'. [ 201.331470][ T9252] loop5: detected capacity change from 0 to 512 [ 201.456419][ T9252] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.1489: inode has both inline data and extents flags [ 201.470307][ T9252] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 201.471234][ T9252] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1489: couldn't read orphan inode 15 (err -117) [ 201.480854][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 201.480904][ C1] EXT4-fs (loop5): initial error at time 1780698653: ext4_orphan_get:1397: inode 15 [ 201.481045][ C1] EXT4-fs (loop5): last error at time 1780698653: ext4_orphan_get:1397: inode 15 [ 201.522562][ T9252] loop5: lost filesystem error report for type 5 error -117 [ 201.549628][ T9252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.642283][ T9280] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1503'. [ 201.664823][ T9280] netlink: 'syz.4.1503': attribute type 7 has an invalid length. [ 201.683980][ T9280] netlink: 'syz.4.1503': attribute type 8 has an invalid length. [ 201.709998][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1503'. [ 201.725714][ T9291] team0: Device gtp0 is of different type [ 201.834301][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.882225][ T9297] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 201.975590][ T3761] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.006643][ T9304] loop2: detected capacity change from 0 to 1024 [ 202.029595][ T9294] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.1510'. [ 202.059346][ T9304] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 202.086748][ T9301] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.1510'. [ 202.117154][ T9311] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.1510'. [ 202.129304][ T9304] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 202.157912][ T9304] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 202.179152][ T9304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.234268][ T9320] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 202.258782][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.277019][ T9320] netlink: 'syz.4.1519': attribute type 1 has an invalid length. [ 202.296145][ T9326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.321909][ T9326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.402317][ T9337] FAULT_INJECTION: forcing a failure. [ 202.402317][ T9337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.432965][ T9337] CPU: 1 UID: 0 PID: 9337 Comm: syz.5.1527 Not tainted syzkaller #0 PREEMPT(lazy) [ 202.432994][ T9337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 202.433007][ T9337] Call Trace: [ 202.433014][ T9337] [ 202.433022][ T9337] __dump_stack+0x1d/0x30 [ 202.433051][ T9337] dump_stack_lvl+0x95/0xd0 [ 202.433067][ T9337] dump_stack+0x15/0x1b [ 202.433085][ T9337] should_fail_ex+0x263/0x280 [ 202.433107][ T9337] should_fail+0xb/0x20 [ 202.433138][ T9337] should_fail_usercopy+0x1a/0x20 [ 202.433228][ T9337] _copy_from_user+0x1c/0xb0 [ 202.433253][ T9337] __sys_bpf+0x183/0x7e0 [ 202.433278][ T9337] __x64_sys_bpf+0x41/0x50 [ 202.433385][ T9337] x64_sys_call+0x10cb/0x3020 [ 202.433409][ T9337] do_syscall_64+0x12c/0x3b0 [ 202.433443][ T9337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.433463][ T9337] RIP: 0033:0x7f2bd7eece59 [ 202.433479][ T9337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.433494][ T9337] RSP: 002b:00007f2bd693f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 202.433538][ T9337] RAX: ffffffffffffffda RBX: 00007f2bd8165fa0 RCX: 00007f2bd7eece59 [ 202.433552][ T9337] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 202.433566][ T9337] RBP: 00007f2bd693f090 R08: 0000000000000000 R09: 0000000000000000 [ 202.433580][ T9337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.433594][ T9337] R13: 00007f2bd8166038 R14: 00007f2bd8165fa0 R15: 00007ffd0c145e08 [ 202.433665][ T9337] [ 202.642253][ T28] kauditd_printk_skb: 122 callbacks suppressed [ 202.654366][ T28] audit: type=1400 audit(1780698654.796:1343): avc: denied { attach_queue } for pid=9344 comm="syz.6.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 202.822047][ T9370] loop6: detected capacity change from 0 to 1024 [ 202.837838][ T9372] SELinux: security_context_str_to_sid (a`yv-|J+0l8G[kT_|nU5 [ 202.837838][ T9372] M9) failed with errno=-22 [ 202.856487][ T9372] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 202.867329][ T9370] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 202.868059][ T9374] team0: Device gtp0 is of different type [ 202.889448][ T9370] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #3: block 3: comm syz.6.1541: lblock 3 mapped to illegal pblock 3 (length 1) [ 202.903895][ T9370] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 202.904031][ T9370] Quota error (device loop6): write_blk: dquota write failed [ 202.913098][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 202.913114][ C0] EXT4-fs (loop6): initial error at time 1780698655: ext4_map_blocks:833: inode 3: block 3 [ 202.913141][ C0] EXT4-fs (loop6): last error at time 1780698655: ext4_map_blocks:833: inode 3: block 3 [ 202.915036][ T9379] loop7: detected capacity change from 0 to 128 [ 202.920853][ T9370] Quota error (device loop6): find_free_dqentry: Can't write quota data block 3 [ 202.958999][ T9379] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 202.962875][ T9370] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 202.980602][ T9370] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.1541: Failed to acquire dquot type 0 [ 202.991854][ T9370] loop6: lost filesystem error report for type 5 error -117 [ 202.992471][ T9370] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 3: comm syz.6.1541: lblock 3 mapped to illegal pblock 3 (length 1) [ 203.000017][ T9380] loop5: detected capacity change from 0 to 4096 [ 203.024772][ T9370] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 203.028434][ T9379] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 203.049777][ T9370] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 203.060104][ T9370] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.1541: Failed to acquire dquot type 0 [ 203.074150][ T9380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.090541][ T9370] loop6: lost filesystem error report for type 5 error -117 [ 203.091697][ T28] audit: type=1400 audit(1780698655.246:1344): avc: denied { write } for pid=9371 comm="syz.5.1543" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 203.102379][ T9370] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.1541: Freeing blocks not in datazone - block = 0, count = 4096 [ 203.128704][ T9379] ext2 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.153088][ T9372] EXT4-fs error (device loop5): ext4_empty_dir:3101: inode #12: block 80: comm syz.5.1543: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 203.157918][ T28] audit: type=1400 audit(1780698655.316:1345): avc: denied { setopt } for pid=9388 comm="syz.2.1549" lport=52464 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 203.180751][ T9370] loop6: lost filesystem error report for type 5 error -117 [ 203.200010][ T9370] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 3: comm syz.6.1541: lblock 3 mapped to illegal pblock 3 (length 1) [ 203.200560][ T9389] netlink: 'syz.2.1549': attribute type 41 has an invalid length. [ 203.221453][ T9370] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 203.236813][ T9372] EXT4-fs warning (device loop5): ext4_empty_dir:3104: inode #12: comm syz.5.1543: directory missing '..' [ 203.257759][ T9370] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 203.268133][ T9370] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.1541: Failed to acquire dquot type 0 [ 203.279965][ T9370] loop6: lost filesystem error report for type 5 error -117 [ 203.281410][ T9370] EXT4-fs (loop6): 1 orphan inode deleted [ 203.282239][ T6325] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.289209][ T9370] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.385483][ T9398] tipc: Enabling of bearer rejected, already enabled [ 203.398633][ T4967] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.408133][ T3761] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.435412][ T9394] loop4: detected capacity change from 0 to 512 [ 203.480321][ T9394] EXT4-fs: Ignoring removed nobh option [ 203.505505][ T9404] loop2: detected capacity change from 0 to 164 [ 203.516503][ T9404] iso9660: Unknown parameter '0x0000000000000003' [ 203.943319][ T9415] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 203.978653][ T9415] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 204.000787][ T9415] EXT4-fs (loop7): orphan cleanup on readonly fs [ 204.008701][ T9415] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #13: comm syz.7.1560: iget: bad i_size value: 12154761577498 [ 204.024421][ T9415] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 204.025753][ T9415] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.1560: couldn't read orphan inode 13 (err -117) [ 204.034940][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 204.034958][ C1] EXT4-fs (loop7): initial error at time 1780698657: ext4_orphan_get:1397: inode 13 [ 204.034996][ C1] EXT4-fs (loop7): last error at time 1780698657: ext4_orphan_get:1397: inode 13 [ 204.047692][ T9394] EXT4-fs (loop4): orphan cleanup on readonly fs [ 204.053313][ T9415] loop7: lost filesystem error report for type 5 error -117 [ 204.065726][ T9415] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 204.113065][ T9394] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.1553: EA inode hash validation failed [ 204.129559][ T9415] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.1560: dx entry: limit 65535 != root limit 120 [ 204.150277][ T9415] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1560: Corrupt directory, running e2fsck is recommended [ 204.163856][ T9394] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 204.182103][ T9415] bridge0: port 3(netdevsim1) entered blocking state [ 204.184069][ T9394] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.1553: corrupted inode contents [ 204.189007][ T9415] bridge0: port 3(netdevsim1) entered disabled state [ 204.189132][ T9415] netdevsim netdevsim7 netdevsim1: entered allmulticast mode [ 204.190284][ T9415] netdevsim netdevsim7 netdevsim1: entered promiscuous mode [ 204.214054][ T9394] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 204.215593][ T9415] bridge0: port 3(netdevsim1) entered blocking state [ 204.238692][ T9415] bridge0: port 3(netdevsim1) entered forwarding state [ 204.248282][ T9394] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #15: comm syz.4.1553: mark_inode_dirty error [ 204.260045][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 204.260115][ C1] EXT4-fs (loop4): initial error at time 1780698657: ext4_do_update_inode:5690: inode 15 [ 204.260404][ C1] EXT4-fs (loop4): last error at time 1780698657: ext4_do_update_inode:5690: inode 15 [ 204.303687][ T9438] FAT-fs (loop5): bogus number of FAT sectors [ 204.310025][ T6325] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz-executor: dx entry: limit 65535 != root limit 120 [ 204.322460][ T6325] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 204.325324][ T9438] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 204.336164][ T9394] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 204.345281][ T6325] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /169/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 204.377033][ T9438] FAT-fs (loop5): Can't find a valid FAT filesystem [ 204.378018][ T9394] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.1553: corrupted inode contents [ 204.399629][ T9394] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 204.401352][ T9394] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #15: comm syz.4.1553: mark_inode_dirty error [ 204.430623][ T9394] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 204.433355][ T9394] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #15: comm syz.4.1553: mark inode dirty (error -117) [ 204.460106][ T6325] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.478880][ T9394] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 204.506138][ T9394] EXT4-fs (loop4): 1 orphan inode deleted [ 204.521884][ T4089] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.550800][ T9394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 204.596298][ T4089] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.681369][ T4089] bridge0: port 3(netdevsim1) entered disabled state [ 204.688762][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.699146][ T4089] netdevsim netdevsim7 netdevsim1 (unregistering): left allmulticast mode [ 204.718060][ T4089] netdevsim netdevsim7 netdevsim1 (unregistering): left promiscuous mode [ 204.726632][ T4089] bridge0: port 3(netdevsim1) entered disabled state [ 204.742328][ T4089] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.767247][ T9447] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1576'. [ 204.790118][ T28] audit: type=1400 audit(1780698657.943:1346): avc: denied { accept } for pid=9460 comm="syz.4.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 204.825597][ T9461] msdos: Unknown parameter '18446744073709551615' [ 204.835966][ T28] audit: type=1326 audit(1780698657.993:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9460 comm="syz.4.1580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0b1ace59 code=0x7ffc0000 [ 204.863237][ T4089] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.964039][ T9474] team0: Device gtp0 is of different type [ 205.091547][ T4089] bridge_slave_1: left allmulticast mode [ 205.103761][ T4089] bridge_slave_1: left promiscuous mode [ 205.118665][ T4089] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.627504][ T4089] bridge_slave_0: left allmulticast mode [ 205.639396][ T4089] bridge_slave_0: left promiscuous mode [ 205.656381][ T4089] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.665910][ T9514] netlink: 'syz.5.1590': attribute type 10 has an invalid length. [ 205.674504][ T9514] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1590'. [ 205.726372][ T4089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.736125][ T4089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.745653][ T4089] bond0 (unregistering): Released all slaves [ 205.753550][ T4089] bond1 (unregistering): Released all slaves [ 205.766517][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 205.773633][ T9502] caif0: tun_chr_ioctl cmd 2147767521 [ 205.805443][ T4089] tipc: Disabling bearer [ 205.812815][ T4089] tipc: Left network mode [ 205.850527][ T4089] hsr_slave_0: left promiscuous mode [ 205.868107][ T4089] hsr_slave_1: left promiscuous mode [ 205.882771][ T4089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.892579][ T4089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.923883][ T4089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.938551][ T4089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.962479][ T4089] veth1_macvtap: left promiscuous mode [ 205.978449][ T4089] veth0_macvtap: left promiscuous mode [ 205.994237][ T4089] veth1_vlan: left promiscuous mode [ 206.008113][ T9539] set_capacity_and_notify: 3 callbacks suppressed [ 206.008125][ T9539] loop5: detected capacity change from 0 to 4096 [ 206.012716][ T4089] veth0_vlan: left promiscuous mode [ 206.016408][ T9539] EXT4-fs: Ignoring removed bh option [ 206.040870][ T9536] loop2: detected capacity change from 0 to 8192 [ 206.070639][ T9539] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.195998][ T4089] team0 (unregistering): Port device team_slave_1 removed [ 206.212643][ T4089] team0 (unregistering): Port device team_slave_0 removed [ 206.300255][ T9553] tipc: Enabling of bearer rejected, already enabled [ 206.309296][ T9539] EXT4-fs error (device loop5): ext4_empty_dir:3101: inode #12: block 80: comm syz.5.1598: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 206.309395][ T9450] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.344823][ T9450] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.364519][ T9539] EXT4-fs warning (device loop5): ext4_empty_dir:3104: inode #12: comm syz.5.1598: directory missing '..' [ 206.365547][ T9450] bridge_slave_0: entered allmulticast mode [ 206.383215][ T9450] bridge_slave_0: entered promiscuous mode [ 206.420315][ T9450] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.431631][ T9450] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.449457][ T9450] bridge_slave_1: entered allmulticast mode [ 206.487179][ T9450] bridge_slave_1: entered promiscuous mode [ 206.524501][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 206.528130][ T9570] loop4: detected capacity change from 0 to 512 [ 206.538275][ T9450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.548177][ T3761] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.584189][ T9450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.605981][ T9570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.617368][ T9574] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1604'. [ 206.627801][ T9570] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.725603][ T9583] loop2: detected capacity change from 0 to 128 [ 206.748102][ T4089] IPVS: stop unused estimator thread 0... [ 206.760677][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.785708][ T9450] team0: Port device team_slave_0 added [ 206.800509][ T9450] team0: Port device team_slave_1 added [ 206.839111][ T9450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.859186][ T9450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.916418][ T9450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.063913][ T9450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.194221][ T9609] loop4: detected capacity change from 0 to 512 [ 208.028387][ T9450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.055615][ T9450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.066993][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 209.993637][ T9450] hsr_slave_0: entered promiscuous mode [ 210.007039][ T9450] hsr_slave_1: entered promiscuous mode [ 210.024994][ T9450] debugfs: 'hsr0' already exists in 'hsr' [ 210.160158][ T9450] Cannot create hsr debugfs directory [ 210.416918][ T9450] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 210.438717][ T9450] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.566107][ T9632] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1617'. [ 210.646293][ T9634] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1618'. [ 210.724006][ T9637] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1619'. [ 210.777389][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 210.777428][ T28] audit: type=1107 audit(1780698663.933:1367): pid=9635 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 210.911356][ T9642] loop6: detected capacity change from 0 to 512 [ 210.942067][ T9642] EXT4-fs: Ignoring removed orlov option [ 210.993502][ T9642] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 211.048275][ T9649] loop2: detected capacity change from 0 to 128 [ 211.079891][ T9649] EXT4-fs: test_dummy_encryption option not supported [ 211.107873][ T9642] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.1614: invalid indirect mapped block 32768 (level 2) [ 211.246422][ T9642] fserror_report: 1 callbacks suppressed [ 211.246435][ T9642] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 211.264651][ T9642] EXT4-fs (loop6): 1 orphan inode deleted [ 211.273824][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 211.273843][ C1] EXT4-fs (loop6): initial error at time 1780698664: ext4_free_branches:1023: inode 16 [ 211.273882][ C1] EXT4-fs (loop6): last error at time 1780698664: ext4_free_branches:1023: inode 16 [ 211.399687][ T9450] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 211.465742][ T9450] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.856518][ T9655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1293 sclass=netlink_route_socket pid=9655 comm=syz.2.1622 [ 212.130060][ T9642] EXT4-fs (loop6): 1 truncate cleaned up [ 212.147261][ T9642] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.163572][ T9450] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 212.345755][ T9450] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.423782][ T9450] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 212.439388][ T9669] usb usb7: usbfs: process 9669 (syz.2.1625) did not claim interface 32 before use [ 212.479309][ T28] audit: type=1400 audit(1780698665.623:1368): avc: denied { write } for pid=9623 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.525032][ T9450] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 212.615540][ T9674] loop4: detected capacity change from 0 to 1024 [ 212.622484][ T9674] EXT4-fs: Ignoring removed nobh option [ 212.628125][ T9674] EXT4-fs: Ignoring removed bh option [ 212.633984][ T9674] EXT4-fs: Invalid want_extra_isize 130 [ 213.513260][ T9677] xt_hashlimit: size too large, truncated to 1048576 [ 213.560455][ T9651] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 214.097421][ T9692] loop5: detected capacity change from 0 to 256 [ 214.117460][ T9450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.126498][ T28] audit: type=1400 audit(1780698667.283:1369): avc: denied { write } for pid=9678 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.184706][ T9692] FAT-fs (loop5): codepage cp855 not found [ 214.191393][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 214.258446][ T9450] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.288870][ T4131] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.296011][ T4131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.336895][ T4119] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.343987][ T4119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.600713][ T28] audit: type=1326 audit(1780698667.753:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9708 comm="syz.2.1632" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 214.760254][ T28] audit: type=1326 audit(1780698667.753:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9708 comm="syz.2.1632" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 214.894256][ T28] audit: type=1326 audit(1780698667.793:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9708 comm="syz.2.1632" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 214.947079][ T28] audit: type=1326 audit(1780698667.793:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9708 comm="syz.2.1632" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 214.972662][ T28] audit: type=1326 audit(1780698667.793:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9708 comm="syz.2.1632" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 214.998177][ T28] audit: type=1326 audit(1780698667.793:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9708 comm="syz.2.1632" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 214.999962][ T9450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.024010][ T28] audit: type=1326 audit(1780698667.793:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9708 comm="syz.2.1632" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a4f7ce59 code=0x7ffc0000 [ 215.249192][ T9739] loop5: detected capacity change from 0 to 4096 [ 215.265678][ T9739] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 215.285796][ T9742] loop2: detected capacity change from 0 to 512 [ 215.334806][ T9742] EXT4-fs: Ignoring removed orlov option [ 215.352463][ T9739] Invalid logical block size (55362) [ 215.364854][ T9450] veth0_vlan: entered promiscuous mode [ 215.378291][ T9752] loop4: detected capacity change from 0 to 256 [ 215.384254][ T9450] veth1_vlan: entered promiscuous mode [ 215.390847][ T9742] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 215.438738][ T9450] veth0_macvtap: entered promiscuous mode [ 215.450747][ T9752] FAT-fs (loop4): codepage cp864 not found [ 215.465108][ T9450] veth1_macvtap: entered promiscuous mode [ 215.474093][ T9742] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.1640: bad orphan inode 4 [ 215.488037][ T9450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.503324][ T9742] loop2: lost filesystem error report for type 5 error -117 [ 215.506271][ T9742] EXT4-fs (loop2): Remounting filesystem read-only [ 215.506831][ T9450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.513676][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 215.513696][ C0] EXT4-fs (loop2): initial error at time 1780698668: ext4_orphan_get:1423 [ 215.513718][ C0] EXT4-fs (loop2): last error at time 1780698668: ext4_orphan_get:1423 [ 215.554744][ T4080] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.569160][ T9742] EXT4-fs (loop2): 1 orphan inode deleted [ 215.573843][ T4080] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.596219][ T4080] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.605072][ T4080] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.621310][ T9742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.663567][ T9761] xt_hashlimit: size too large, truncated to 1048576 [ 215.725642][ T9771] loop8: detected capacity change from 0 to 512 [ 215.750837][ T9771] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 215.763469][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.781457][ T9771] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 215.795800][ T9771] EXT4-fs (loop8): 1 truncate cleaned up [ 215.801826][ T9771] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.858740][ T9765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.873836][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 215.873852][ T28] audit: type=1400 audit(1780698669.023:1383): avc: denied { write } for pid=9770 comm="syz.8.1647" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.883311][ T9765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.938526][ T28] audit: type=1400 audit(1780698669.083:1384): avc: denied { map } for pid=9770 comm="syz.8.1647" path="/1/file2/cgroup.controllers" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 215.980665][ T9450] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.050236][ T9783] loop8: detected capacity change from 0 to 4096 [ 216.085874][ T9783] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.102952][ T28] audit: type=1400 audit(1780698669.263:1385): avc: denied { write } for pid=9782 comm="syz.8.1650" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.148266][ T9450] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.343317][ T9811] loop8: detected capacity change from 0 to 4096 [ 216.361603][ T9811] EXT4-fs: inline encryption not supported [ 216.386185][ T9811] EXT4-fs: test_dummy_encryption option not supported [ 216.415210][ T9825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.437000][ T9825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.536705][ T9831] loop5: detected capacity change from 0 to 256 [ 216.558668][ T9831] FAT-fs (loop5): codepage cp949 not found [ 217.284518][ T9877] loop4: detected capacity change from 0 to 4096 [ 217.308397][ T9877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.377679][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.483416][ T9890] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1671'. [ 218.927874][ T4967] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.073803][ T9921] loop2: detected capacity change from 0 to 256 [ 219.089902][ T9924] loop6: detected capacity change from 0 to 512 [ 219.095783][ T9921] FAT-fs (loop2): IO charset macromanian not found [ 219.115218][ T9924] FAT-fs (loop6): Directory bread(block 199916) failed [ 219.125806][ T9924] FAT-fs (loop6): Directory bread(block 199917) failed [ 219.133477][ T9924] FAT-fs (loop6): Directory bread(block 199918) failed [ 219.140513][ T9924] FAT-fs (loop6): Directory bread(block 199919) failed [ 219.152073][ T9924] FAT-fs (loop6): Directory bread(block 199920) failed [ 219.156405][ T9926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1685'. [ 219.159271][ T9924] FAT-fs (loop6): Directory bread(block 199921) failed [ 219.176753][ T9924] FAT-fs (loop6): Directory bread(block 199922) failed [ 219.184062][ T9924] FAT-fs (loop6): Directory bread(block 199923) failed [ 219.238725][ T9924] FAT-fs (loop6): FAT read failed (blocknr 128) [ 220.099506][ T9967] loop8: detected capacity change from 0 to 1024 [ 220.110257][ T9967] EXT4-fs: Ignoring removed nomblk_io_submit option [ 220.361813][ T9967] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.399639][ T28] audit: type=1400 audit(1780698673.553:1386): avc: denied { write } for pid=9966 comm="syz.8.1700" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.505432][ T28] audit: type=1400 audit(1780698673.573:1387): avc: denied { remount } for pid=9966 comm="syz.8.1700" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 220.525036][ T28] audit: type=1400 audit(1780698673.573:1388): avc: denied { write } for pid=9966 comm="syz.8.1700" name="bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 220.557212][ T28] audit: type=1400 audit(1780698673.713:1389): avc: denied { write } for pid=9966 comm="syz.8.1700" name="bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 220.591442][ T9973] loop4: detected capacity change from 0 to 512 [ 220.657246][ T28] audit: type=1400 audit(1780698673.713:1390): avc: denied { write } for pid=9966 comm="syz.8.1700" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.805077][ T28] audit: type=1400 audit(1780698673.713:1391): avc: denied { write } for pid=9966 comm="syz.8.1700" name="file0" dev="loop8" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 220.827352][ T28] audit: type=1400 audit(1780698673.713:1392): avc: denied { write } for pid=9966 comm="syz.8.1700" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.404129][ T9450] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.417853][ T9973] FAT-fs (loop4): Directory bread(block 199916) failed [ 221.449041][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 221.449061][ T28] audit: type=1326 audit(1780698674.013:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.6.1705" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5656ce59 code=0x7ffc0000 [ 221.481155][ T9973] FAT-fs (loop4): Directory bread(block 199917) failed [ 221.499388][ T9973] FAT-fs (loop4): Directory bread(block 199918) failed [ 221.528729][ T28] audit: type=1326 audit(1780698674.013:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.6.1705" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5656ce59 code=0x7ffc0000 [ 221.559237][ T9973] FAT-fs (loop4): Directory bread(block 199919) failed [ 221.574986][ T9985] netlink: 'syz.2.1706': attribute type 3 has an invalid length. [ 221.592770][ T9973] FAT-fs (loop4): Directory bread(block 199920) failed [ 221.610807][ T9973] FAT-fs (loop4): Directory bread(block 199921) failed [ 221.679265][ T28] audit: type=1326 audit(1780698674.013:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.6.1705" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5656ce59 code=0x7ffc0000 [ 221.698141][ T9973] FAT-fs (loop4): Directory bread(block 199922) failed [ 221.716656][ T9989] loop5: detected capacity change from 0 to 256 [ 221.731379][ T9989] FAT-fs (loop5): IO charset iso8859-14 not found [ 221.741283][ T9973] FAT-fs (loop4): Directory bread(block 199923) failed [ 221.751373][ T28] audit: type=1326 audit(1780698674.013:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.6.1705" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5656ce59 code=0x7ffc0000 [ 221.820149][ T28] audit: type=1326 audit(1780698674.013:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.6.1705" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5656ce59 code=0x7ffc0000 [ 221.848529][ T28] audit: type=1326 audit(1780698674.013:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.6.1705" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5a5656cbc2 code=0x7ffc0000 [ 221.872185][ T9973] FAT-fs (loop4): FAT read failed (blocknr 128) [ 221.874694][ T28] audit: type=1326 audit(1780698674.013:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.6.1705" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5a5656cc57 code=0x7ffc0000 [ 221.920282][ T28] audit: type=1326 audit(1780698674.013:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.6.1705" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5a56529b51 code=0x7ffc0000 [ 221.981621][ T28] audit: type=1326 audit(1780698674.013:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.6.1705" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f5a5656dc49 code=0x7ffc0000 [ 222.012851][ T28] audit: type=1326 audit(1780698674.013:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9978 comm="syz.6.1705" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5a56529bbb code=0x7ffc0000 [ 222.238477][T10018] erspan0: entered promiscuous mode [ 222.247120][T10018] bond1: entered promiscuous mode [ 222.253203][T10018] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 222.266743][ T35] bridge0: entered promiscuous mode [ 222.342989][T10020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.361123][T10020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.770014][T10031] loop8: detected capacity change from 0 to 512 [ 222.777071][T10031] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 222.788155][T10031] EXT4-fs (loop8): 1 truncate cleaned up [ 222.794317][T10031] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.915141][T10036] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 222.994634][ T9450] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.396472][T10063] loop4: detected capacity change from 0 to 1024 [ 223.403282][T10063] EXT4-fs: Ignoring removed bh option [ 223.414672][T10063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.165799][T10091] loop5: detected capacity change from 0 to 2048 [ 224.178603][T10095] loop6: detected capacity change from 0 to 512 [ 224.185811][T10095] EXT4-fs: Ignoring removed oldalloc option [ 224.187851][T10093] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1745'. [ 224.192206][T10095] EXT4-fs: Ignoring removed oldalloc option [ 224.209596][T10093] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 224.225736][T10091] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.289239][T10095] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.1746: corrupted in-inode xattr: invalid ea_ino [ 224.306881][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.330384][T10095] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 224.332647][T10095] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1746: couldn't read orphan inode 15 (err -117) [ 224.353614][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 224.353652][ C0] EXT4-fs (loop6): initial error at time 1780698677: ext4_iget_extra_inode:5128: inode 15 [ 224.353701][ C0] EXT4-fs (loop6): last error at time 1780698677: ext4_iget_extra_inode:5128: inode 15 [ 224.404691][T10095] loop6: lost filesystem error report for type 5 error -117 [ 224.405309][T10095] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.519642][ T4967] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.530172][ T12] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 224.530304][T10111] random: crng reseeded on system resumption [ 224.550672][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 754 with error 28 [ 224.578130][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 224.578130][ T12] [ 224.594946][ T12] EXT4-fs (loop5): Total free blocks count 0 [ 224.601004][ T12] EXT4-fs (loop5): Free/Dirty block details [ 224.607118][T10111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.615786][T10111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.624660][ T12] EXT4-fs (loop5): free_blocks=4096 [ 224.629981][ T12] EXT4-fs (loop5): dirty_blocks=784 [ 224.638227][ T12] EXT4-fs (loop5): Block reservation details [ 224.649436][ T12] EXT4-fs (loop5): i_reserved_data_blocks=49 [ 224.660035][ T4125] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 224.674271][ T3761] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 224.770180][ T12] ================================================================== [ 224.778299][ T12] BUG: KCSAN: data-race in n_tty_lookahead_flow_ctrl / tty_set_termios [ 224.786554][ T12] [ 224.788876][ T12] write to 0xffff88810e7bf8e0 of 44 bytes by task 10127 on cpu 0: [ 224.796667][ T12] tty_set_termios+0xc0/0x910 [ 224.801353][ T12] set_termios+0x4a7/0x4f0 [ 224.805766][ T12] tty_mode_ioctl+0x37f/0x5b0 [ 224.810440][ T12] n_tty_ioctl_helper+0x87/0x370 [ 224.815374][ T12] n_tty_ioctl+0x101/0x220 [ 224.819783][ T12] tty_ioctl+0x83e/0xb80 [ 224.824014][ T12] __se_sys_ioctl+0xce/0x140 [ 224.828595][ T12] __x64_sys_ioctl+0x43/0x50 [ 224.833182][ T12] x64_sys_call+0x1563/0x3020 [ 224.837850][ T12] do_syscall_64+0x12c/0x3b0 [ 224.842430][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.848307][ T12] [ 224.850616][ T12] read to 0xffff88810e7bf8f9 of 1 bytes by task 12 on cpu 1: [ 224.857975][ T12] n_tty_lookahead_flow_ctrl+0x137/0x300 [ 224.863600][ T12] tty_port_default_lookahead_buf+0x91/0xc0 [ 224.869486][ T12] flush_to_ldisc+0x288/0x340 [ 224.874148][ T12] process_scheduled_works+0x4f0/0x9c0 [ 224.879600][ T12] worker_thread+0x58a/0x780 [ 224.884184][ T12] kthread+0x22a/0x280 [ 224.888235][ T12] ret_from_fork+0x146/0x330 [ 224.892814][ T12] ret_from_fork_asm+0x1a/0x30 [ 224.897563][ T12] [ 224.899870][ T12] value changed: 0x11 -> 0x77 [ 224.904525][ T12] [ 224.906829][ T12] Reported by Kernel Concurrency Sanitizer on: [ 224.912960][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(lazy) [ 224.922225][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 224.932267][ T12] Workqueue: events_unbound flush_to_ldisc [ 224.938066][ T12] ================================================================== [ 224.950089][T10123] loop5: detected capacity change from 0 to 4096 [ 224.968050][T10123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.982899][T10123] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 16: comm syz.5.1754: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=4, size=4096 fake=0 [ 225.004376][T10123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.013650][T10123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.530852][ T3761] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.756116][ T28] kauditd_printk_skb: 203 callbacks suppressed [ 226.756131][ T28] audit: type=1400 audit(1780698679.913:1642): avc: denied { write } for pid=10173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.785616][ T28] audit: type=1400 audit(1780698679.923:1643): avc: denied { write } for pid=10184 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1