last executing test programs: 3.107995694s ago: executing program 1 (id=604): socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@dev, @private}, &(0x7f0000000100)=0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000002140), r0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0xe1c, 0x3, 0x1, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) unshare(0xc040400) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000340), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3}, 0x38) 3.107830934s ago: executing program 1 (id=605): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0xa}, {0xec, 0x0, 0x40000000007, 0x6811221d, 0x8, 0x8000000000000003, 0x200000003, 0xd}, {0x7, 0xfffffffffffffffd, 0x6, 0xffffffffffffbffe}, 0x401, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in6=@remote, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x84ff, @loopback, 0xfffffffc}, 0x1c) 3.047833536s ago: executing program 1 (id=606): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000009f40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x7, @remote, 0x6}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x4000054) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0xfff) write(r6, &(0x7f0000000340)="bdf90d20fbd173a671d9d04e4c70bf9c5bc66f9bd077d97111d22c7bf050551fd91ebff8328c1a2949c239f0b20537478d7ff45b48117e08583e8e59dcd2ff7bb6db1951cc95ac3b7d5a1bdff5c53541eddfaa5e4bc75f1d3af9a4cb0a7bd8966818c3b40ab643a30ab5de7829d593d2466739ebf5fab3944246f9129ff9ade211d7f6e9e7f7d7b45e2ccd4709a9c68f27be9f947f8d35bb689b8f0000000000000000", 0xfffffe39) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r10 = memfd_create(&(0x7f0000000bc0)='\xff\x00l\x1e\xa00x0}, 0x6000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0x1) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1f4, &(0x7f0000000140)={0x0, 0x3938700}) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x0) setresuid(r1, r1, r1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x660c, 0x0) 1.65892234s ago: executing program 0 (id=624): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x23, 0x301, 0x270bd22, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) socketpair(0x1, 0x80809, 0xffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f00000000c0)={0x77359400}, 0x10) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'veth1_to_hsr\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 1.444357165s ago: executing program 3 (id=627): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000340), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3}, 0x38) 1.434239305s ago: executing program 1 (id=628): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x50, r1, 0x416, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x800}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20080}, 0x80) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r5}, 0xc) ioctl$int_in(r3, 0x5452, 0x0) fcntl$setsig(r3, 0xa, 0x12) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00 \x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) getdents64(r0, 0xffffffffffffffff, 0x43) 1.23309314s ago: executing program 4 (id=637): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc0603, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40081271, &(0x7f0000001080)) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x101480, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000004c0), 0x3e}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2100802, &(0x7f0000000200)=ANY=[], 0x1, 0x2a6, &(0x7f0000000940)="$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") capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200013, 0xfffffffe, 0x8000, 0x525, 0x9}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0xee01, 0x1000) 1.174305112s ago: executing program 0 (id=638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000480)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f00000000c0)='\x00', 0x1, 0x200000000000000}]) 1.173962331s ago: executing program 2 (id=639): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000340), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3}, 0x38) 1.118849543s ago: executing program 2 (id=640): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x23, 0x301, 0x270bd22, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) socketpair(0x1, 0x80809, 0xffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f00000000c0)={0x77359400}, 0x10) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'veth1_to_hsr\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 1.118552303s ago: executing program 2 (id=641): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xe, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x110}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) 992.102776ms ago: executing program 2 (id=642): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x192}}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f00000003c0)=@newchain={0x4a4, 0x64, 0x108, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xb, 0x2}, {0x4, 0x6}, {0x9, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x81}, @filter_kind_options=@f_flow={{0x9}, {0x46c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x1}, @TCA_FLOW_DIVISOR={0x8}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xffff}}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x1, 0xc}}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x1}, @TCA_FLOW_POLICE={0x428, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x914c, 0xde, 0x4, 0x2, 0xfffff000, 0x7, 0x1, 0x1, 0x1, 0x10001, 0x9, 0xfffffffb, 0x7, 0xff, 0x7, 0x9, 0x1000, 0x428, 0xffff7fff, 0x8, 0x81, 0x6, 0x0, 0x5, 0x8, 0x84, 0x3b, 0x8, 0x53, 0xfb, 0x9, 0x7, 0x5, 0x3, 0x40, 0x3, 0x5b, 0x4, 0x30d, 0x585, 0x724f, 0xfffffff1, 0x7, 0x2, 0x2fa, 0x8, 0x3, 0xfffffff7, 0xd11a, 0x2c0, 0xe31, 0x5, 0x2, 0x101, 0x7, 0x8000, 0x3, 0x8, 0x10001, 0x7, 0x842f, 0x13, 0x7, 0x81, 0x21, 0x24c, 0x2, 0x5, 0xffff, 0x1cfa, 0x2, 0x2, 0x4, 0x1, 0x8, 0xe0b, 0x5, 0x1158, 0xfffffffd, 0x48, 0x3, 0x4, 0xfc, 0x0, 0x9, 0x3, 0x5, 0xfff, 0x80000000, 0x800, 0xfffffffd, 0xfffffffc, 0x360, 0x2, 0x8320, 0x9, 0x507, 0xfffffbff, 0xd41, 0x6, 0xd6f9, 0x4, 0x400, 0x729, 0x59, 0x10000, 0x8, 0x4, 0x4, 0x22, 0x80000001, 0x3, 0x0, 0x7, 0x7, 0xe8, 0x5, 0x714, 0x4, 0x8, 0x6, 0x7, 0x1, 0x4, 0x68935f1d, 0xfffffffc, 0x7, 0x401, 0x20000000, 0xffffffda, 0x9, 0xf2, 0x0, 0x0, 0x2, 0xffff, 0x6, 0xffff0001, 0x2, 0xff, 0xbe9b, 0x2, 0x5, 0x7, 0xfffffffd, 0x1, 0x200, 0x8, 0x9, 0x6, 0xb, 0xfff, 0x4, 0x1ff, 0x800, 0x9, 0x4, 0x200, 0x9, 0x0, 0x7, 0x9, 0x7, 0x80, 0x1, 0xc89, 0x5, 0x2a, 0x9, 0x6, 0xb, 0x6, 0x7, 0x8, 0x7, 0x6, 0x6, 0x4, 0x7, 0x7, 0x800, 0x7f, 0x7, 0xff, 0xe, 0x80000000, 0xfffffffe, 0x80000000, 0x3, 0x3, 0x1, 0x1205400, 0xf, 0x3, 0x9, 0x0, 0x1000, 0x4, 0x5, 0x8, 0x6, 0x96, 0x4, 0x400, 0xb, 0x5, 0x7, 0x52, 0x120e, 0x3, 0x7ff8, 0x1ba2000, 0x1, 0x1, 0x1, 0x5, 0xbe4, 0x3, 0x7, 0x8, 0x1ff, 0x7, 0x5, 0x101, 0x8000, 0x5, 0x9, 0x3, 0x7, 0x9, 0xfff, 0x6, 0x9, 0x4, 0x6, 0x9, 0x8, 0x8, 0x9, 0x0, 0x4, 0x7, 0x0, 0x5, 0xf36b, 0x6, 0xffffff01, 0x0, 0x0, 0x1b060648, 0x1d5, 0x6bc, 0x4, 0x0, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0x1d}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xa, 0x9}}]}}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x40}, 0x804) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000140)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/4\x00') pread64(r7, &(0x7f0000000100)=""/253, 0xfd, 0x1) 768.024711ms ago: executing program 4 (id=643): r0 = socket(0x5, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xc, 0x9d, 0x9, 0x9, 0x0, 0x80000001, 0x8, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x75, 0x7}, 0x200, 0x5, 0x5, 0x8, 0xfffffffffffffffc, 0x9, 0xa08, 0x0, 0x370, 0x0, 0x47}, r3, 0x3, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xc, 0x9d, 0x9, 0x9, 0x0, 0x80000001, 0x8, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x75, 0x7}, 0x200, 0x5, 0x5, 0x8, 0xfffffffffffffffc, 0x9, 0xa08, 0x0, 0x370, 0x0, 0x47}, r3, 0x3, 0xffffffffffffffff, 0xa) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x8015) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x8015) sched_setaffinity(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, 0x0) (async) ioctl$VT_RESIZEX(r2, 0x560a, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0075213f76f20800"/20, @ANYRES64=r5, @ANYRES32=r5, @ANYRESOCT=r4, @ANYBLOB="080003000200000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48054}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000080), &(0x7f0000000340)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000002c00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) 750.941342ms ago: executing program 2 (id=644): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xc}, {0x0, 0x4}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040800}, 0x448a0) 672.153304ms ago: executing program 2 (id=645): perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x0, 0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_bp={&(0x7f0000000040), 0x8}, 0x3830, 0x3, 0xbd6, 0x7, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0xb) unshare(0x28000600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) prctl$PR_MCE_KILL(0x23, 0x7, 0x7fffffffeffe) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5, r4}, 0xc) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r3, 0x1) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x70bd36, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd5f}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x5a}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80080) write$tcp_mem(r7, &(0x7f00000001c0)={0x1ff, 0x20, 0x609, 0x20, 0x6}, 0x48) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000240), 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@barrier_val={'barrier', 0x3d, 0x875}}, {@nolazytime}, {@init_itable}]}, 0x8, 0x4d2, &(0x7f0000000840)="$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") syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file1\x00', 0x200800, &(0x7f0000000100)={[{@shortname_winnt}, {@fat=@gid}, {@shortname_lower}, {@shortname_winnt}, {@fat=@check_strict}]}, 0x11, 0x305, &(0x7f0000002480)="$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") 646.130804ms ago: executing program 0 (id=646): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x1000649, &(0x7f0000000000)={[{@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@user_xattr}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@noinit_itable}]}, 0x9, 0x60d, &(0x7f0000000800)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x40, 0x5, 0x3, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$watch_queue(r2, &(0x7f0000000340)=""/133, 0xfdef) 366.471531ms ago: executing program 3 (id=647): r0 = getpgrp(0x0) capset(&(0x7f0000000040)={0x19980330, r0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001000010828bd7000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="000000000420040008001b000000000024002b8008000100", @ANYRES32, @ANYBLOB="080003001900"], 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x20004004) 295.766813ms ago: executing program 3 (id=648): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x1000649, &(0x7f0000000000)={[{@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@user_xattr}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@noinit_itable}]}, 0x9, 0x60d, &(0x7f0000000800)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x40, 0x5, 0x3, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$watch_queue(r2, &(0x7f0000000340)=""/133, 0xfdef) (fail_nth: 1) 193.363515ms ago: executing program 4 (id=649): r0 = socket$kcm(0x10, 0x2, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg1\x00'}) (async, rerun: 32) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000180)=0x1, 0x4) sendmmsg$sock(r2, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="f8", 0x1}], 0x1, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) (async) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) 51.639999ms ago: executing program 4 (id=650): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000340), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r0}, 0x38) 0s ago: executing program 4 (id=651): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x1000649, &(0x7f0000000000)={[{@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@user_xattr}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@noinit_itable}]}, 0x9, 0x60d, &(0x7f0000000800)="$eJzs3c9rG9kdAPDvjGzXTtw6KSU0gVJDDwmU+EcaSNtTkktz6CHQHErpISa2g4mcmNiBJg3UuTXQQym9lpJL/4HeS+i1t1Joe9vzQnZZvOxhd4mWGc0kWllyFMX64cznA5LevBnpva+enueNxk8TQGXNZ3dpxOmIuJlEzLWsm43myvliu71PHt/Kbkk0Gr/4OImkyCu3f1k8Hs/ukojpiPj31Yhv1/aXu/3w0Z2VeqPpdxGLO5tbi9sPH53f2Fy5vXZ77e7yhR9fvLT0k+WLy4cSZxnXdPG4/p/6+SQux43J365GWxyHZT7m42URYmv+RERcyhId3pejpgwhGXE96E+t+DxORsSpmItavtQ0Fxt/GGnlgIFq1CIaQEUl+j9UVDkOKI/tB3EcPM5eXGkeAO2Pf6L53UhM58dGx/aSliOj5vHuiUMoPyvjy8dn/pLdosv3EBOHUE43u08i4rud4k/yup0ovjE5tpdG2vK8LL0UEVPFe5H2Wf582/KwP39vE39rO2TxXi4es/yrfZY/6vgBqKbnV4od+W629Hr/l40My/FPdBj/zHbYd/Vj1Pu/7uO/cn8/nX9HnraNw7Ixz/XOLznZnvHB02t/6lZ+6/gvu2Xll2PBYXjxJOJMW/y/zwdzyav2Tzq0f7bJzR7L+Nl/P7rWbV3/8R/OGafGs4izHY9/kq+VtLizuVXmtZ2fXFzfqK8tNe87lvGPf/36b93KH4f2jy7xH9T+Wd5Wj2X8/fqzzW7rZt8Yf/rhVHIjT00VOb9Z2dm5vxwxlfy82KQl/8LBdSm3KV8ji//cDzr3/wPizxt6t8f4t355Z6+Z2v+Z7bn99/1Vyb1s9FiHbrL4V/ts/z/2WMZnv3rwvbasmTJxUPwz+18q6fU9BwAAAAAAgCpK83OwSbrwKp2mCwvNObzfiWNp/d72zg/X7z24uxpxLv9/yMm0PNM911xOsuXl4v9hy+ULbcs/ioiTEfHn2ky+vHDrXn111MEDAAAAAAAAAAAAAAAAAADAmDhezP8vr1P9aa05/78nO6cGXDtg4AZ5gTlgvOn/UF15/+/3Cq7AkWb/D9Wl/0N16f9QXfo/VJf+D9XVU/+fGnw9gOGz/4fq0v8BAAAA4L108vvP/59ExO5PZ/JbtJzpmxxpzYBBe/s+Pj+QegDDVxvq04Bx8urUv+n/UDk9jf8/L34ccPDVAUYg6ZSZDw4aB3f+5x2f2aun7/JkAAAAAAAAAAAAAKias6fN/4eqSuOfo64CMCLvMJHfbwDAEeen/6G6HOMDb5rFP91txbvN/wcAAAAAAAAAAAAA3sJsfkvSheISoLORpgsLEd+MiBMxmaxv1NeWIuJbEfG/2uQ3suXlUVcaAAAAAAAAAAAAAAAAAAAA3jPbDx/dWanX1+63Jr7Yl/N+J8qroI5LfVoTkQy/0JmIGIfYB5OYaMlJInazlh+Lit3fjrGoRppXY8R/mAAAAAAAAAAAAAAAAAAAoIJa5h53duavQ64RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzf6+v/959I3vA6o44RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADiavgoAAP//F1A3Eg==") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) open(0x0, 0x148640, 0x78e22799f4a46f8a) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800000, 0x6, 0xfffffffb, 0x8000104, 0x3ffd, 0x7}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x40, 0x5, 0x3, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r3 = syz_open_pts(r0, 0x0) dup3(r3, r0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x2, 0x9, 0xffa4, 0xc00, 0x5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x102808, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x3c, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@srh={0x2f, 0x0, 0x4, 0x0, 0x3, 0x28, 0x2}], "13d86558"}}}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x0, 0x2c, 0xef, &(0x7f0000000100)="910c3fd9a7ef6bc2d6f2323935a17454a251949b679f5020e2af1e33089aab3be6446fa52fc89760c4ae6c88", &(0x7f00000004c0)=""/239, 0x0, 0x0, 0xa2, 0x0, &(0x7f0000000780)="45612b6c8528647286ce931415b98115927467a14d6738a4b8e75f17cf194076106438a3b0d2dac9b0c678da82015920bf92e2d33999ac11fc0d000c8b09bf4db2f52bc3a2ab23a10b1d9e4454b91bebe7bdb476df9483fdc49bf82e8916ff3d42de9816b37aeb1ddc1191d1bee0712fdeb85d7a9fa48645ce952933c1ca9c7e89fb8b413659a21dba04d40ad8632de9855d87c2a8d871fcf04aacc8701c197c8a3b", &(0x7f0000000840), 0x4, 0x0, 0x6}, 0x50) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000980)={0x2, 0x80, 0xff, 0x2, 0x2, 0x7, 0x0, 0x1, 0x1, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x101, 0x7, 0x9, 0x2, 0x80000000, 0x5, 0x5, 0x0, 0x344, 0x0, 0x8}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) socket$inet6(0xa, 0x0, 0xff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r7, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000", @ANYRES32=r8, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x505, &(0x7f0000001f40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): [ 24.424823][ T28] audit: type=1400 audit(1785461671.711:103): avc: denied { search } for pid=3177 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.446914][ T28] audit: type=1400 audit(1785461671.711:104): avc: denied { search } for pid=3177 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.358072][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 25.358089][ T28] audit: type=1400 audit(1785461672.641:116): avc: denied { write } for pid=3206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.392852][ T28] audit: type=1400 audit(1785461672.681:117): avc: denied { write } for pid=3217 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.599053][ T28] audit: type=1400 audit(1785461672.881:118): avc: denied { write } for pid=3220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.629421][ T28] audit: type=1400 audit(1785461672.911:119): avc: denied { write } for pid=3231 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.703258][ T28] audit: type=1400 audit(1785461672.991:120): avc: denied { write } for pid=3234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.735084][ T28] audit: type=1400 audit(1785461673.021:121): avc: denied { write } for pid=3245 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.233892][ T28] audit: type=1400 audit(1785461673.521:122): avc: denied { write } for pid=3248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.266144][ T28] audit: type=1400 audit(1785461673.551:123): avc: denied { write } for pid=3259 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.390156][ T28] audit: type=1400 audit(1785461673.671:124): avc: denied { write } for pid=3262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.420502][ T28] audit: type=1400 audit(1785461673.701:125): avc: denied { write } for pid=3273 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. [ 30.257072][ T3282] cgroup: Unknown subsys name 'net' [ 30.383014][ T3282] cgroup: Unknown subsys name 'cpuset' [ 30.389550][ T3282] cgroup: Unknown subsys name 'rlimit' [ 30.520545][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 30.520563][ T28] audit: type=1400 audit(1785461677.801:129): avc: denied { setattr } for pid=3282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.550453][ T28] audit: type=1400 audit(1785461677.801:130): avc: denied { create } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.576186][ T28] audit: type=1400 audit(1785461677.801:131): avc: denied { write } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.596731][ T28] audit: type=1400 audit(1785461677.801:132): avc: denied { read } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.617623][ T28] audit: type=1400 audit(1785461677.811:133): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 30.638811][ T28] audit: type=1400 audit(1785461677.811:134): avc: denied { mounton } for pid=3282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.647840][ T3287] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.665027][ T28] audit: type=1400 audit(1785461677.831:135): avc: denied { mount } for pid=3282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.696583][ T28] audit: type=1400 audit(1785461677.961:136): avc: denied { relabelto } for pid=3287 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.713030][ T3282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.723407][ T28] audit: type=1400 audit(1785461677.961:137): avc: denied { write } for pid=3287 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.757547][ T28] audit: type=1400 audit(1785461677.981:138): avc: denied { read } for pid=3282 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 32.106837][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.114222][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.121594][ T3295] bridge_slave_0: entered allmulticast mode [ 32.128375][ T3295] bridge_slave_0: entered promiscuous mode [ 32.149946][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.157499][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.165671][ T3295] bridge_slave_1: entered allmulticast mode [ 32.172549][ T3295] bridge_slave_1: entered promiscuous mode [ 32.214747][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.222220][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.231149][ T3297] bridge_slave_0: entered allmulticast mode [ 32.237830][ T3297] bridge_slave_0: entered promiscuous mode [ 32.258609][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.266091][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.273430][ T3297] bridge_slave_1: entered allmulticast mode [ 32.279980][ T3297] bridge_slave_1: entered promiscuous mode [ 32.287803][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.314041][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.361171][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.368418][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.375957][ T3303] bridge_slave_0: entered allmulticast mode [ 32.383051][ T3303] bridge_slave_0: entered promiscuous mode [ 32.389649][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.396889][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.404169][ T3300] bridge_slave_0: entered allmulticast mode [ 32.410689][ T3300] bridge_slave_0: entered promiscuous mode [ 32.418483][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.428561][ T3295] team0: Port device team_slave_0 added [ 32.436905][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.444071][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.451288][ T3303] bridge_slave_1: entered allmulticast mode [ 32.457859][ T3303] bridge_slave_1: entered promiscuous mode [ 32.464305][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.471436][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.478870][ T3300] bridge_slave_1: entered allmulticast mode [ 32.485526][ T3300] bridge_slave_1: entered promiscuous mode [ 32.493165][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.503541][ T3295] team0: Port device team_slave_1 added [ 32.555894][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.566484][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.576623][ T3297] team0: Port device team_slave_0 added [ 32.583054][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.590088][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.616490][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.633166][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.643575][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.658059][ T3297] team0: Port device team_slave_1 added [ 32.664133][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.671238][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.697263][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.708356][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.715588][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.722928][ T3299] bridge_slave_0: entered allmulticast mode [ 32.729418][ T3299] bridge_slave_0: entered promiscuous mode [ 32.757481][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.764682][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.772016][ T3299] bridge_slave_1: entered allmulticast mode [ 32.778690][ T3299] bridge_slave_1: entered promiscuous mode [ 32.791545][ T3300] team0: Port device team_slave_0 added [ 32.798463][ T3300] team0: Port device team_slave_1 added [ 32.809368][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.816377][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.842548][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.858561][ T3303] team0: Port device team_slave_0 added [ 32.865671][ T3303] team0: Port device team_slave_1 added [ 32.876873][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.883977][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.910320][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.936080][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.943416][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.969980][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.985382][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.004369][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.011441][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.037469][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.052728][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.064351][ T3295] hsr_slave_0: entered promiscuous mode [ 33.070482][ T3295] hsr_slave_1: entered promiscuous mode [ 33.077041][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.084124][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.110103][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.147476][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.154601][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.181457][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.197785][ T3297] hsr_slave_0: entered promiscuous mode [ 33.204134][ T3297] hsr_slave_1: entered promiscuous mode [ 33.209977][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 33.215805][ T3297] Cannot create hsr debugfs directory [ 33.227104][ T3299] team0: Port device team_slave_0 added [ 33.234053][ T3299] team0: Port device team_slave_1 added [ 33.252639][ T3300] hsr_slave_0: entered promiscuous mode [ 33.258736][ T3300] hsr_slave_1: entered promiscuous mode [ 33.264797][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 33.270525][ T3300] Cannot create hsr debugfs directory [ 33.291728][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.298901][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.324843][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.354223][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.361689][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.387886][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.424240][ T3303] hsr_slave_0: entered promiscuous mode [ 33.430322][ T3303] hsr_slave_1: entered promiscuous mode [ 33.436368][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 33.442099][ T3303] Cannot create hsr debugfs directory [ 33.499670][ T3299] hsr_slave_0: entered promiscuous mode [ 33.505778][ T3299] hsr_slave_1: entered promiscuous mode [ 33.511633][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 33.517404][ T3299] Cannot create hsr debugfs directory [ 33.663335][ T3295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.672279][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.680006][ T3295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.688729][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.696537][ T3295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.705207][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.718675][ T3295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.727566][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.745274][ T3297] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.755310][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.763261][ T3297] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.771778][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.780051][ T3297] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.789072][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.796809][ T3297] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.805913][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.833385][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.842662][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.850593][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.859434][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.867412][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.876692][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.887209][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.895891][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.943845][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.952858][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.960714][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.970011][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.977972][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.986961][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.994904][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.003922][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.049542][ T3299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.058593][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.066447][ T3299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.075310][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.083111][ T3299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.091939][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.099697][ T3299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.108336][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.118751][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.141572][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.152447][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.170880][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.178081][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.194510][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.201687][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.216096][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.235719][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.254292][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.261390][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.275818][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.285211][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.292416][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.311570][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.318733][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.336423][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.343564][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.400653][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.430028][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.440729][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.466139][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.473253][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.487998][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.495142][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.517970][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.535018][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.542228][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.561705][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.568868][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.614638][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.685262][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.773910][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.835886][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.844784][ T3471] modprobe (3471) used greatest stack depth: 11256 bytes left [ 34.871580][ T3295] veth0_vlan: entered promiscuous mode [ 34.892397][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.908021][ T3295] veth1_vlan: entered promiscuous mode [ 34.932441][ T3295] veth0_macvtap: entered promiscuous mode [ 34.945630][ T3297] veth0_vlan: entered promiscuous mode [ 34.953481][ T3295] veth1_macvtap: entered promiscuous mode [ 34.966320][ T3297] veth1_vlan: entered promiscuous mode [ 34.990436][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.010068][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.034826][ T3297] veth0_macvtap: entered promiscuous mode [ 35.043683][ T342] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.054366][ T342] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.065656][ T3297] veth1_macvtap: entered promiscuous mode [ 35.102519][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.120797][ T3300] veth0_vlan: entered promiscuous mode [ 35.129864][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.145127][ T3295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.161865][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.177339][ T3300] veth1_vlan: entered promiscuous mode [ 35.205217][ T3299] veth0_vlan: entered promiscuous mode [ 35.222400][ T96] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.235068][ T3501] loop0: detected capacity change from 0 to 512 [ 35.245086][ T3501] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 35.249286][ T3303] veth0_vlan: entered promiscuous mode [ 35.272256][ T3444] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.272746][ T3501] EXT4-fs (loop0): 1 truncate cleaned up [ 35.291904][ T3299] veth1_vlan: entered promiscuous mode [ 35.295989][ T3501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.311203][ T3300] veth0_macvtap: entered promiscuous mode [ 35.317900][ T3501] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1: invalid indirect mapped block 4294901760 (level 0) [ 35.324830][ T3303] veth1_vlan: entered promiscuous mode [ 35.335306][ T3501] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1: invalid indirect mapped block 2185560079 (level 0) [ 35.351968][ T3501] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #13: comm syz.0.1: corrupted inode contents [ 35.357574][ T3300] veth1_macvtap: entered promiscuous mode [ 35.366005][ T3501] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #13: comm syz.0.1: mark_inode_dirty error [ 35.382243][ T3444] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.394737][ T342] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.410205][ T3501] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1: invalid indirect mapped block 65535 (level 2) [ 35.424317][ T3501] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #13: comm syz.0.1: corrupted inode contents [ 35.441584][ T3501] EXT4-fs error (device loop0): ext4_truncate:4691: inode #13: comm syz.0.1: mark_inode_dirty error [ 35.453155][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.463570][ T3501] EXT4-fs error (device loop0) in ext4_setattr:6172: Corrupt filesystem [ 35.480607][ T3299] veth0_macvtap: entered promiscuous mode [ 35.494817][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.506489][ T3303] veth0_macvtap: entered promiscuous mode [ 35.520900][ T3299] veth1_macvtap: entered promiscuous mode [ 35.530997][ T3303] veth1_macvtap: entered promiscuous mode [ 35.545634][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 35.545652][ T28] audit: type=1400 audit(1785461682.831:188): avc: denied { name_bind } for pid=3507 comm="syz.3.4" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 35.571390][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.576071][ T28] audit: type=1400 audit(1785461682.831:189): avc: denied { node_bind } for pid=3507 comm="syz.3.4" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 35.587578][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.631532][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.646741][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.664308][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.682708][ T28] audit: type=1400 audit(1785461682.961:190): avc: denied { create } for pid=3512 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 35.702439][ T28] audit: type=1400 audit(1785461682.971:191): avc: denied { create } for pid=3512 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.708148][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.725401][ T28] audit: type=1400 audit(1785461682.971:192): avc: denied { ioctl } for pid=3512 comm="syz.3.6" path="socket:[4086]" dev="sockfs" ino=4086 ioctlcmd=0x891f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.763396][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.770613][ T3514] loop3: detected capacity change from 0 to 512 [ 35.777733][ T3514] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.802315][ T342] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.829923][ T3514] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 35.846901][ T3514] EXT4-fs (loop3): Remounting filesystem read-only [ 35.853476][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 35.853496][ C1] EXT4-fs (loop3): initial error at time 1785461683: ext4_mb_generate_buddy:1317 [ 35.853537][ C1] EXT4-fs (loop3): last error at time 1785461683: ext4_mb_generate_buddy:1317 [ 35.879325][ T3514] EXT4-fs (loop3): 1 truncate cleaned up [ 35.894567][ T3444] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 35.913195][ T3444] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 35.913209][ T3514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.927340][ T3444] Quota error (device loop3): write_blk: dquota write failed [ 35.944617][ T3444] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 35.954924][ T3444] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 35.972355][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.973940][ T3444] Quota error (device loop3): write_blk: dquota write failed [ 35.989066][ T3444] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 36.007824][ T3444] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 36.018684][ T3514] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.023735][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.052757][ T3514] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.110732][ T3524] Zero length message leads to an empty skb [ 36.135980][ T3528] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 36.216680][ T3537] loop4: detected capacity change from 0 to 764 [ 36.254707][ T3538] loop0: detected capacity change from 0 to 512 [ 36.278442][ T3535] netlink: 'syz.4.10': attribute type 28 has an invalid length. [ 36.284577][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.305213][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.333542][ T3538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 36.345835][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.355907][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.372488][ T3538] ext4 filesystem being mounted at /2/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.413161][ T96] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.422723][ T96] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.523869][ T3444] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.539255][ T3538] usb usb5: usbfs: process 3538 (syz.0.8) did not claim interface 0 before use [ 36.560043][ T3444] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.637020][ T3546] veth1_macvtap: left promiscuous mode [ 36.645057][ T3547] xt_hashlimit: size too large, truncated to 1048576 [ 36.652683][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 36.736391][ T3540] loop1: detected capacity change from 0 to 764 [ 36.744036][ T3546] veth1_macvtap: entered promiscuous mode [ 36.918341][ T3546] syz.4.12 (3546) used greatest stack depth: 9736 bytes left [ 36.926332][ T3540] rock: directory entry would overflow storage [ 36.949856][ T3540] rock: sig=0x5245, size=8, remaining=5 [ 37.021328][ T3560] syz.2.16 uses obsolete (PF_INET,SOCK_PACKET) [ 37.147923][ T3575] netlink: 388 bytes leftover after parsing attributes in process `syz.1.11'. [ 37.821843][ T3589] ======================================================= [ 37.821843][ T3589] WARNING: The mand mount option has been deprecated and [ 37.821843][ T3589] and is ignored by this kernel. Remove the mand [ 37.821843][ T3589] option from the mount to silence this warning. [ 37.821843][ T3589] ======================================================= [ 37.882028][ T3584] loop1: detected capacity change from 0 to 1024 [ 37.908975][ T3376] kernel read not supported for file /newroot/6 (pid: 3376 comm: kworker/1:3) [ 37.924395][ T3589] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(28729.0.0), cmd(0) [ 37.965843][ T3584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.111812][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.417585][ T3633] lo: entered allmulticast mode [ 38.445268][ T3633] lo: entered promiscuous mode [ 38.450446][ T3633] lo: left allmulticast mode [ 39.043434][ T3694] syzkaller0: entered promiscuous mode [ 39.049029][ T3694] syzkaller0: entered allmulticast mode [ 40.564936][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 40.564954][ T28] audit: type=1400 audit(1785461687.851:243): avc: denied { cpu } for pid=3707 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 40.653986][ T3726] veth1_to_team: entered allmulticast mode [ 40.849212][ T3743] syzkaller0: entered promiscuous mode [ 40.859006][ T28] audit: type=1400 audit(1785461688.141:244): avc: denied { create } for pid=3747 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 40.880043][ T3743] syzkaller0: entered allmulticast mode [ 41.026788][ T3758] syzkaller0: entered promiscuous mode [ 41.054975][ T3758] syzkaller0: entered allmulticast mode [ 41.202772][ T3769] syzkaller0: entered promiscuous mode [ 41.240745][ T3771] syzkaller0: entered promiscuous mode [ 41.246972][ T3771] syzkaller0: entered allmulticast mode [ 42.426960][ T3823] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.434817][ T3823] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.479011][ T3823] bridge0: entered allmulticast mode [ 42.500932][ T3833] bridge_slave_1: left allmulticast mode [ 42.514637][ T3833] bridge_slave_1: left promiscuous mode [ 42.522411][ T3833] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.536333][ T3833] bridge_slave_0: left allmulticast mode [ 42.548680][ T3833] bridge_slave_0: left promiscuous mode [ 42.554816][ T3833] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.568473][ T3839] veth1_to_bond: entered allmulticast mode [ 42.587910][ T3839] veth1_to_bond: entered promiscuous mode [ 42.742647][ T3850] syzkaller0: entered promiscuous mode [ 42.749278][ T3850] syzkaller0: entered allmulticast mode [ 42.775379][ T28] audit: type=1400 audit(1785461690.061:245): avc: denied { create } for pid=3853 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.230230][ T3898] veth1_macvtap: entered allmulticast mode [ 44.379203][ T4029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59599 sclass=netlink_route_socket pid=4029 comm=syz.2.203 [ 44.541375][ T4033] raw_sendmsg: syz.2.203 forgot to set AF_INET. Fix it! [ 44.551575][ T28] audit: type=1400 audit(1785461691.821:246): avc: denied { write } for pid=4028 comm="syz.2.203" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.581416][ T4034] loop4: detected capacity change from 0 to 256 [ 44.601590][ T28] audit: type=1400 audit(1785461691.861:247): avc: denied { write } for pid=4024 comm="syz.4.201" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 44.614643][ T4034] vfat: Unknown parameter './file2' [ 44.945515][ T4038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4038 comm=syz.2.206 [ 45.085619][ T4041] netlink: 36 bytes leftover after parsing attributes in process `syz.2.208'. [ 45.303990][ T4049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.210'. [ 45.321391][ T4027] loop1: detected capacity change from 0 to 1024 [ 45.626840][ T28] audit: type=1400 audit(1785461691.861:248): avc: denied { open } for pid=4024 comm="syz.4.201" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 45.650520][ T28] audit: type=1400 audit(1785461691.861:249): avc: denied { ioctl } for pid=4024 comm="syz.4.201" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 45.736663][ T4027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.992472][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.035080][ T4057] netlink: 52 bytes leftover after parsing attributes in process `syz.3.214'. [ 46.108864][ T4059] netlink: 'syz.0.212': attribute type 2 has an invalid length. [ 46.626293][ T28] audit: type=1400 audit(1785461693.141:250): avc: denied { write } for pid=4026 comm="syz.1.202" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.695732][ T4068] loop1: detected capacity change from 0 to 256 [ 46.729785][ T28] audit: type=1400 audit(1785461694.011:251): avc: denied { mount } for pid=4067 comm="syz.1.213" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 46.811903][ T4073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.213'. [ 46.889110][ T28] audit: type=1400 audit(1785461694.161:252): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 46.983708][ T28] audit: type=1400 audit(1785461694.251:253): avc: denied { write } for pid=4024 comm="syz.4.201" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 47.110440][ T4080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4080 comm=syz.0.218 [ 47.125320][ T4051] loop2: detected capacity change from 0 to 764 [ 47.136188][ T4078] loop1: detected capacity change from 0 to 1024 [ 47.164238][ T4077] netlink: 60 bytes leftover after parsing attributes in process `syz.1.217'. [ 47.236175][ T4051] rock: directory entry would overflow storage [ 47.255663][ T4077] netlink: 60 bytes leftover after parsing attributes in process `syz.1.217'. [ 47.284028][ T4051] rock: sig=0x5245, size=8, remaining=5 [ 47.354706][ T28] audit: type=1400 audit(1785461694.631:254): avc: denied { append } for pid=4081 comm="syz.0.219" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.407741][ T4077] serio: Serial port ttyS3 [ 47.408832][ T4051] netlink: 388 bytes leftover after parsing attributes in process `syz.2.211'. [ 47.514911][ T28] audit: type=1400 audit(1785461694.801:255): avc: denied { write } for pid=4083 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.575201][ T28] audit: type=1400 audit(1785461694.861:256): avc: denied { write } for pid=4098 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.597660][ T4103] netlink: 32 bytes leftover after parsing attributes in process `syz.2.221'. [ 47.674157][ T4111] FAULT_INJECTION: forcing a failure. [ 47.674157][ T4111] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 47.688857][ T4109] netlink: 52 bytes leftover after parsing attributes in process `syz.0.225'. [ 47.710859][ T4111] CPU: 0 UID: 0 PID: 4111 Comm: syz.3.226 Not tainted syzkaller #0 PREEMPT(lazy) [ 47.710891][ T4111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.710931][ T4111] Call Trace: [ 47.710940][ T4111] [ 47.710948][ T4111] __dump_stack+0x1d/0x30 [ 47.710974][ T4111] dump_stack_lvl+0x95/0xd0 [ 47.710995][ T4111] dump_stack+0x15/0x1b [ 47.711032][ T4111] should_fail_ex+0x25e/0x270 [ 47.711063][ T4111] should_fail+0xb/0x20 [ 47.711090][ T4111] should_fail_usercopy+0x1a/0x20 [ 47.711162][ T4111] _copy_from_user+0x1c/0xb0 [ 47.711188][ T4111] ___sys_sendmsg+0xc1/0x1e0 [ 47.711285][ T4111] __x64_sys_sendmsg+0xd4/0x160 [ 47.711323][ T4111] x64_sys_call+0x194c/0x3020 [ 47.711346][ T4111] do_syscall_64+0x136/0x3c0 [ 47.711433][ T4111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.711455][ T4111] RIP: 0033:0x7f0fef32e019 [ 47.711483][ T4111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.711506][ T4111] RSP: 002b:00007f0fedd87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.711532][ T4111] RAX: ffffffffffffffda RBX: 00007f0fef5b5fa0 RCX: 00007f0fef32e019 [ 47.711550][ T4111] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 47.711573][ T4111] RBP: 00007f0fedd87090 R08: 0000000000000000 R09: 0000000000000000 [ 47.711586][ T4111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.711602][ T4111] R13: 00007f0fef5b6038 R14: 00007f0fef5b5fa0 R15: 00007ffc194f05b8 [ 47.711626][ T4111] [ 47.903689][ T4115] netlink: 592 bytes leftover after parsing attributes in process `syz.0.229'. [ 47.931046][ T4113] loop2: detected capacity change from 0 to 256 [ 47.933714][ T4102] loop4: detected capacity change from 0 to 1024 [ 47.947981][ T4117] netlink: 'syz.3.228': attribute type 2 has an invalid length. [ 48.074326][ T28] audit: type=1326 audit(1785461695.361:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4123 comm="syz.2.233" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd010ae019 code=0x7ffc0000 [ 48.125818][ T4131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59599 sclass=netlink_route_socket pid=4131 comm=syz.0.230 [ 48.132840][ T4102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.452453][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.520494][ T4144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.531483][ T4144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.566778][ T4145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.596032][ T4145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.681081][ T4128] loop1: detected capacity change from 0 to 1024 [ 48.760869][ T4128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.930482][ T4154] bond1: entered promiscuous mode [ 48.939543][ T4154] bond1: entered allmulticast mode [ 48.984570][ T4159] loop4: detected capacity change from 0 to 256 [ 49.139969][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.215895][ T4171] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 49.244916][ T4171] syzkaller1: linktype set to 776 [ 49.290811][ T4171] SET target dimension over the limit! [ 50.174737][ T4202] xt_hashlimit: size too large, truncated to 1048576 [ 50.188891][ T4203] loop4: detected capacity change from 0 to 256 [ 50.201205][ T4205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59599 sclass=netlink_route_socket pid=4205 comm=syz.1.253 [ 50.246539][ T4203] __nla_validate_parse: 7 callbacks suppressed [ 50.246573][ T4203] netlink: 28 bytes leftover after parsing attributes in process `syz.4.254'. [ 50.364486][ T4215] loop0: detected capacity change from 0 to 164 [ 50.394265][ T4215] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 50.417226][ T4213] serio: Serial port ptm0 [ 50.640192][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 50.640211][ T28] audit: type=1400 audit(1785461697.921:355): avc: denied { mount } for pid=4220 comm="syz.1.260" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 50.702191][ T28] audit: type=1400 audit(1785461697.961:356): avc: denied { search } for pid=4220 comm="syz.1.260" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 50.736506][ T28] audit: type=1400 audit(1785461697.971:357): avc: denied { write } for pid=4220 comm="syz.1.260" name="uprobe_events" dev="tracefs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 50.772257][ T28] audit: type=1400 audit(1785461697.971:358): avc: denied { open } for pid=4220 comm="syz.1.260" path="/45/tracing/uprobe_events" dev="tracefs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 50.837254][ T28] audit: type=1400 audit(1785461697.971:359): avc: denied { ioctl } for pid=4228 comm="syz.3.264" path="socket:[6997]" dev="sockfs" ino=6997 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.908570][ T28] audit: type=1400 audit(1785461698.021:360): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 50.948547][ T4246] loop4: detected capacity change from 0 to 512 [ 50.961206][ T4246] EXT4-fs: inline encryption not supported [ 50.962751][ T28] audit: type=1400 audit(1785461698.151:361): avc: denied { module_request } for pid=4181 comm="syz.2.248" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 50.988988][ T4246] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.012714][ T4246] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 51.027273][ T4246] EXT4-fs (loop4): 1 truncate cleaned up [ 51.033758][ T4246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.050961][ T28] audit: type=1400 audit(1785461698.221:362): avc: denied { mount } for pid=4239 comm="syz.0.269" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 51.074017][ T28] audit: type=1400 audit(1785461698.331:363): avc: denied { write } for pid=4245 comm="syz.4.270" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.096037][ T28] audit: type=1400 audit(1785461698.331:364): avc: denied { read } for pid=4245 comm="syz.4.270" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 51.149377][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.362793][ T4259] 0: reclassify loop, rule prio 0, protocol 03 [ 51.446985][ T4263] loop4: detected capacity change from 0 to 1024 [ 51.455720][ T4263] EXT4-fs: Ignoring removed bh option [ 51.485548][ T4263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.526871][ T4267] syzkaller0: entered promiscuous mode [ 51.538941][ T4267] syzkaller0: entered allmulticast mode [ 51.637652][ T4271] loop0: detected capacity change from 0 to 764 [ 51.690469][ T4271] rock: directory entry would overflow storage [ 51.699248][ T4271] rock: sig=0x5245, size=8, remaining=5 [ 51.789530][ T4271] netlink: 388 bytes leftover after parsing attributes in process `syz.0.278'. [ 51.865638][ T4285] loop0: detected capacity change from 0 to 128 [ 51.875133][ T4285] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 51.914972][ T4285] FAT-fs (loop0): bogus number of directory entries (2047) [ 51.925513][ T4285] FAT-fs (loop0): Can't find a valid FAT filesystem [ 51.926017][ T4277] loop2: detected capacity change from 0 to 256 [ 52.006465][ T4277] vfat: Unknown parameter './file2' [ 52.041541][ T4292] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 52.129802][ T4281] loop1: detected capacity change from 0 to 256 [ 52.232474][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.254478][ T4281] vfat: Unknown parameter './file2' [ 52.414329][ T4298] syzkaller0: entered promiscuous mode [ 52.426355][ T4298] syzkaller0: entered allmulticast mode [ 55.086962][ T4314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 55.182738][ T4327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.299'. [ 55.262812][ T4337] netlink: 20 bytes leftover after parsing attributes in process `syz.4.304'. [ 55.271973][ T4337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.304'. [ 55.283978][ T4337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 55.336648][ T4344] netlink: 'syz.2.307': attribute type 21 has an invalid length. [ 55.346779][ T4343] netlink: 28 bytes leftover after parsing attributes in process `syz.0.306'. [ 55.352713][ T4344] netlink: 128 bytes leftover after parsing attributes in process `syz.2.307'. [ 55.376586][ T4343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.306'. [ 55.381749][ T4347] netlink: 'syz.4.309': attribute type 2 has an invalid length. [ 55.417067][ T4345] syzkaller0: entered promiscuous mode [ 55.422941][ T4345] syzkaller0: entered allmulticast mode [ 55.440403][ T4344] netlink: 'syz.2.307': attribute type 5 has an invalid length. [ 55.448660][ T4344] netlink: 3 bytes leftover after parsing attributes in process `syz.2.307'. [ 55.549201][ T4358] netlink: 24 bytes leftover after parsing attributes in process `syz.4.314'. [ 55.631842][ T4369] netlink: 20 bytes leftover after parsing attributes in process `syz.3.319'. [ 55.642389][ T4369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 55.652693][ T4369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 55.671536][ T4370] loop0: detected capacity change from 0 to 256 [ 55.681798][ T4370] vfat: Unknown parameter './file2' [ 55.790267][ T4379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.323'. [ 55.801503][ T4376] netlink: 'syz.3.321': attribute type 2 has an invalid length. [ 56.019185][ T4391] loop2: detected capacity change from 0 to 1024 [ 56.041778][ T4386] syzkaller0: entered promiscuous mode [ 56.049998][ T4391] EXT4-fs: Ignoring removed bh option [ 56.081456][ T4386] syzkaller0: entered allmulticast mode [ 56.106342][ T4391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.168100][ T4404] capability: warning: `syz.4.332' uses 32-bit capabilities (legacy support in use) [ 56.208817][ T4403] sd 0:0:1:0: device reset [ 56.214724][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 56.214742][ T28] audit: type=1400 audit(1785461703.471:381): avc: denied { mmap_zero } for pid=4402 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 56.261932][ T4405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 56.335106][ T28] audit: type=1400 audit(1785461703.471:382): avc: denied { accept } for pid=4402 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.470916][ T28] audit: type=1400 audit(1785461703.471:383): avc: denied { setopt } for pid=4402 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.545336][ T4415] netlink: 'syz.1.336': attribute type 2 has an invalid length. [ 56.745322][ T4428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=4428 comm=syz.4.338 [ 56.774991][ T28] audit: type=1400 audit(1785461704.061:384): avc: denied { create } for pid=4425 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 56.805532][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.874745][ T28] audit: type=1400 audit(1785461704.081:385): avc: denied { connect } for pid=4425 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 56.908396][ T4431] tipc: Trying to set illegal importance in message [ 56.966650][ T28] audit: type=1400 audit(1785461704.111:386): avc: denied { write } for pid=4425 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 57.056314][ T28] audit: type=1400 audit(1785461704.181:387): avc: denied { create } for pid=4418 comm="syz.4.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.088832][ T4434] syzkaller0: entered promiscuous mode [ 57.109175][ T4434] syzkaller0: entered allmulticast mode [ 57.124322][ T4433] loop1: detected capacity change from 0 to 8192 [ 57.175999][ T28] audit: type=1400 audit(1785461704.191:388): avc: denied { setopt } for pid=4418 comm="syz.4.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.276854][ T28] audit: type=1400 audit(1785461704.271:389): avc: denied { connect } for pid=4436 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.296783][ T28] audit: type=1400 audit(1785461704.271:390): avc: denied { read } for pid=4436 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.526265][ T4457] netlink: 'syz.2.349': attribute type 2 has an invalid length. [ 57.738452][ T4468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59599 sclass=netlink_route_socket pid=4468 comm=syz.3.354 [ 57.939654][ T4473] loop0: detected capacity change from 0 to 2048 [ 57.954468][ T4473] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.978248][ T4473] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 58.032370][ T127] IPVS: starting estimator thread 0... [ 58.075447][ T4473] program syz.0.356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.123570][ T4481] IPVS: using max 1776 ests per chain, 88800 per kthread [ 58.269507][ T4495] syzkaller0: entered promiscuous mode [ 58.281125][ T4495] syzkaller0: entered allmulticast mode [ 58.520695][ T4511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59599 sclass=netlink_route_socket pid=4511 comm=syz.2.368 [ 58.880035][ T4502] loop4: detected capacity change from 0 to 256 [ 58.942662][ T4502] vfat: Unknown parameter './file2' [ 59.228379][ T4540] loop9: detected capacity change from 0 to 7 [ 59.249662][ T4541] loop2: detected capacity change from 0 to 512 [ 59.256532][ T4540] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.279795][ T4540] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.316848][ T4540] loop9: unable to read partition table [ 59.324232][ T4541] EXT4-fs: test_dummy_encryption option not supported [ 59.341268][ T4542] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.399202][ T4540] loop_reread_partitions: partition scan of loop9 (Sj̳P=?}X 5`㫅) failed (rc=-5) [ 59.412799][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.438466][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.467450][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.500953][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.528109][ T4543] loop3: detected capacity change from 0 to 1024 [ 59.539695][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.555778][ T4543] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.572894][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.590738][ T4543] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.610960][ T3288] Buffer I/O error on dev loop9, logical block 0, async page read [ 59.625227][ T4543] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 59.685696][ T4543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.875202][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.907103][ T4514] loop1: detected capacity change from 0 to 1024 [ 60.119611][ T4555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59599 sclass=netlink_route_socket pid=4555 comm=syz.0.383 [ 60.326747][ T4567] FAULT_INJECTION: forcing a failure. [ 60.326747][ T4567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.367484][ T4567] CPU: 1 UID: 0 PID: 4567 Comm: syz.2.386 Not tainted syzkaller #0 PREEMPT(lazy) [ 60.367520][ T4567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.367537][ T4567] Call Trace: [ 60.367546][ T4567] [ 60.367556][ T4567] __dump_stack+0x1d/0x30 [ 60.367587][ T4567] dump_stack_lvl+0x95/0xd0 [ 60.367614][ T4567] dump_stack+0x15/0x1b [ 60.367662][ T4567] should_fail_ex+0x25e/0x270 [ 60.367700][ T4567] should_fail+0xb/0x20 [ 60.367812][ T4567] should_fail_usercopy+0x1a/0x20 [ 60.367851][ T4567] _copy_from_user+0x1c/0xb0 [ 60.367878][ T4567] __sys_connect+0xd0/0x2a0 [ 60.367957][ T4567] __x64_sys_connect+0x3f/0x50 [ 60.367997][ T4567] x64_sys_call+0x2df0/0x3020 [ 60.368102][ T4567] do_syscall_64+0x136/0x3c0 [ 60.368200][ T4567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.368229][ T4567] RIP: 0033:0x7efd010ae019 [ 60.368249][ T4567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.368273][ T4567] RSP: 002b:00007efcffb07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 60.368300][ T4567] RAX: ffffffffffffffda RBX: 00007efd01335fa0 RCX: 00007efd010ae019 [ 60.368318][ T4567] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 60.368339][ T4567] RBP: 00007efcffb07090 R08: 0000000000000000 R09: 0000000000000000 [ 60.368399][ T4567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.368422][ T4567] R13: 00007efd01336038 R14: 00007efd01335fa0 R15: 00007ffdd2e1e6f8 [ 60.368448][ T4567] [ 60.562081][ T4514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.791666][ T4572] erspan0: entered promiscuous mode [ 60.811296][ T4572] erspan0: left promiscuous mode [ 60.925947][ T4572] __nla_validate_parse: 12 callbacks suppressed [ 60.925968][ T4572] netlink: 72 bytes leftover after parsing attributes in process `syz.2.387'. [ 61.038737][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.236926][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 61.236940][ T28] audit: type=1400 audit(1785461708.521:431): avc: denied { mount } for pid=4578 comm="syz.3.390" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 61.275075][ T4581] 9p: Bad value for 'rfdno' [ 61.305169][ T28] audit: type=1326 audit(1785461708.501:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4578 comm="syz.3.390" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0fef32e019 code=0x7ffc0000 [ 61.343190][ T4585] netlink: 24 bytes leftover after parsing attributes in process `syz.1.391'. [ 61.376897][ T28] audit: type=1400 audit(1785461708.561:432): avc: denied { mounton } for pid=4578 comm="syz.3.390" path="/84/file0" dev="tmpfs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.434075][ T28] audit: type=1326 audit(1785461708.581:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4578 comm="syz.3.390" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fef32e019 code=0x7ffc0000 [ 61.508824][ T4573] loop0: detected capacity change from 0 to 764 [ 61.512707][ T28] audit: type=1326 audit(1785461708.581:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4578 comm="syz.3.390" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f0fef32e019 code=0x7ffc0000 [ 61.576902][ T4573] rock: directory entry would overflow storage [ 61.614277][ T4573] rock: sig=0x5245, size=8, remaining=5 [ 61.635940][ T28] audit: type=1326 audit(1785461708.581:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4578 comm="syz.3.390" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fef32e019 code=0x7ffc0000 [ 61.723050][ T28] audit: type=1326 audit(1785461708.591:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4578 comm="syz.3.390" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f0fef32e019 code=0x7ffc0000 [ 61.769219][ T28] audit: type=1326 audit(1785461708.591:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4578 comm="syz.3.390" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fef32e019 code=0x7ffc0000 [ 61.805980][ T4599] loop3: detected capacity change from 0 to 256 [ 61.812307][ T4600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59599 sclass=netlink_route_socket pid=4600 comm=syz.2.398 [ 61.836424][ T4602] netlink: 28 bytes leftover after parsing attributes in process `syz.1.397'. [ 61.893352][ T4573] netlink: 388 bytes leftover after parsing attributes in process `syz.0.388'. [ 61.914498][ T28] audit: type=1326 audit(1785461708.591:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4578 comm="syz.3.390" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fef32e019 code=0x7ffc0000 [ 61.966574][ T4607] netlink: 'syz.3.400': attribute type 29 has an invalid length. [ 62.011749][ T28] audit: type=1326 audit(1785461708.591:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4578 comm="syz.3.390" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fef32e019 code=0x7ffc0000 [ 62.163584][ T4622] FAULT_INJECTION: forcing a failure. [ 62.163584][ T4622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.204343][ T4622] CPU: 0 UID: 0 PID: 4622 Comm: syz.3.407 Not tainted syzkaller #0 PREEMPT(lazy) [ 62.204374][ T4622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.204387][ T4622] Call Trace: [ 62.204395][ T4622] [ 62.204405][ T4622] __dump_stack+0x1d/0x30 [ 62.204436][ T4622] dump_stack_lvl+0x95/0xd0 [ 62.204462][ T4622] dump_stack+0x15/0x1b [ 62.204544][ T4622] should_fail_ex+0x25e/0x270 [ 62.204581][ T4622] should_fail+0xb/0x20 [ 62.204621][ T4622] should_fail_usercopy+0x1a/0x20 [ 62.204664][ T4622] _copy_from_user+0x1c/0xb0 [ 62.204689][ T4622] set_selection_user+0x4a/0xf0 [ 62.204782][ T4622] tioclinux+0x330/0x450 [ 62.204824][ T4622] vt_ioctl+0x74c/0x1900 [ 62.204881][ T4622] ? tty_jobctrl_ioctl+0x294/0x800 [ 62.204949][ T4622] tty_ioctl+0x7d7/0xb80 [ 62.205049][ T4622] ? __pfx_tty_ioctl+0x10/0x10 [ 62.205169][ T4622] __se_sys_ioctl+0xce/0x140 [ 62.205209][ T4622] __x64_sys_ioctl+0x43/0x50 [ 62.205232][ T4622] x64_sys_call+0x1563/0x3020 [ 62.205271][ T4622] do_syscall_64+0x136/0x3c0 [ 62.205305][ T4622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.205346][ T4622] RIP: 0033:0x7f0fef32e019 [ 62.205368][ T4622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.205393][ T4622] RSP: 002b:00007f0fedd87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.205420][ T4622] RAX: ffffffffffffffda RBX: 00007f0fef5b5fa0 RCX: 00007f0fef32e019 [ 62.205443][ T4622] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000003 [ 62.205468][ T4622] RBP: 00007f0fedd87090 R08: 0000000000000000 R09: 0000000000000000 [ 62.205484][ T4622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.205496][ T4622] R13: 00007f0fef5b6038 R14: 00007f0fef5b5fa0 R15: 00007ffc194f05b8 [ 62.205519][ T4622] [ 62.420393][ T4624] syzkaller0: entered promiscuous mode [ 62.423514][ T4627] netlink: 28 bytes leftover after parsing attributes in process `syz.4.409'. [ 62.426138][ T4624] syzkaller0: entered allmulticast mode [ 62.505468][ T4610] loop1: detected capacity change from 0 to 1024 [ 62.587871][ T4635] FAULT_INJECTION: forcing a failure. [ 62.587871][ T4635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.598545][ T4610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.622629][ T4635] CPU: 0 UID: 0 PID: 4635 Comm: syz.4.413 Not tainted syzkaller #0 PREEMPT(lazy) [ 62.622661][ T4635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.622677][ T4635] Call Trace: [ 62.622685][ T4635] [ 62.622776][ T4635] __dump_stack+0x1d/0x30 [ 62.622885][ T4635] dump_stack_lvl+0x95/0xd0 [ 62.622912][ T4635] dump_stack+0x15/0x1b [ 62.622933][ T4635] should_fail_ex+0x25e/0x270 [ 62.622970][ T4635] should_fail+0xb/0x20 [ 62.623038][ T4635] should_fail_usercopy+0x1a/0x20 [ 62.623078][ T4635] _copy_from_iter+0xcc/0xe70 [ 62.623118][ T4635] ? __alloc_skb+0x511/0x6f0 [ 62.623195][ T4635] ? __alloc_skb+0x205/0x6f0 [ 62.623230][ T4635] netlink_sendmsg+0x4a4/0x6f0 [ 62.623347][ T4635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.623463][ T4635] ____sys_sendmsg+0x532/0x580 [ 62.623505][ T4635] ___sys_sendmsg+0x195/0x1e0 [ 62.623557][ T4635] __x64_sys_sendmsg+0xd4/0x160 [ 62.623670][ T4635] x64_sys_call+0x194c/0x3020 [ 62.623707][ T4635] do_syscall_64+0x136/0x3c0 [ 62.623740][ T4635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.623837][ T4635] RIP: 0033:0x7fa149f4e019 [ 62.623857][ T4635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.623880][ T4635] RSP: 002b:00007fa1489a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.623906][ T4635] RAX: ffffffffffffffda RBX: 00007fa14a1d5fa0 RCX: 00007fa149f4e019 [ 62.623923][ T4635] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000006 [ 62.623940][ T4635] RBP: 00007fa1489a7090 R08: 0000000000000000 R09: 0000000000000000 [ 62.624025][ T4635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.624041][ T4635] R13: 00007fa14a1d6038 R14: 00007fa14a1d5fa0 R15: 00007ffc82866d28 [ 62.624066][ T4635] [ 62.816320][ T4629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 62.835424][ T4629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 62.854549][ T4629] IPv6: sit1: Disabled Multicast RS [ 62.885651][ T4648] netlink: 36 bytes leftover after parsing attributes in process `syz.2.418'. [ 62.939783][ T4653] loop2: detected capacity change from 0 to 512 [ 62.950551][ T4653] EXT4-fs: Ignoring removed bh option [ 62.966276][ T4653] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 62.981785][ T4653] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.421: iget: bad i_size value: 3298534883338 [ 63.003290][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.012475][ T4653] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.012717][ T4653] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.421: couldn't read orphan inode 15 (err -117) [ 63.033783][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 63.033815][ C0] EXT4-fs (loop2): initial error at time 1785461710: ext4_orphan_get:1399: inode 15 [ 63.033852][ C0] EXT4-fs (loop2): last error at time 1785461710: ext4_orphan_get:1399: inode 15 [ 63.044395][ T4660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.422'. [ 63.077449][ T4653] loop2: lost filesystem error report for type 5 error -117 [ 63.081344][ T4653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.175048][ T4671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.421'. [ 63.577696][ T4688] netlink: 'syz.3.429': attribute type 1 has an invalid length. [ 63.771246][ T4692] loop1: detected capacity change from 0 to 1024 [ 63.803670][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.935425][ T4692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.027456][ T4723] syzkaller0: entered promiscuous mode [ 64.033343][ T4723] syzkaller0: entered allmulticast mode [ 64.132530][ T4733] FAULT_INJECTION: forcing a failure. [ 64.132530][ T4733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.167549][ T4733] CPU: 1 UID: 0 PID: 4733 Comm: syz.2.453 Not tainted syzkaller #0 PREEMPT(lazy) [ 64.167585][ T4733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.167601][ T4733] Call Trace: [ 64.167610][ T4733] [ 64.167621][ T4733] __dump_stack+0x1d/0x30 [ 64.167662][ T4733] dump_stack_lvl+0x95/0xd0 [ 64.167691][ T4733] dump_stack+0x15/0x1b [ 64.167711][ T4733] should_fail_ex+0x25e/0x270 [ 64.167844][ T4733] should_fail+0xb/0x20 [ 64.167880][ T4733] should_fail_usercopy+0x1a/0x20 [ 64.167921][ T4733] _copy_from_user+0x1c/0xb0 [ 64.167948][ T4733] set_selection_user+0x4a/0xf0 [ 64.168025][ T4733] tioclinux+0x330/0x450 [ 64.168065][ T4733] vt_ioctl+0x74c/0x1900 [ 64.168101][ T4733] ? tty_jobctrl_ioctl+0x294/0x800 [ 64.168145][ T4733] tty_ioctl+0x7d7/0xb80 [ 64.168219][ T4733] ? __pfx_tty_ioctl+0x10/0x10 [ 64.168274][ T4733] __se_sys_ioctl+0xce/0x140 [ 64.168300][ T4733] __x64_sys_ioctl+0x43/0x50 [ 64.168323][ T4733] x64_sys_call+0x1563/0x3020 [ 64.168352][ T4733] do_syscall_64+0x136/0x3c0 [ 64.168382][ T4733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.168424][ T4733] RIP: 0033:0x7efd010ae019 [ 64.168443][ T4733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.168461][ T4733] RSP: 002b:00007efcffb07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.168525][ T4733] RAX: ffffffffffffffda RBX: 00007efd01335fa0 RCX: 00007efd010ae019 [ 64.168542][ T4733] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000003 [ 64.168559][ T4733] RBP: 00007efcffb07090 R08: 0000000000000000 R09: 0000000000000000 [ 64.168571][ T4733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.168645][ T4733] R13: 00007efd01336038 R14: 00007efd01335fa0 R15: 00007ffdd2e1e6f8 [ 64.168669][ T4733] [ 64.245685][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.766945][ T4779] loop4: detected capacity change from 0 to 512 [ 64.809788][ T4779] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.815405][ T4795] loop2: detected capacity change from 0 to 512 [ 64.845788][ T4795] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.851643][ T4779] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.474: invalid indirect mapped block 9 (level 0) [ 64.870336][ T4795] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 64.893246][ T4779] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 64.901091][ T4779] EXT4-fs (loop4): 1 truncate cleaned up [ 64.910451][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 64.910475][ C0] EXT4-fs (loop4): initial error at time 1785507287: ext4_free_branches:1023: inode 11 [ 64.910510][ C0] EXT4-fs (loop4): last error at time 1785507287: ext4_free_branches:1023: inode 11 [ 64.911538][ T4795] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.481: inode #15: comm syz.2.481: iget: illegal inode # [ 64.977337][ T4795] loop2: lost filesystem error report for type 5 error -117 [ 64.978064][ T4779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.985610][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 64.985628][ C0] EXT4-fs (loop2): initial error at time 1785507287: ext4_orphan_get:1399 [ 64.985669][ C0] EXT4-fs (loop2): last error at time 1785507287: ext4_orphan_get:1399 [ 65.029994][ T4795] EXT4-fs (loop2): Remounting filesystem read-only [ 65.037139][ T4795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.054783][ T4800] netlink: 'syz.1.473': attribute type 2 has an invalid length. [ 65.082984][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.098917][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.208688][ T4826] loop1: detected capacity change from 0 to 128 [ 65.885959][ T4844] loop3: detected capacity change from 0 to 764 [ 65.955328][ T4856] loop4: detected capacity change from 0 to 128 [ 65.966190][ T4856] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.988759][ T4856] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.027483][ T4844] rock: directory entry would overflow storage [ 66.036285][ T4844] rock: sig=0x5245, size=8, remaining=5 [ 66.210849][ T4844] __nla_validate_parse: 19 callbacks suppressed [ 66.216931][ T4878] netlink: 68 bytes leftover after parsing attributes in process `syz.0.513'. [ 66.220200][ T4844] netlink: 388 bytes leftover after parsing attributes in process `syz.3.500'. [ 66.268441][ T4881] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.280744][ T28] kauditd_printk_skb: 295 callbacks suppressed [ 66.280760][ T28] audit: type=1400 audit(1785507288.571:735): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 66.326639][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.340131][ T4881] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.366119][ T28] audit: type=1326 audit(1785507288.651:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.1.516" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7d4ce019 code=0x7ffc0000 [ 66.420626][ T28] audit: type=1326 audit(1785507288.651:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.1.516" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7d4ce019 code=0x7ffc0000 [ 66.446674][ T28] audit: type=1326 audit(1785507288.651:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.1.516" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7d4ce019 code=0x7ffc0000 [ 66.635299][ T4892] set_capacity_and_notify: 1 callbacks suppressed [ 66.635393][ T4892] loop0: detected capacity change from 0 to 256 [ 66.678063][ T4892] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.737320][ T28] audit: type=1326 audit(1785507288.681:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.1.516" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f3f7d4ce019 code=0x7ffc0000 [ 66.743514][ T4904] netlink: 168 bytes leftover after parsing attributes in process `syz.3.517'. [ 66.768382][ T28] audit: type=1326 audit(1785507288.681:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.1.516" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7d4ce019 code=0x7ffc0000 [ 66.810936][ T28] audit: type=1326 audit(1785507288.681:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.1.516" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7d4ce019 code=0x7ffc0000 [ 66.836980][ T28] audit: type=1326 audit(1785507288.691:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.1.516" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7d4ce019 code=0x7ffc0000 [ 66.878174][ T28] audit: type=1326 audit(1785507288.691:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.1.516" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7d4ce019 code=0x7ffc0000 [ 66.914179][ T28] audit: type=1326 audit(1785507288.691:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4880 comm="syz.1.516" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f3f7d4ce019 code=0x7ffc0000 [ 66.969904][ T4912] netlink: 68 bytes leftover after parsing attributes in process `syz.4.525'. [ 67.044350][ T4918] FAULT_INJECTION: forcing a failure. [ 67.044350][ T4918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.068777][ T4918] CPU: 0 UID: 0 PID: 4918 Comm: syz.1.526 Not tainted syzkaller #0 PREEMPT(lazy) [ 67.068806][ T4918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.068819][ T4918] Call Trace: [ 67.068825][ T4918] [ 67.068844][ T4918] __dump_stack+0x1d/0x30 [ 67.068867][ T4918] dump_stack_lvl+0x95/0xd0 [ 67.068889][ T4918] dump_stack+0x15/0x1b [ 67.068913][ T4918] should_fail_ex+0x25e/0x270 [ 67.068949][ T4918] should_fail+0xb/0x20 [ 67.069045][ T4918] should_fail_usercopy+0x1a/0x20 [ 67.069074][ T4918] _copy_from_user+0x1c/0xb0 [ 67.069094][ T4918] __se_sys_mbind+0x446/0xdd0 [ 67.069153][ T4918] ? irqentry_exit+0x58f/0x610 [ 67.069173][ T4918] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 67.069246][ T4918] __x64_sys_mbind+0x78/0x90 [ 67.069274][ T4918] x64_sys_call+0x2b72/0x3020 [ 67.069304][ T4918] do_syscall_64+0x136/0x3c0 [ 67.069334][ T4918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.069369][ T4918] RIP: 0033:0x7f3f7d4ce019 [ 67.069385][ T4918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.069406][ T4918] RSP: 002b:00007f3f7bf27028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 67.069431][ T4918] RAX: ffffffffffffffda RBX: 00007f3f7d755fa0 RCX: 00007f3f7d4ce019 [ 67.069448][ T4918] RDX: 0000000000000005 RSI: 0000000000002000 RDI: 0000200000ffc000 [ 67.069463][ T4918] RBP: 00007f3f7bf27090 R08: 0000000000000009 R09: 0000000000000001 [ 67.069551][ T4918] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.069568][ T4918] R13: 00007f3f7d756038 R14: 00007f3f7d755fa0 R15: 00007fff3eaf2238 [ 67.069588][ T4918] [ 67.119055][ T4921] netlink: 20 bytes leftover after parsing attributes in process `syz.4.528'. [ 67.270872][ T4921] netlink: 24 bytes leftover after parsing attributes in process `syz.4.528'. [ 67.280789][ T4921] netlink: 24 bytes leftover after parsing attributes in process `syz.4.528'. [ 67.290789][ T4921] netlink: 24 bytes leftover after parsing attributes in process `syz.4.528'. [ 67.300685][ T4921] netlink: 24 bytes leftover after parsing attributes in process `syz.4.528'. [ 67.311137][ T4921] netlink: 24 bytes leftover after parsing attributes in process `syz.4.528'. [ 67.490417][ T4936] syzkaller0: entered promiscuous mode [ 67.496246][ T4936] syzkaller0: entered allmulticast mode [ 67.559794][ T4939] loop3: detected capacity change from 0 to 764 [ 67.570329][ T4947] veth1_to_hsr: mtu greater than device maximum [ 67.635473][ T4939] rock: directory entry would overflow storage [ 67.670548][ T4939] rock: sig=0x5245, size=8, remaining=5 [ 67.872844][ T4967] loop2: detected capacity change from 0 to 512 [ 67.911500][ T4967] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 68.094553][ T4978] veth1_to_hsr: mtu greater than device maximum [ 68.220376][ T4983] syzkaller0: entered promiscuous mode [ 68.226777][ T4983] syzkaller0: entered allmulticast mode [ 68.592906][ T3390] IPVS: starting estimator thread 0... [ 68.598839][ T5011] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 68.693166][ T5013] IPVS: using max 2304 ests per chain, 115200 per kthread [ 68.807726][ T4989] loop1: detected capacity change from 0 to 764 [ 68.883109][ T4966] loop4: detected capacity change from 0 to 2048 [ 68.911137][ T4989] rock: directory entry would overflow storage [ 68.919315][ T4989] rock: sig=0x5245, size=8, remaining=5 [ 69.006358][ T4966] ext4: Unknown parameter 'subj_type' [ 69.051932][ T5021] tipc: Started in network mode [ 69.057050][ T5021] tipc: Node identity 0690d4d6a5b8, cluster identity 4711 [ 69.077976][ T5021] tipc: Enabled bearer , priority 0 [ 69.086136][ T5017] veth1_to_hsr: mtu greater than device maximum [ 69.100805][ T5021] loop2: detected capacity change from 0 to 1024 [ 69.124544][ T5021] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 69.146582][ T5021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.177379][ T5020] tipc: Disabling bearer [ 69.192076][ T5032] netlink: 'syz.1.569': attribute type 11 has an invalid length. [ 69.215648][ T5034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59599 sclass=netlink_route_socket pid=5034 comm=syz.3.572 [ 69.236583][ T5032] FAULT_INJECTION: forcing a failure. [ 69.236583][ T5032] name failslab, interval 1, probability 0, space 0, times 1 [ 69.286668][ T5032] CPU: 0 UID: 0 PID: 5032 Comm: syz.1.569 Not tainted syzkaller #0 PREEMPT(lazy) [ 69.286703][ T5032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.286718][ T5032] Call Trace: [ 69.286726][ T5032] [ 69.286736][ T5032] __dump_stack+0x1d/0x30 [ 69.286768][ T5032] dump_stack_lvl+0x95/0xd0 [ 69.286805][ T5032] dump_stack+0x15/0x1b [ 69.286828][ T5032] should_fail_ex+0x25e/0x270 [ 69.286866][ T5032] ? ip_fib_metrics_init+0x62/0x470 [ 69.286908][ T5032] should_failslab+0x8c/0xb0 [ 69.286994][ T5032] __kmalloc_cache_noprof+0x7b/0x3d0 [ 69.287027][ T5032] ? ip_fib_metrics_init+0x62/0x470 [ 69.287072][ T5032] ip_fib_metrics_init+0x62/0x470 [ 69.287136][ T5032] ? __kmalloc_noprof+0x1f3/0x4a0 [ 69.287172][ T5032] ? fib_create_info+0xb84/0x18e0 [ 69.287211][ T5032] ? fib_create_info+0xb84/0x18e0 [ 69.287299][ T5032] fib_create_info+0xbc7/0x18e0 [ 69.287420][ T5032] fib_table_insert+0x61/0xee0 [ 69.287445][ T5032] ? fib_trie_table+0xb3/0xf0 [ 69.287536][ T5032] ? fib_trie_table+0xd0/0xf0 [ 69.287606][ T5032] ? fib_new_table+0x1d4/0x1f0 [ 69.287633][ T5032] inet_rtm_newroute+0xb5/0x160 [ 69.287674][ T5032] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 69.287715][ T5032] rtnetlink_rcv_msg+0x64b/0x720 [ 69.287764][ T5032] netlink_rcv_skb+0x11e/0x220 [ 69.287820][ T5032] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 69.287853][ T5032] rtnetlink_rcv+0x1c/0x30 [ 69.287932][ T5032] netlink_unicast+0x5a7/0x680 [ 69.287956][ T5032] netlink_sendmsg+0x5be/0x6f0 [ 69.287992][ T5032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.288064][ T5032] ____sys_sendmsg+0x532/0x580 [ 69.288106][ T5032] ___sys_sendmsg+0x195/0x1e0 [ 69.288199][ T5032] __x64_sys_sendmsg+0xd4/0x160 [ 69.288248][ T5032] x64_sys_call+0x194c/0x3020 [ 69.288278][ T5032] do_syscall_64+0x136/0x3c0 [ 69.288368][ T5032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.288397][ T5032] RIP: 0033:0x7f3f7d4ce019 [ 69.288419][ T5032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.288502][ T5032] RSP: 002b:00007f3f7bf27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.288528][ T5032] RAX: ffffffffffffffda RBX: 00007f3f7d755fa0 RCX: 00007f3f7d4ce019 [ 69.288544][ T5032] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 69.288557][ T5032] RBP: 00007f3f7bf27090 R08: 0000000000000000 R09: 0000000000000000 [ 69.288648][ T5032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.288662][ T5032] R13: 00007f3f7d756038 R14: 00007f3f7d755fa0 R15: 00007fff3eaf2238 [ 69.288685][ T5032] [ 69.563006][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.611641][ T5040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=5040 comm=syz.3.575 [ 69.649989][ T5046] netlink: 'syz.2.573': attribute type 11 has an invalid length. [ 69.670315][ T5030] loop0: detected capacity change from 0 to 512 [ 69.708438][ T5030] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 69.734666][ T5030] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 69.744186][ T5030] block device autoloading is deprecated and will be removed. [ 69.751859][ T5030] EXT4-fs (loop0): couldn't read superblock of external journal [ 69.784727][ T5060] FAULT_INJECTION: forcing a failure. [ 69.784727][ T5060] name failslab, interval 1, probability 0, space 0, times 0 [ 69.797462][ T5060] CPU: 0 UID: 0 PID: 5060 Comm: syz.0.583 Not tainted syzkaller #0 PREEMPT(lazy) [ 69.797572][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.797584][ T5060] Call Trace: [ 69.797590][ T5060] [ 69.797599][ T5060] __dump_stack+0x1d/0x30 [ 69.797629][ T5060] dump_stack_lvl+0x95/0xd0 [ 69.797663][ T5060] dump_stack+0x15/0x1b [ 69.797687][ T5060] should_fail_ex+0x25e/0x270 [ 69.797871][ T5060] should_failslab+0x8c/0xb0 [ 69.797902][ T5060] __kmalloc_noprof+0xd4/0x4a0 [ 69.797982][ T5060] ? ethnl_default_doit+0xe6/0xb60 [ 69.798022][ T5060] ? ethnl_default_doit+0xe6/0xb60 [ 69.798094][ T5060] ethnl_default_doit+0xe6/0xb60 [ 69.798127][ T5060] ? genl_family_rcv_msg_attrs_parse+0x154/0x1b0 [ 69.798220][ T5060] ? genl_family_rcv_msg_attrs_parse+0x1ad/0x1b0 [ 69.798300][ T5060] genl_family_rcv_msg_doit+0x187/0x1f0 [ 69.798361][ T5060] genl_rcv_msg+0x42f/0x470 [ 69.798404][ T5060] ? __pfx_ethnl_default_doit+0x10/0x10 [ 69.798445][ T5060] netlink_rcv_skb+0x11e/0x220 [ 69.798476][ T5060] ? __pfx_genl_rcv_msg+0x10/0x10 [ 69.798592][ T5060] genl_rcv+0x28/0x40 [ 69.798631][ T5060] netlink_unicast+0x5a7/0x680 [ 69.798663][ T5060] netlink_sendmsg+0x5be/0x6f0 [ 69.798778][ T5060] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.798813][ T5060] ____sys_sendmsg+0x532/0x580 [ 69.798861][ T5060] ___sys_sendmsg+0x195/0x1e0 [ 69.798950][ T5060] __x64_sys_sendmsg+0xd4/0x160 [ 69.799022][ T5060] x64_sys_call+0x194c/0x3020 [ 69.799054][ T5060] do_syscall_64+0x136/0x3c0 [ 69.799086][ T5060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.799113][ T5060] RIP: 0033:0x7f8d9d85e019 [ 69.799133][ T5060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.799157][ T5060] RSP: 002b:00007f8d9c2b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.799281][ T5060] RAX: ffffffffffffffda RBX: 00007f8d9dae5fa0 RCX: 00007f8d9d85e019 [ 69.799298][ T5060] RDX: 0000000004004810 RSI: 00002000000003c0 RDI: 0000000000000003 [ 69.799311][ T5060] RBP: 00007f8d9c2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.799328][ T5060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.799369][ T5060] R13: 00007f8d9dae6038 R14: 00007f8d9dae5fa0 R15: 00007fff81c93c88 [ 69.799394][ T5060] [ 70.105762][ T5056] loop4: detected capacity change from 0 to 764 [ 70.213383][ T5056] rock: directory entry would overflow storage [ 70.219653][ T5056] rock: sig=0x5245, size=8, remaining=5 [ 70.265908][ T5080] ip6gre1: entered promiscuous mode [ 70.278393][ T5080] ip6gre1: entered allmulticast mode [ 70.311552][ T5080] syz.2.589 (5080) used greatest stack depth: 9624 bytes left [ 70.423259][ T5095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59599 sclass=netlink_route_socket pid=5095 comm=syz.0.595 [ 70.448965][ T5096] futex_wake_op: syz.3.594 tries to shift op by 144; fix this program [ 70.469802][ T5096] loop3: detected capacity change from 0 to 2048 [ 70.535126][ T5096] loop3: p3 < > p4 < > [ 70.539454][ T5096] loop3: partition table partially beyond EOD, truncated [ 70.546688][ T5096] loop3: p3 start 4284289 is beyond EOD, truncated [ 70.608492][ T5107] random: crng reseeded on system resumption [ 70.727292][ T5114] syzkaller0: entered promiscuous mode [ 70.732913][ T5114] syzkaller0: entered allmulticast mode [ 70.959574][ T5132] loop4: detected capacity change from 0 to 764 [ 70.979401][ T5132] rock: directory entry would overflow storage [ 70.986012][ T5132] rock: sig=0x5245, size=8, remaining=5 [ 71.288808][ T5146] veth1_to_hsr: mtu greater than device maximum [ 71.298717][ T28] kauditd_printk_skb: 406 callbacks suppressed [ 71.298734][ T28] audit: type=1400 audit(1785507293.581:1151): avc: denied { mounton } for pid=5141 comm="syz.2.611" path="/131/file0" dev="tmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.357529][ T28] audit: type=1400 audit(1785507293.641:1152): avc: denied { append } for pid=5148 comm="syz.3.614" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.387089][ T28] audit: type=1400 audit(1785507293.641:1153): avc: denied { open } for pid=5148 comm="syz.3.614" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.412203][ T28] audit: type=1400 audit(1785507293.671:1154): avc: denied { mount } for pid=5141 comm="syz.2.611" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 71.448410][ T28] audit: type=1400 audit(1785507293.721:1155): avc: denied { execmem } for pid=5150 comm="syz.3.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 71.504249][ T5153] netlink: 'syz.2.616': attribute type 2 has an invalid length. [ 71.551719][ T28] audit: type=1400 audit(1785507293.831:1156): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 71.574250][ T28] audit: type=1400 audit(1785507293.861:1157): avc: denied { read write } for pid=5154 comm="syz.0.617" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 71.599191][ T28] audit: type=1400 audit(1785507293.861:1158): avc: denied { open } for pid=5154 comm="syz.0.617" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 71.677735][ T5159] FAULT_INJECTION: forcing a failure. [ 71.677735][ T5159] name failslab, interval 1, probability 0, space 0, times 0 [ 71.690466][ T5159] CPU: 1 UID: 0 PID: 5159 Comm: syz.3.615 Not tainted syzkaller #0 PREEMPT(lazy) [ 71.690497][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.690540][ T5159] Call Trace: [ 71.690548][ T5159] [ 71.690558][ T5159] __dump_stack+0x1d/0x30 [ 71.690588][ T5159] dump_stack_lvl+0x95/0xd0 [ 71.690628][ T5159] dump_stack+0x15/0x1b [ 71.690646][ T5159] should_fail_ex+0x25e/0x270 [ 71.690676][ T5159] ? rtnl_newlink+0x5c/0x1400 [ 71.690724][ T5159] should_failslab+0x8c/0xb0 [ 71.690750][ T5159] __kmalloc_cache_noprof+0x7b/0x3d0 [ 71.690779][ T5159] ? rtnl_newlink+0x5c/0x1400 [ 71.690802][ T5159] ? __pfx_rtnl_newlink+0x10/0x10 [ 71.690859][ T5159] rtnl_newlink+0x5c/0x1400 [ 71.690896][ T5159] ? __perf_event_task_sched_in+0xa7a/0xae0 [ 71.691016][ T5159] ? perf_cgroup_switch+0x10c/0x480 [ 71.691047][ T5159] ? strlen+0x19/0x40 [ 71.691147][ T5159] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 71.691182][ T5159] ? __rcu_read_unlock+0x4e/0x70 [ 71.691212][ T5159] ? avc_has_perm_noaudit+0xa3/0x120 [ 71.691245][ T5159] ? cred_has_capability+0x224/0x2a0 [ 71.691314][ T5159] ? selinux_capable+0x31/0x40 [ 71.691347][ T5159] ? security_capable+0x7b/0x90 [ 71.691374][ T5159] ? ns_capable+0x80/0xb0 [ 71.691415][ T5159] ? __pfx_rtnl_newlink+0x10/0x10 [ 71.691481][ T5159] rtnetlink_rcv_msg+0x64b/0x720 [ 71.691517][ T5159] netlink_rcv_skb+0x11e/0x220 [ 71.691548][ T5159] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 71.691637][ T5159] rtnetlink_rcv+0x1c/0x30 [ 71.691661][ T5159] netlink_unicast+0x5a7/0x680 [ 71.691686][ T5159] netlink_sendmsg+0x5be/0x6f0 [ 71.691723][ T5159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.691806][ T5159] ____sys_sendmsg+0x532/0x580 [ 71.691845][ T5159] ___sys_sendmsg+0x195/0x1e0 [ 71.691903][ T5159] __x64_sys_sendmsg+0xd4/0x160 [ 71.691976][ T5159] x64_sys_call+0x194c/0x3020 [ 71.692007][ T5159] do_syscall_64+0x136/0x3c0 [ 71.692035][ T5159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.692087][ T5159] RIP: 0033:0x7f0fef32e019 [ 71.692110][ T5159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.692131][ T5159] RSP: 002b:00007f0fedd45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.692183][ T5159] RAX: ffffffffffffffda RBX: 00007f0fef5b6180 RCX: 00007f0fef32e019 [ 71.692258][ T5159] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 71.692273][ T5159] RBP: 00007f0fedd45090 R08: 0000000000000000 R09: 0000000000000000 [ 71.692285][ T5159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.692297][ T5159] R13: 00007f0fef5b6218 R14: 00007f0fef5b6180 R15: 00007ffc194f05b8 [ 71.692316][ T5159] [ 71.981470][ T5155] __nla_validate_parse: 217 callbacks suppressed [ 71.981494][ T5155] netlink: 40 bytes leftover after parsing attributes in process `syz.0.617'. [ 72.215309][ T5166] set_capacity_and_notify: 1 callbacks suppressed [ 72.215329][ T5166] loop1: detected capacity change from 0 to 1024 [ 72.223420][ T5164] loop0: detected capacity change from 0 to 764 [ 72.235850][ T5164] rock: directory entry would overflow storage [ 72.242048][ T5164] rock: sig=0x5245, size=8, remaining=5 [ 72.249281][ T5164] netlink: 388 bytes leftover after parsing attributes in process `syz.0.619'. [ 72.259276][ T5166] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 72.321673][ T5166] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 72.333881][ T5166] EXT4-fs (loop1): orphan cleanup on readonly fs [ 72.340359][ T5166] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #3: comm syz.1.620: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 72.358732][ T5166] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 72.362187][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 72.378002][ C1] EXT4-fs (loop1): initial error at time 1785507294: ext4_ext_check_inode:521: inode 3 [ 72.387740][ C1] EXT4-fs (loop1): last error at time 1785507294: ext4_ext_check_inode:521: inode 3 [ 72.397605][ T5166] EXT4-fs error (device loop1): ext4_quota_enable:7235: comm syz.1.620: Bad quota inode: 3, type: 0 [ 72.408773][ T5166] loop1: lost filesystem error report for type 5 error -117 [ 72.410038][ T5166] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 72.432275][ T5166] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 72.450840][ T5166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.464513][ T28] audit: type=1400 audit(1785507294.751:1159): avc: denied { mount } for pid=5165 comm="syz.1.620" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 72.537150][ T5178] veth1_to_hsr: mtu greater than device maximum [ 72.539145][ T28] audit: type=1400 audit(1785507294.821:1160): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 72.567620][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.622828][ T5191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.632'. [ 72.668658][ T5191] netlink: 16 bytes leftover after parsing attributes in process `syz.4.632'. [ 72.671548][ T5190] netlink: 48 bytes leftover after parsing attributes in process `syz.2.631'. [ 72.688338][ T5191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 72.737993][ T5201] netlink: 'syz.3.635': attribute type 2 has an invalid length. [ 72.843852][ T5210] veth1_to_hsr: mtu greater than device maximum [ 72.878463][ T5214] loop4: detected capacity change from 0 to 512 [ 72.907986][ T5214] capability: warning: `syz.4.637' uses deprecated v2 capabilities in a way that may be insecure [ 73.007055][ T5219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.014753][ T5219] batadv_slave_1: entered promiscuous mode [ 73.265798][ T5228] tipc: New replicast peer: 255.255.255.255 [ 73.272163][ T5228] tipc: Enabled bearer , priority 10 [ 73.350538][ T5231] loop0: detected capacity change from 0 to 1024 [ 73.365336][ T5229] loop2: detected capacity change from 0 to 512 [ 73.378359][ T5231] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.390015][ T5231] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 73.416347][ T5231] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 73.426206][ T5231] EXT4-fs (loop0): orphan cleanup on readonly fs [ 73.433504][ T5231] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.646: Invalid inode table block 0 in block_group 0 [ 73.446648][ T5231] loop0: lost filesystem error report for type 5 error -117 [ 73.446763][ T5231] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 73.454145][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 73.454168][ C1] EXT4-fs (loop0): initial error at time 1785507295: __ext4_get_inode_loc:4886 [ 73.454199][ C1] EXT4-fs (loop0): last error at time 1785507295: __ext4_get_inode_loc:4886 [ 73.500558][ T5231] loop0: lost filesystem error report for type 5 error -117 [ 73.500673][ T5231] EXT4-fs error (device loop0): ext4_quota_write:7430: inode #3: comm syz.0.646: mark_inode_dirty error [ 73.519768][ T5231] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 73.519977][ T5231] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.646: Failed to acquire dquot type 0 [ 73.540692][ T5231] loop0: lost filesystem error report for type 5 error -117 [ 73.540864][ T5231] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.646: Invalid inode table block 0 in block_group 0 [ 73.555570][ T5229] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 73.561693][ T5231] loop0: lost filesystem error report for type 5 error -117 [ 73.583826][ T5229] EXT4-fs (loop2): mount failed [ 73.593402][ T5231] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 73.617265][ T5231] loop0: lost filesystem error report for type 5 error -117 [ 73.620000][ T5239] netlink: 20 bytes leftover after parsing attributes in process `syz.3.647'. [ 73.636774][ T5239] netlink: 16 bytes leftover after parsing attributes in process `syz.3.647'. [ 73.642075][ T5231] EXT4-fs error (device loop0): ext4_ext_truncate:4557: inode #15: comm syz.0.646: mark_inode_dirty error [ 73.648320][ T5239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 73.657798][ T5231] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.699597][ T5241] loop3: detected capacity change from 0 to 1024 [ 73.713890][ T5231] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.646: Invalid inode table block 0 in block_group 0 [ 73.727993][ T5231] loop0: lost filesystem error report for type 5 error -117 [ 73.728188][ T5231] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 73.745803][ T5231] loop0: lost filesystem error report for type 5 error -117 [ 73.745922][ T5231] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 73.764630][ T5231] loop0: lost filesystem error report for type 5 error -117 [ 73.765540][ T5231] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.646: Invalid inode table block 0 in block_group 0 [ 73.785812][ T5241] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.794906][ T5231] loop0: lost filesystem error report for type 5 error -117 [ 73.796419][ T5241] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 73.803948][ T5229] loop2: detected capacity change from 0 to 512 [ 73.815232][ T5231] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 73.831222][ T5241] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 73.842380][ T5231] EXT4-fs error (device loop0): ext4_truncate:4691: inode #15: comm syz.0.646: mark_inode_dirty error [ 73.853503][ T5231] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.854934][ T5231] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 73.875341][ T5241] EXT4-fs (loop3): orphan cleanup on readonly fs [ 73.881843][ T5231] EXT4-fs (loop0): 1 truncate cleaned up [ 73.888382][ T5231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.903806][ T5241] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.648: Invalid inode table block 0 in block_group 0 [ 73.917454][ T5241] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 73.932144][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 73.938730][ C0] EXT4-fs (loop3): initial error at time 1785507296: __ext4_get_inode_loc:4886 [ 73.947771][ C0] EXT4-fs (loop3): last error at time 1785507296: __ext4_get_inode_loc:4886 [ 73.953229][ T5241] EXT4-fs error (device loop3): ext4_quota_write:7430: inode #3: comm syz.3.648: mark_inode_dirty error [ 73.983064][ T96] ================================================================== [ 73.991218][ T96] BUG: KCSAN: data-race in n_tty_lookahead_flow_ctrl / tty_set_termios [ 73.993512][ T5241] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 73.999511][ T96] [ 73.999521][ T96] write to 0xffff88811b21d4e0 of 44 bytes by task 5250 on cpu 1: [ 73.999544][ T96] tty_set_termios+0xc0/0x900 [ 73.999575][ T96] set_termios+0x373/0x4f0 [ 74.018624][ T5252] loop4: detected capacity change from 0 to 1024 [ 74.018757][ T96] tty_mode_ioctl+0x37f/0x5b0 [ 74.025938][ T5241] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.648: Failed to acquire dquot type 0 [ 74.028140][ T96] n_tty_ioctl_helper+0x87/0x370 [ 74.028180][ T96] n_tty_ioctl+0x101/0x200 [ 74.028201][ T96] tty_ioctl+0x83e/0xb80 [ 74.035698][ T5252] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.039236][ T96] __se_sys_ioctl+0xce/0x140 [ 74.039265][ T96] __x64_sys_ioctl+0x43/0x50 [ 74.051490][ T5241] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.648: Invalid inode table block 0 in block_group 0 [ 74.055346][ T96] x64_sys_call+0x1563/0x3020 [ 74.055381][ T96] do_syscall_64+0x136/0x3c0 [ 74.067309][ T5241] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 74.072756][ T96] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.072788][ T96] [ 74.072796][ T96] read to 0xffff88811b21d4f9 of 1 bytes by task 96 on cpu 0: [ 74.072816][ T96] n_tty_lookahead_flow_ctrl+0x12b/0x2d0 [ 74.078306][ T5252] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 74.082112][ T96] tty_port_default_lookahead_buf+0x91/0xc0 [ 74.082149][ T96] flush_to_ldisc+0x279/0x330 [ 74.082171][ T96] process_scheduled_works+0x4d4/0x9a0 [ 74.082198][ T96] worker_thread+0x569/0x750 [ 74.082230][ T96] kthread+0x221/0x270 [ 74.082249][ T96] ret_from_fork+0x146/0x330 [ 74.095763][ T5241] EXT4-fs error (device loop3): ext4_ext_truncate:4557: inode #15: comm syz.3.648: mark_inode_dirty error [ 74.099488][ T96] ret_from_fork_asm+0x1a/0x30 [ 74.106249][ T5241] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 74.113479][ T96] [ 74.113488][ T96] value changed: 0x11 -> 0xcd [ 74.113501][ T96] [ 74.113505][ T96] Reported by Kernel Concurrency Sanitizer on: [ 74.113519][ T96] CPU: 0 UID: 0 PID: 96 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(lazy) [ 74.113549][ T96] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.120725][ T5241] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.648: Invalid inode table block 0 in block_group 0 [ 74.121801][ T96] Workqueue: events_unbound flush_to_ldisc [ 74.129603][ T5241] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 74.134836][ T96] [ 74.134845][ T96] ================================================================== [ 74.274782][ T5252] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 74.277010][ T5241] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 74.283155][ T5252] EXT4-fs (loop4): orphan cleanup on readonly fs [ 74.291649][ T3397] tipc: Node number set to 2737362134 [ 74.303997][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.313719][ T5252] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.651: Invalid inode table block 0 in block_group 0 [ 74.331807][ T5252] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 74.331829][ T5241] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.648: Invalid inode table block 0 in block_group 0 [ 74.341308][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 74.341326][ C1] EXT4-fs (loop4): initial error at time 1785507296: __ext4_get_inode_loc:4886 [ 74.369365][ C1] EXT4-fs (loop4): last error at time 1785507296: __ext4_get_inode_loc:4886 [ 74.373645][ T5241] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 74.388732][ T5241] EXT4-fs error (device loop3): ext4_truncate:4691: inode #15: comm syz.3.648: mark_inode_dirty error [ 74.396212][ T5252] EXT4-fs error (device loop4): ext4_quota_write:7430: inode #3: comm syz.4.651: mark_inode_dirty error [ 74.412901][ T5252] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 74.413011][ T5252] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.651: Failed to acquire dquot type 0 [ 74.414700][ T5241] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 74.423525][ T5252] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.651: Invalid inode table block 0 in block_group 0 [ 74.436072][ T5241] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 74.443249][ T5252] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 74.456690][ T5241] EXT4-fs (loop3): 1 truncate cleaned up [ 74.465598][ T5252] EXT4-fs error (device loop4): ext4_ext_truncate:4557: inode #15: comm syz.4.651: mark_inode_dirty error [ 74.475421][ T5241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.480168][ T5252] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 74.503590][ T5252] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.651: Invalid inode table block 0 in block_group 0 [ 74.527591][ T5252] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 74.537265][ T5252] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 74.546159][ T5252] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.651: Invalid inode table block 0 in block_group 0 [ 74.559176][ T5252] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 74.568911][ T5252] EXT4-fs error (device loop4): ext4_truncate:4691: inode #15: comm syz.4.651: mark_inode_dirty error [ 74.570152][ T5254] FAULT_INJECTION: forcing a failure. [ 74.570152][ T5254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.580268][ T5252] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 74.593391][ T5252] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 74.593427][ T5254] CPU: 1 UID: 0 PID: 5254 Comm: syz.3.648 Not tainted syzkaller #0 PREEMPT(lazy) [ 74.593618][ T5254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.593654][ T5254] Call Trace: [ 74.593683][ T5254] [ 74.593705][ T5254] __dump_stack+0x1d/0x30 [ 74.593838][ T5254] dump_stack_lvl+0x95/0xd0 [ 74.593902][ T5254] dump_stack+0x15/0x1b [ 74.593964][ T5254] should_fail_ex+0x25e/0x270 [ 74.594065][ T5254] should_fail+0xb/0x20 [ 74.594169][ T5254] should_fail_usercopy+0x1a/0x20 [ 74.594337][ T5254] _copy_to_iter+0xd2/0xea0 [ 74.594440][ T5254] ? __pfx_woken_wake_function+0x10/0x10 [ 74.594543][ T5254] tty_read+0x1a9/0x470 [ 74.594636][ T5254] vfs_read+0x699/0x7c0 [ 74.594696][ T5254] ? __pfx_tty_read+0x10/0x10 [ 74.594793][ T5254] ksys_read+0xdc/0x1a0 [ 74.594858][ T5254] __x64_sys_read+0x40/0x50 [ 74.594937][ T5254] x64_sys_call+0x2886/0x3020 [ 74.595040][ T5254] do_syscall_64+0x136/0x3c0 [ 74.595140][ T5254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.595213][ T5254] RIP: 0033:0x7f0fef32e019 [ 74.595267][ T5254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.595329][ T5254] RSP: 002b:00007f0fedd66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 74.595450][ T5254] RAX: ffffffffffffffda RBX: 00007f0fef5b6090 RCX: 00007f0fef32e019 [ 74.595493][ T5254] RDX: 000000000000fdef RSI: 0000200000000340 RDI: 0000000000000004 [ 74.595533][ T5254] RBP: 00007f0fedd66090 R08: 0000000000000000 R09: 0000000000000000 [ 74.595574][ T5254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.595615][ T5254] R13: 00007f0fef5b6128 R14: 00007f0fef5b6090 R15: 00007ffc194f05b8 [ 74.595672][ T5254] [ 74.790697][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.800502][ T5252] EXT4-fs (loop4): 1 truncate cleaned up [ 74.807038][ T5252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.029242][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.