last executing test programs: 5.994590941s ago: executing program 2 (id=1345): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x6d82d2b6}, 0x38) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x20000c4, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x0, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000180), &(0x7f00000002c0)=r3}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) 4.114440982s ago: executing program 0 (id=1356): socket(0x1e, 0x4, 0x0) (async) r0 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x4, 0x0, @tick, {0x4}, {0xe}, @raw32}], 0x1c) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) close(r0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) close(0x3) 3.783953387s ago: executing program 3 (id=1358): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x1, 0x700, 0x4, 0x0, {{0x3e, 0x4, 0x3, 0x7, 0xf8, 0x66, 0x0, 0x0, 0x29, 0x0, @multicast1, @multicast2, {[@noop, @cipso={0x86, 0x29, 0xffffffffffffffff, [{0x6, 0xe, "7dfe821fa4c30d41ea6e804b"}, {0x0, 0x5, "6d7be3"}, {0x5, 0x8, "6cc5729e7091"}, {0x0, 0x8, "fa0ae0854fc0"}]}, @cipso={0x86, 0x58, 0x1, [{0x1, 0x6, "da050980"}, {0x5, 0x9, "ff887fafa80615"}, {0x6, 0x4, "3ff9"}, {0x2, 0x2}, {0x2, 0xe, "e1567a0a1486e1b61d2d6bf4"}, {0x2, 0xc, "ad742c2982680d8abd87"}, {0x2, 0x2}, {0x2, 0xa, "868dbb9bcb9ed161"}, {0x0, 0x12, "732dc636064d0a2da7f0fed7adf963bb"}, {0x6, 0x5, "2c348f"}]}, @rr={0x7, 0x23, 0x27, [@remote, @broadcast, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x2e}, @dev={0xac, 0x14, 0x14, 0x2b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x3b}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x29, 0x3, [{0x6, 0xf, "038c8a3c2cbb2a2e3c62f8949a"}, {0x0, 0x7, "21cfdd3066"}, {0x6, 0xa, "54e07ee960c7db5e"}, {0x6, 0x3, "f4"}]}, @generic={0x83, 0xf, "67d8fb295cc7a6e543659a27fd"}]}}}}}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000000100370f4b497e64de6b0001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x80000000, 0x6, 0x3, 0x2, 0x9e, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x401, 0x91}) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x47a, &(0x7f0000000180)="$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") chdir(&(0x7f0000000140)='./file0\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x129a82, 0x0) sendfile(r3, r3, 0x0, 0x7) socket$key(0xf, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x40000) getdents(r2, &(0x7f0000000ac0)=""/182, 0xb1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xff) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x482}, {r1, 0x4018}], 0x2, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="0000000080307dcd0000ff008000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.507367349s ago: executing program 3 (id=1360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a3000000000140007800800"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xa, 0xfff3}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x2, 0x1, 0x100, 0x3ff}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000004000003cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x2, 0x0, 0x24}, 0x5) 3.416342153s ago: executing program 4 (id=1362): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x6, 0x0, 0x8100, 0x0, {0x0, 0xffff}, {}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x300, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 3.128303495s ago: executing program 3 (id=1364): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x1d144, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) write$sndseq(r5, 0x0, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x106, 0x17, 0x0, 0x0) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xeda2442f576052ae) r7 = socket$l2tp6(0xa, 0x2, 0x73) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) sendmsg$inet6(r7, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e20, 0x80000, @local, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x006\x00'], 0x238}, 0x40440f0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @sched_cls}, 0x94) 3.00783927s ago: executing program 0 (id=1366): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x105006, &(0x7f00000002c0)={[{@quota}, {@lazytime}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@max_batch_time={'max_batch_time', 0x3d, 0x858c}}, {@acl}, {@debug}]}, 0x3, 0x43e, &(0x7f0000000d80)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@nobh}, {@nodiscard}]}, 0x3, 0x45c, &(0x7f0000000940)="$eJzs281vFGUYAPBnZtsCArYifvChVtHY+NFSQOXgQY0mHjAx0YMem7YQZKGG1kQIUTAGT8aYeDce/Rc86cUYTyZe9W5IiOECeFozuzN0d9ld6LLbLezvlwy873z0fZ6deXffmXc3gKE1mf2TRGyLiL8iYrxWbdxhsvbftSvn5q9fOTefRKXy3r9Jdb+rV87NF7sWx23NK1NpRPplEntatLt85uyJuXJ58XRen1k5+fHM8pmzLx4/OXds8djiqQOHDx86OPvKywde6kmeWUxXd3+2tHfX2x9++86Rr7N1aZF/Ux49Mtlp4zOVSo+bG6ztdeVkZICBsCaliMhO12i1/49HKVZP3ni89cVAgwP6qlKpVLa233y+AtzDkmis6/IwLIoP+uz+t1iaBwGv9W/4MXCXX6/dAGV5X8uX2paR6vOByO+Ntvep/cmI+OD8f99nS/TnOQQAQIOfs/HPC63Gf2k8XLff/fnc0EREPBAROyLiwYjYGREPRVT3fSQiHl1j+82TJDePf9JLXSV2m7Lx36v53Fbj+K8Y/cVEKa9tr+Y/mhw9Xl7cn78mUzG6KavPdmjjlzf//KbdtvrxX7Zk7RdjwTyOSyObGo9ZmFuZu5Oc612+ELF7pFX+yY2ZgCQidkXE7i7bOP7cj3vbbbt1/h30YJ6p8kPEs7Xzfz6a8i8knecnZzZHeXH/THFV3Oz3Py6+2679O8q/B7Lzf1/L6/9G/hNJ/Xzt8trbuPj3V23vabq9/seS96vlsXzdp3MrK6dnI8aSI7Wg69cfWD22qBf7Z/lP7Wvd/3fE6iuxJyKyi/ixiHg8Ip7IY38yIp6KiH0d8v/tjac/6j7//sryX1jT+V8tjEXzmtaF0olff2podOKm/K93Pv+HqqWpfM3tvP/dTlzdXc0AAABw90kjYlsk6fSNcppOT9e+L78zIi0vLa88f3Tpk1MLtd8ITESkxZOu8brnobP5bX2tfiEial8tKLYfzJ8bf1faUq1Pzy+VFwadPAy5rW36f+af0qCjA/rO77VgeOn/MLxu1f8/X6c4gPXn8x+GV4v+v2UQcQDrbVPLz39jfhgOTf3ftB8Mkab+v3lQcQDrr/vnf2M9jQNYf57/w1Ba3hK3/pF8x0Lxl7o8/J4txOiGCKNvhUg3RBgbtjB6l/eLwb0nAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9NL/AQAA//8kV94B") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 2.071742881s ago: executing program 3 (id=1371): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001980)=@nat={'nat\x00', 0x19, 0x4, 0x0, [0x80000a40, 0x0, 0x0, 0x80000eac, 0x80000edc], 0x0, 0x0, 0x0}, 0x108) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0xf88ce2e0571bc7ea}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000001840), 0x4) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0x241) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00'}) r4 = perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x2a, 0x1, 0xfd, 0x0, 0x0, 0x0, 0xb801b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200e}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x94}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @multicast2, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f3, &(0x7f0000001500)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', r7, 0x1, 0x1, 0x2, 0x10000b, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x66, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) writev(r8, &(0x7f00000008c0)=[{&(0x7f0000000300)="e5ab64a7e0473b5f93615b57140d78a5e61178d1d033a2fc5676faf51b4dcded1ceca8a05127db0ac837559bf23a1a126dad9fda943ef25c20dd95cf20c06adaa945a2240c220cbcd8feba1f260cc326b151506e604b2c49b50d763163b165c621dfa9d6b4d2c62f81dae798a84621df87c76c3dc03cdcc35df69ca74b3538bef0079f0c8428b8f4ccdff564", 0x8c}, {&(0x7f00000003c0)="e01a55eb2efa086fe3b2e0bb204c77896d3700c680f74c47a90e343c97cd9c5a61e8729efb95b9e9b86c0156308edbc25120c26ac205ff9262f09f8e04d1e203b3f614bd9c3f74a0632ce15f63a7db59c87a7005506ac469b54dd9f11eeb662d6a89e643c82400a2469f783947b7723129c5c38882b81cf2cb9c171b6d206ab0e2ca20170d83d82528b5eaf023f6f0ef47a524938a4a1c4493fc10384617aed61ad8486f", 0xa4}, {&(0x7f0000000480)="472151a6a0337c1da3bf83177c3bc7404ac421723e1f199077a0c21bc070693aeb5eca03b8fa409f414f564ea8d7db8b300b4cb146b4124e8c6119d6edac40836c04eb3b229499b95f1a375a98d0e8fcb5d5b812fa73d70bc1ceaa0e3448eeaf7b4f57f734e2293963f6922e220f3624f4ef0a1aad9fd7e5f6016eae860df5a7f0b6ee6cd83dd1e7db69e10bccbc0205c91070e4b9cf22f36052ceba11981d495fd1d5b9e19af7e23f76dd53a41c0d7387febb5d792a63d7c8b5ebc6d05004a054db1fdb7e2abecc18bc", 0xca}, {&(0x7f0000000580)="4cd82b7c58116c4d794bf8c631bf6b61af7f908ef0af776e2c879ec444bcd193705b75b7bc86382377db13f1fe88badff62935d3805c9b41fe3f78b810dd120cd1a1f12a0765934783a3bc653dc719c4db5fe154fdbbede98cbb4d1c5c4c27c2a1b7a49a7ec0265bcd07b8442860ce20790b7d88868247a76101e03ca94dc2763fd41b8e353b40d615ceb3cbccc7d7352d0edb59d6b34ee11b3341e66a144d33406bfa6b544d11175aeeec5f1547e39c835b626daafc814c11503dac17e117843ae0bcd77190d6058183f2c662304d488cf9dfc826060d8c05045bb1505a6dc795c1d63e2bb0cb1e71c59bc25accc9829e25", 0xf2}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="c6a2ed44ffb6b146c79d4c4a63105c724cc6192d002f8a598705c2e3e859689cdc540e49e6f3292e66ae12f27e8f3e7b3f0f8a51ba587a6dd3e5fcd9e49ee69bca5234db6c6e8d0a4abb92eb215a4dba2d646de342f720da30d24438c97f9fdbfef6d5e52a014f9b7df852acf014d65b0af76b2fe67d6334457addcc4f68", 0x7e}, {&(0x7f0000000740)="bef600ea4df4586a964f118496ba8ebe10d8fa14f1bc7748091b3ddfdbdb73533271734ee44412fc6e59a07b48f16dfbacaae1a885d4be9c7b56593658060c57fa303bb564f0ba780f8c6eba5c42355e60", 0x51}, {&(0x7f00000007c0)="edcec4c4bd4cc1c2acb36a9f3ae20dfebdc91d3189aeb5813901806310c6295c5f8eb6b5453c259522e4ad47aa29915588eed9b9c21a6c60538c1656ac98eeb2ae3cbe3c6f8d0239d0e8994333a2820e0cfb465b8ccfd354cd1337bfcfb56017a104c14bb00ee3c83871d872224f012f0efd977b466cfa95411811fea11aeac6323fde0fea0f6e0bfcd87878f97d2acfa0e96cb35c4e9c4a36cd1827f6bc06a49663ff1b0d86425c678303e2a8bbb0ecb811d390bb319953878b282465aff489a42cea81a069", 0xc6}], 0x8) 1.87036809s ago: executing program 1 (id=1372): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYRES16=r1], 0x48}}, 0x40800) r2 = syz_io_uring_setup(0x1f9b, &(0x7f00000001c0)={0x0, 0xffffff7c, 0x82, 0x0, 0x345}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000)) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000000640)={{r3}, r5, 0x20, @inherit={0x50, &(0x7f0000000140)={0x0, 0x1, 0x7, 0x10000, {0x12, 0x8000, 0x4, 0x3, 0x6}, [0x85]}}, @subvolid=0xffffffffffffff93}) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@random="d9ea693249ca", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @remote, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc242, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r7, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r6, 0x110, 0x2, &(0x7f0000000040)='\x00', 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001640)=@newlink={0x98, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x30, 0x1a, 0x0, 0x1, [@AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_IFALIASn={0x4}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}, @IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x840}, 0x4000014) io_uring_enter(r2, 0x5fb, 0xe876, 0x3, &(0x7f0000000040)={[0x7]}, 0x8) 1.736482236s ago: executing program 3 (id=1373): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x400000, 0x80000000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x82000, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r3, 0x1) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$unix(0x1, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') close_range(r6, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r6}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000068000000060a010400000000000000000100000040000480240001800b00010072656a6563740000140002800800014000000002050004000000000018000180080001006f7366000c000280080001400000001408000b40000000000900010073797a30"], 0xf0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 1.64417634s ago: executing program 1 (id=1374): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) socket$kcm(0x29, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x2400, 0x8010}, 0x40008c0) close(0xffffffffffffffff) socket$kcm(0x2, 0x2, 0x0) syz_clone(0x8000600, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000) 1.617018261s ago: executing program 2 (id=1375): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x11}}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x44, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x64}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r2, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e, 0x0, 0x2100}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) 1.594230611s ago: executing program 0 (id=1376): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.480205956s ago: executing program 1 (id=1377): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) listen(0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELRULE={0x40, 0x8, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88a2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8848}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f8}]}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000008000000000000000100100091117f000000000095"], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0) 1.468551217s ago: executing program 1 (id=1378): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) fallocate(r2, 0x0, 0x0, 0x8800000) pwritev2(r0, 0x0, 0x0, 0x5000, 0x0, 0x3) 1.240205897s ago: executing program 1 (id=1379): socket$igmp(0x2, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000080)={r0, &(0x7f00000001c0)="cbde42cd", 0x0}, 0x20) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x364e, 0x3}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000008000000e47f000001"], 0x48) socket$unix(0x1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x2c) 889.092682ms ago: executing program 1 (id=1380): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x6d82d2b6}, 0x38) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x20000c4, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x0, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000180), &(0x7f00000002c0)=r3}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) 853.159374ms ago: executing program 4 (id=1381): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x4}, 0x15, 0x10000000ef4, 0x7c, 0x6, 0x8, 0x40000000, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000fc0)={0x5, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x1, 0x7, 0x3707, 0x6, 0x0, 0xc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x700) 771.562857ms ago: executing program 4 (id=1382): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000002c0)="ff", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x5435, 0x0, 0x9, 0x4, 0x6, 0x8000, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0xc0000, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x224061, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0xfffd, @random="c0c13c2baeb6", 'macvlan1\x00'}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file2\x00', 0x143142, 0x40) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) rseq(0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat(r7, &(0x7f0000000180)='./cgroup\x00', 0x440, 0x107) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r5, @ANYRES32=r6, @ANYBLOB="000700000000040014001a80100004800c00058008"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) 645.882162ms ago: executing program 0 (id=1383): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800020000000000000000000000000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x300, 0x0, 0x2, 0x1, 'syz0\x00', 0x3}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r5, 0x8008662c, &(0x7f0000000040)) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x10, 0x3f2, 0x300, 0x70bd29, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) quotactl_fd$Q_QUOTAON(r5, 0xffffffff80000201, 0x0, &(0x7f0000000240)='./file1\x00') fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002cc0)={{0x1, 0x1, 0x18, r1, {0x0, 0xffffffffffffffff}}, './file0\x00'}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000002d00)=0x0) lstat(&(0x7f0000002d40)='./file0\x00', &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = accept$packet(r3, 0x0, &(0x7f0000003040)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000003080)=0x0) r11 = getgid() r12 = getpgrp(0x0) r13 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r14) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000003100)={{0x1, 0x1, 0x18, r4, {0xee00, 0xee00}}, './file0\x00'}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000003140)={'\x00', 0x4, 0xf, 0x5, 0xfffffffffffffffa, 0x61eccdcf, 0xffffffffffffffff}) statx(r3, &(0x7f00000031c0)='./file0\x00', 0x400, 0x8, &(0x7f0000003200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = mq_open(&(0x7f0000003300)=':\x00', 0x40, 0x2, &(0x7f0000003340)={0x7, 0xf0d7, 0x3, 0x6}) sendmmsg$unix(r3, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000500)="8ef4fb0a93c40c3c7a1acbd09b6b783309797a6290c128916989f8b2973cf80ae47c173a3af56d68b71d64e324d6818a2f72b1e20e6ec37105008d598302a76a8b40bfba87162eb798ead157ab81121fc675b307371256e64f1bb91a13dcd779671599ddae2733e5611995c7d94856fec1cfe6e5155a5f3251a88f2aa6f7ed931e53b96c9fe3a3a5f82fcf8ff22f8df1a2b9c1e659a64fa40e3c25717c718962", 0xa0}, {&(0x7f00000005c0)="c385cb9e18d9de47d54f9959fd4fc0e513316284d4f0", 0x16}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)}, {&(0x7f0000001740)="6d7ec5b89428b58439fabe4ec6ef4767b97bc495a59502e4da729d638c202069470d3bcad016bef6355a476cd2d458b977c78ffdbfb66b0219938a82855472502aaaaed95ba7910662f1b79fbfaff3e244a656b47cf5b325c20bd40d8a7cf54e4ebdd2d8c698f631fbfa245a749ad65d0afc8f432f07a607fcabe2e123f966f08920f44e9fab7115a17c11fc0c2cabfd3fb3bb81a5b157f9b64fb9492a8916d73632bd895fee49478fb6c748036ea5692cc5ca41fd98e7f958466699358c73d21d2f7af1cefaa97b91ac2b81411feb0662cebc392b443a9ed612a57cf8114fbf6ed16029a744cb", 0xe7}, {&(0x7f0000001840)="2114ccfe546bdd1f6df662020512111c5025a38c2ec1f1b668d75973f74b83c88e5702dd351a22674f59679a940d819cb416897df80b5e1bcd9be86eb739e5008a50dabecfcbf9dc2860c525b61bf0546ae9be8b3d072a504adaa46109c82367b5875cb0215b38090ab7f1989cb94889773a4b085bec188723468c3c430f8fb440d0a5452254f8568d5d6eb2f7af7be11c3986ffdbb4da93594cc7f2eebae9d5152c063eb135d5dff553824c1246eebc080e26", 0xb3}], 0x6, &(0x7f00000019c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [r4, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0, r2, r3, r1]}}, @rights={{0x28, 0x1, 0x1, [r2, r4, r0, r4, 0xffffffffffffffff, r1]}}], 0x78, 0x1}}, {{&(0x7f0000001a40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002000)=[{&(0x7f0000001ac0)="85efecd6938e682bef51282bece8f71545b1f7d1bf0c499b73866cbe8d9567d0c87e7e1145b13617a063d588933a3c7dd790d3ab71458d4ee5ee3637a2", 0x3d}, {&(0x7f0000001b00)="67e07c732f0898b0373afc65726faf3940f409196a6236689f5f29d9b55d70cd2d675106aa8d6c9825c5a8ece57cc319e0fcdad2f14dd8b64150a85bc292a84d6250113e57eb94aee41947d0caf20e23b8c52d2c021f8f31", 0x58}, {&(0x7f0000001b80)="0e2651579c48290b0a7f9c056bf5c0", 0xf}, {&(0x7f0000001bc0)="28cf76676b55e6ff6537d1e44d5f3754225b0c4881167a74bda272814036fed54f34bf7963738ab6383c283b26b5e9846280a7a713578e202e9198dbd66bb8050e09e5f45174d17c42575e729f3585bb0c1c7882d3626218fb52cc98eb52acfa9c3b1264ab6145d171ce01c9", 0x6c}, {&(0x7f0000001c40)="6e615429eab67117d8a429b22e2bda76e7d3c5929164e7838a1c6becd3393e604d8227bd01385d56550db5d34b6c836a6207135eba46baa60d98385a3eac827d691ac6a51b426949eda4c6c707ab9b114b3d3666d44ba2bcb00b9f4190daff44b7cc9da5fea0b45dfdf6ba1b53dea6d988221df47061caa4ba8268eed4dae1ba7216b797522205e20cde7c8cb0971982b390b228ff116a3bff0072f7c069e412a783cb0f5cacd32d3692a69ffcb844bd5813b3e51236e6d190f4db3947e2235d5e2572b8246972a63f8106d2c07c888c56d5604398be291d837d9fb0744da89d8033", 0xe2}, {&(0x7f0000001d40)="66a8f51ae0fa6b5a45f51de55898e01eed1f4286e9c48290c90fe9fc85afee057e3f26009834291ec0306bf182947f322341252bba8176edfeba5a4058fcdc2ac9b3b0ebd18c66c33e41f9b02c5f6aad9e56a872f9a3796f5ff193aa0444994da61c4d3575c427ab67d76f66602f0c571314295637403a4e746a28a6b30efee5525de76de72340a46663937ff44a7536d24b26a38a459f098916481af47b85d4edd5faac5233a029d140542a2150f78c5c3c704543471bebd970cfdf245de090511814c96b9898bc6856ca8f6b9dac0b377ec47a0e48e8f0a51306500160153523753ebd25a2c052", 0xe8}, {&(0x7f0000001e40)="4f6d482b7d529574c5cfb367f9cf8baedead71a96ca4c9a9b988e8957076f214c54faa66383e4ca85a51b1deb8b97c4a3f4065e162356794ff285c45c2c6c7e438314528527808f65f3cc16f4fd4a9b4ce71293b9389b26253bd525d4c58b6bf684a3ef12d9f9a2ff2432ffe05f8c4fc05cca4e13e0f016ea3c5c63c64c20bec30e617a944afebeebf04778dea2e4945d0ba8a1ac3c82aedcd7fe96e6629ea51fb6b459f63ccd6e704d9d3f67ae3c7b116a6b14bad9429a033585e900c8df478502d5235cb8f94e292e4ad714cab4fa96ef0c76c3af5a52a150b0a4fc786eabc0c168b312b320dc92068ac2972bc", 0xee}, {&(0x7f0000001f40)="2d119c4cc0947bbb352a9cc7977f9c296df5d07700c72fc12613779a344a250506059a4e8335a153425b63ff13513f3f91d671bbd7dfc8a92c80a9fe55899a98915f06120c6b833a00f1ae97fd77d55df32577174807f888da62a327e6242609abe96991c41f4878660f82ecd761ff8a2eb5c2fabda636dff36dc7aaf5f537f367172758d694b40fecae8a44fb16a9559eacc3ce5e51", 0x96}], 0x8, &(0x7f0000002280)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, r1, r2, r4, r2, r1]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x80}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002300)="cad0ee677beaf030e5d0b05e566c22f8fdf55a1c376a0e0b43f6449130a5b4c23eaf1e53a5bd296aa34ca517fcb09c345d4ebe81cc1c75e75707061d845e92be140264928ad8400ed4003fa5e7a6d217ec4dd692abc0492a165ceaf929881f54bfa6af691728e68c7b9a41d56b079e89d0c6afd8cff055203751ac32e099cdc983fd86601f46565e4a38bfcf17a05fca3280e83888360b3b2e9f331b7c2e7373317835e28aa27b04b701f996bb8b9f15fa6b489194b8b02dfd62c37e27fa5436c6a97191880bcc4ec2701fddee7d2f12570ccad3", 0xd4}, {&(0x7f0000002400)="ea1698f8add3ea6fd8704e53fffd2d0e00517a19d5d47b3989e7a737be60ffc5dce7963a27187b2350b46bcbeb49e72ae588540153cf440fe23836b40b6188751ecbb473c467a967426971ec5b07b4f5e72bef216aab1aefe8035e6c9bbc5747722d7f00e4b969075defb6a71eb042488f3d1ef43e3717fad13b91ae73cda8469b61c83e263d47342969708a753b73dc1b5f4ec31c18400b7da8b8fb81324cc24c3495d41a6402b8480569682508ca770ef07836a255e195c5c2804da9a851e2baba3b75030e75d845084bb0dbfa53af", 0xd0}], 0x2, &(0x7f0000002640)=[@rights={{0x34, 0x1, 0x1, [r1, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r3, r4]}}, @rights={{0x2c, 0x1, 0x1, [r1, r4, r2, r2, r3, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0xa0, 0x20000004}}, {{&(0x7f0000002700)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000002780)="1651fdbf0d99a9ce8e8942a181c3dda7685d442928dae50f6ee973bf930b3bce9ad1f5d533055f4a471a1476d41d40441ff23d82be6dcfc14c004746804149c0517e0c4ece275a40aae305e577552ef1aa1ddbf33c8aea5169219817fc71f6780fcb86446c142d70ddba34b8d6d521acd13380c14c616fa34c38ea3f345d67a1e05da29976ab8b8be85d483c2574880d05fd804b2f92780288d471268eb47d23beaf85ca05f0617742c4dfbdf32afe2c74b78c05be532d7f37225852606b33", 0xbf}, {&(0x7f0000002840)="d1b3fdc4e2140782416cf588fe2666106ae2e914d6f5e8243c37cca44f449fc69d1e1af75fd86c666f1e76728c5780266bf8ff304ed507ab92e7e78d8b1ace85714628a8ff90ab67fc9cacfccf3ab4e2ebc85e8b4a5a4001c996e1cb9b9a7d7e385e2ef3c8403421f0a2caf745d337fcfe17cd5933843a8830d6bf19f7d970c7bf1a3537f5f02f0a68e64b51f67538f454b1a77bbdd624ee4fcf157d4600f827a8f182a85745afcb2cb08975", 0xac}, {&(0x7f0000002900)="0468f5d1fbf0201d6be2f25bcfc6623b62a2aee1dc0cdd8fb0", 0x19}, {&(0x7f0000002940)="42ea92c9364720053ed103de336c94366593da375a56bb0f1c2a5deee765ff39b34ff4326e24103e051543341028ce0fc4affa81640582a9fd7b53b8d01a6bc868c2f1a21a73fab59746385e446fa2342e8039d313d0947fd789ad9bcd08c8f1b67081a19fee39dfc21f02348137a752a24998fa72e0ff51afc5c8b369d6f6fa9d617fae57301abd95638eac18abacdb9b1ca55ada6599c26100627fb54b1c7957fcdc2300a7309d6274dc992f21ee1c3f556b1ef82dc87e0d8832893337c890f03d030c456d880ece90d8ee44f8964799110dc735b462", 0xd7}, {&(0x7f0000002a40)="4b5f678fd092f324ae5e3d50d1cc68b7c52e228ac0bbc444f2530ed99bfb3045373b32e1b7109b14e55578e4601bb09d59ddd6f6379b21033c11d68516475f7e7ce6e319e4e964573ef7", 0x4a}, {&(0x7f0000002ac0)="46f96e947f87fe62712f2c5fc0b8b290256b76f3fe69c8ffa43170802d012651e318a1c88ca20f4fc92f09a34e45b3eaa641232e95a6809416bc3c8536545eff26f7da12810cf3967c6fda2e31266af32a403a62c6133f2ad151cebe5086779e537e2efcea0cbc37612decfe2c800a2ddfa0a96a10ee84a135d9c282b5c5bd4fad9856e887bcec18c1c99c9ba3c11ec127fd3a", 0x93}, {&(0x7f0000002b80)="4e9861a996d5918a", 0x8}], 0x7, &(0x7f0000002e00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r2, r2, r4, 0xffffffffffffffff, r1]}}, @rights={{0x30, 0x1, 0x1, [r3, r3, r2, r3, r1, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, 0xee01}}}], 0xa0, 0x20000001}}, {{&(0x7f0000002ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003000)=[{&(0x7f0000002f40)="aab4a6e399abf49c5b0a44a4698060e458a6a4e8eb29c27cdecf91504421b53bd1f54df1441038db3d5b944369be7d74a4180786d132d086e272244dcf83f7a4148b5e8a0c10d2e4217f358b58fa3fe74d964cbf9e15d3e88af00bf33611ff865554213dbf71338d39152f70aabc838e3c9a67690af1b37da8ba76d8e62fa0f70f94c4c4955d77fd53", 0x89}], 0x1, &(0x7f0000003380)=[@rights={{0x2c, 0x1, 0x1, [r1, r0, r4, r0, r1, r2, r1]}}, @rights={{0x18, 0x1, 0x1, [r9, r1]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0x0, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, 0x0, r17}}}, @rights={{0x1c, 0x1, 0x1, [r1, r4, r18]}}], 0xc8, 0x20000041}}], 0x5, 0x24195) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 376.239494ms ago: executing program 2 (id=1384): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.max.depth\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="9400000010000104000000000b9bdd51eb5d4f91", @ANYRES32=0x0, @ANYBLOB="80420000440001005c00128009000100626f6e64000000004c00028005000100050000000800030007000000080004000a000000080009000300000305001d00090000000500150001000000050010008000000005001b00df020000080007000200000008003a"], 0x94}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 287.386368ms ago: executing program 0 (id=1385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x68040200) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f00000001c0)={'\x00', 0x6, 0x1, 0xfffff734}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) unshare(0x20010000) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r4 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', 0x20cc16, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x3, 0x22e, &(0x7f0000000480)="$eJzs3cFOE08cB/DfQqGF/z+Rm4mJyRoPeiJqfACM0cRIYoLpQW8kcmLjgV5aLvAYvoLv5QMYTlzMGNwuC21dSJWWms/nwo/5ziw7O2R3L52mKH27+yU6nSyWtmIrTrPYiKWoHMeo1lgLALA4TlOK7yml9ZTS5B7PG0Z7DwCARVQ9/9Nvn//xY8anBADcsPcfPr59sd2OnTzvRJwc97v9bvmzzF+/2X71JP9loxrzX5z0+93l8/xpPvrucJavxPowf1aOz8/j1Yjorsbjh2V+lr18t51fHt+OTzc+ewAAAAAAAAAAAAAAAAAAAAAAmI/7kVc26tZ6f5/NzdF8bZiXv13YH2hk/55W3Ku2B663B0pHs5gUAAAAAAAAAAAAAAAAAAAALJje4HB/tyj2DuqiHREXW1p1lLLL0YQiGx64qc8tKpZiuuFrw2leo/PnkZZseImaR7X+8BquTV7c6xTRui2rM22R/4XjpDu7RdGulnmsTzT/A6R0VkxewWpbjEtR5PV6rUZE8xk+2pl2XqcppeLrg4PeIFJj5/oe0Z7FjQgAAAAAAAAAAAAAAAAAALjwEfHxrLM8jzMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNnrDQ6rb/k/3N8tir0sBmVx0LuyOIqI/+PKztXfWonO/CYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP+1nAAAA//8zfBSj") openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000003c0)) setresgid(0x0, r5, r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [{0x2, 0x4}, {}, {}, {}, {}], {0x4, 0x1}, [{0x8, 0x6}], {0x10, 0x6}}, 0x54, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYRES16=r6], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000a0a0102000000000089c759146663fca5704a77f0e815a9a8ebe37daeb377a2f088e2ab70fa4024eeb37589459af3df5042eb8ed8fe683370dd"], 0x14}, 0x1, 0x0, 0x0, 0x20008044}, 0x40) 116.056125ms ago: executing program 2 (id=1386): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1a08402, &(0x7f0000000700)={[{@delalloc}, {@nodioread_nolock}, {@norecovery}, {@stripe={'stripe', 0x3d, 0x1}}, {@discard}, {@usrjquota}, {@data_err_ignore}, {@data_ordered}, {@quota}, {@data_journal}, {@resuid}, {@errors_continue}]}, 0x1, 0x579, &(0x7f00000007c0)="$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") 115.463305ms ago: executing program 3 (id=1387): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xcc}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x60}, 0x94) 68.817638ms ago: executing program 4 (id=1388): shutdown(0xffffffffffffffff, 0xb34178a9596a50d) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") unshare(0x64000600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700400000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) unshare(0x6020400) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') fallocate(r2, 0x40, 0x8000, 0x6) syz_open_procfs(0x0, 0x0) 0s ago: executing program 2 (id=1389): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x3, 0x3, 0x0, 0x2, 0x80000001, 0x6, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, 0x1c) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) socket(0x10, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}, {{&(0x7f00000004c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000500)="ad", 0x1}], 0x1}}], 0x3, 0x8080) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000780000007800000006000000030000000000000805000000020000000100000426010000040000000400000003000000000000000600000d000000000e00000003000000070000000400000001000000010000000c0000000000000004000000030000020f000000050000000400000000000012030000"], 0x0, 0x96, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) kernel console output (not intermixed with test programs): 0000-000000d40000. [ 209.978715][ T7092] loop1: detected capacity change from 0 to 512 [ 209.996736][ T7088] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 210.041930][ T7088] loop4: lost filesystem error report for type 5 error -117 [ 210.042143][ T7088] EXT4-fs (loop4): 1 truncate cleaned up [ 210.061909][ T7095] loop0: detected capacity change from 0 to 512 [ 210.078835][ T7092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 210.107105][ T7092] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.121709][ T7088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.306441][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.486784][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.965'. [ 210.510382][ T7112] 9p: Bad value for 'rfdno' [ 210.628638][ T7114] loop0: detected capacity change from 0 to 512 [ 210.636318][ T7114] EXT4-fs: Ignoring removed nobh option [ 210.656796][ T7114] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 210.691020][ T7114] EXT4-fs (loop0): 1 truncate cleaned up [ 210.698449][ T7114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.051188][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 211.585622][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.640788][ T7123] hub 8-0:1.0: USB hub found [ 211.645752][ T7123] hub 8-0:1.0: 8 ports detected [ 211.689788][ T7125] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 211.801897][ T7125] EXT4-fs (loop1): 1 truncate cleaned up [ 211.857106][ T7128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.878297][ T7125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.901669][ T7128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.006528][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.115288][ T7135] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 212.135239][ T7135] EXT4-fs (loop0): 1 truncate cleaned up [ 212.145359][ T7135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.159291][ T7135] EXT4-fs (loop0): shut down requested (0) [ 212.214279][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.237685][ T7144] set_capacity_and_notify: 3 callbacks suppressed [ 212.237700][ T7144] loop1: detected capacity change from 0 to 512 [ 212.262685][ T7144] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 212.293259][ T7144] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 212.313919][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 212.320446][ C0] EXT4-fs (loop1): initial error at time 1778603827: mb_free_blocks:2049: inode 11: block 64 [ 212.330711][ C0] EXT4-fs (loop1): last error at time 1778603827: mb_free_blocks:2049: inode 11: block 64 [ 212.342597][ T7144] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #11: comm syz.1.975: corrupted inode contents [ 212.355220][ T7144] fserror_report: 2 callbacks suppressed [ 212.355238][ T7144] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 212.364390][ T7144] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #11: comm syz.1.975: mark_inode_dirty error [ 212.385176][ T7144] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 212.385424][ T7144] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.975: invalid indirect mapped block 1 (level 1) [ 212.408089][ T7144] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 212.408293][ T7144] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #11: comm syz.1.975: corrupted inode contents [ 212.429633][ T7144] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 212.430108][ T7144] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 212.448470][ T7144] loop1: lost filesystem error report for type 5 error -117 [ 212.448612][ T7144] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #11: comm syz.1.975: corrupted inode contents [ 212.451655][ T7150] can0: slcan on ttyS3. [ 212.456040][ T7144] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 212.473688][ T7144] EXT4-fs error (device loop1): ext4_truncate:4690: inode #11: comm syz.1.975: mark_inode_dirty error [ 212.494236][ T7144] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 212.494392][ T7144] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 212.512646][ T7144] loop1: lost filesystem error report for type 5 error -117 [ 212.513140][ T7144] EXT4-fs (loop1): 1 truncate cleaned up [ 212.527808][ T7144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.564065][ T7148] can0 (unregistered): slcan off ttyS3. [ 212.581502][ T7155] loop4: detected capacity change from 0 to 512 [ 212.621512][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.638934][ T7155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 212.651844][ T7155] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.692839][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.980'. [ 212.721349][ T7172] FAULT_INJECTION: forcing a failure. [ 212.721349][ T7172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.869170][ T7175] hub 8-0:1.0: USB hub found [ 212.874300][ T7175] hub 8-0:1.0: 8 ports detected [ 212.968629][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 212.968645][ T28] audit: type=1400 audit(1778603827.882:1616): avc: denied { write } for pid=7154 comm="syz.4.977" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 213.014160][ T7172] CPU: 0 UID: 0 PID: 7172 Comm: syz.3.982 Not tainted syzkaller #0 PREEMPT(full) [ 213.014191][ T7172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 213.014203][ T7172] Call Trace: [ 213.014210][ T7172] [ 213.014218][ T7172] __dump_stack+0x1d/0x30 [ 213.014253][ T7172] dump_stack_lvl+0x95/0xd0 [ 213.014280][ T7172] dump_stack+0x15/0x1b [ 213.014304][ T7172] should_fail_ex+0x263/0x280 [ 213.014368][ T7172] should_fail+0xb/0x20 [ 213.014398][ T7172] should_fail_usercopy+0x1a/0x20 [ 213.014429][ T7172] _copy_from_user+0x1c/0xb0 [ 213.014539][ T7172] __sys_bpf+0x183/0x7e0 [ 213.014653][ T7172] __x64_sys_bpf+0x41/0x50 [ 213.014681][ T7172] x64_sys_call+0x10cb/0x3020 [ 213.014709][ T7172] do_syscall_64+0x12c/0x3b0 [ 213.014755][ T7172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.014779][ T7172] RIP: 0033:0x7fa4d3a7cdd9 [ 213.014797][ T7172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.014821][ T7172] RSP: 002b:00007fa4d24d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 213.014840][ T7172] RAX: ffffffffffffffda RBX: 00007fa4d3cf5fa0 RCX: 00007fa4d3a7cdd9 [ 213.014880][ T7172] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 213.014897][ T7172] RBP: 00007fa4d24d7090 R08: 0000000000000000 R09: 0000000000000000 [ 213.014914][ T7172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.014943][ T7172] R13: 00007fa4d3cf6038 R14: 00007fa4d3cf5fa0 R15: 00007ffe9fe94738 [ 213.015033][ T7172] [ 213.725441][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 213.923730][ T7189] loop0: detected capacity change from 0 to 128 [ 213.988896][ T28] audit: type=1400 audit(1778603828.142:1617): avc: denied { write } for pid=7154 comm="syz.4.977" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 213.994235][ T7189] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 214.010916][ T28] audit: type=1400 audit(1778603828.742:1618): avc: denied { write } for pid=7153 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.048610][ T7189] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.064664][ T28] audit: type=1400 audit(1778603828.992:1619): avc: denied { write } for pid=7191 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.112811][ T28] audit: type=1400 audit(1778603829.032:1620): avc: denied { write } for pid=7188 comm="syz.0.986" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.134688][ T28] audit: type=1400 audit(1778603829.042:1621): avc: denied { write } for pid=7188 comm="syz.0.986" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.167331][ T7197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.197777][ T7197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.210691][ T7200] loop4: detected capacity change from 0 to 512 [ 214.233152][ T7200] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 214.261492][ T28] audit: type=1400 audit(1778603829.182:1622): avc: denied { getopt } for pid=7206 comm="syz.1.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 214.289535][ T7200] EXT4-fs (loop4): 1 truncate cleaned up [ 214.303181][ T7204] loop3: detected capacity change from 0 to 4096 [ 214.310126][ T7200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.325639][ T7204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.342339][ T28] audit: type=1400 audit(1778603829.272:1623): avc: denied { write } for pid=7203 comm="syz.3.988" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.344986][ T7200] EXT4-fs (loop4): shut down requested (0) [ 214.389792][ T7214] loop1: detected capacity change from 0 to 512 [ 214.406305][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.412228][ T7189] tipc: Started in network mode [ 214.427619][ T7214] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 214.429470][ T7189] tipc: Node identity ac1414aa, cluster identity 4711 [ 214.451300][ T7214] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 214.473875][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 214.476227][ T7189] tipc: Enabled bearer , priority 10 [ 214.480411][ C1] EXT4-fs (loop1): initial error at time 1778603829: mb_free_blocks:2049: inode 11: block 64 [ 214.480450][ C1] EXT4-fs (loop1): last error at time 1778603829: mb_free_blocks:2049: inode 11: block 64 [ 214.515713][ T28] audit: type=1400 audit(1778603829.442:1624): avc: denied { write } for pid=7198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.527259][ T7214] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #11: comm syz.1.990: corrupted inode contents [ 214.559569][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.574552][ T7214] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 214.605900][ T28] audit: type=1400 audit(1778603829.512:1625): avc: denied { write } for pid=7223 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.627128][ T7189] tipc: Enabled bearer , priority 0 [ 214.638429][ T7214] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #11: comm syz.1.990: mark_inode_dirty error [ 214.638460][ T7214] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 214.644328][ T7214] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.990: invalid indirect mapped block 1 (level 1) [ 214.644385][ T7214] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 214.644596][ T7214] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #11: comm syz.1.990: corrupted inode contents [ 214.644628][ T7214] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 214.644768][ T7214] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 214.644802][ T7214] loop1: lost filesystem error report for type 5 error -117 [ 214.644989][ T7214] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #11: comm syz.1.990: corrupted inode contents [ 214.645106][ T7214] EXT4-fs error (device loop1): ext4_truncate:4690: inode #11: comm syz.1.990: mark_inode_dirty error [ 214.645302][ T7214] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 214.645322][ T7214] loop1: lost filesystem error report for type 5 error -117 [ 214.645570][ T7214] EXT4-fs (loop1): 1 truncate cleaned up [ 214.646057][ T7214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.686874][ T7227] netlink: 48 bytes leftover after parsing attributes in process `syz.4.992'. [ 214.888238][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.039395][ T7243] loop1: detected capacity change from 0 to 512 [ 215.288035][ T7243] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.632713][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.999'. [ 215.922200][ T3413] tipc: Node number set to 2886997162 [ 216.326760][ T7264] loop0: detected capacity change from 0 to 128 [ 216.371468][ T7264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1002'. [ 216.414447][ T7266] loop2: detected capacity change from 0 to 4096 [ 216.422869][ T7268] loop1: detected capacity change from 0 to 512 [ 216.461053][ T7268] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 216.521686][ T7271] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 216.553401][ T7268] EXT4-fs (loop1): 1 truncate cleaned up [ 216.575516][ T7276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.578121][ T7273] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 216.593847][ T7276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.605903][ T7268] EXT4-fs (loop1): shut down requested (0) [ 216.632192][ T7273] EXT4-fs (loop4): 1 truncate cleaned up [ 216.638126][ T7271] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 216.658866][ T7271] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #11: comm syz.0.1005: corrupted inode contents [ 216.673899][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 216.680380][ C1] EXT4-fs (loop0): initial error at time 1778603831: mb_free_blocks:2049: inode 11: block 64 [ 216.690608][ C1] EXT4-fs (loop0): last error at time 1778603831: ext4_do_update_inode:5690: inode 11 [ 216.705577][ T7271] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #11: comm syz.0.1005: mark_inode_dirty error [ 216.738765][ T7271] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1005: invalid indirect mapped block 1 (level 1) [ 216.753155][ T7271] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #11: comm syz.0.1005: corrupted inode contents [ 216.766049][ T7271] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 216.774803][ T7271] loop0: lost filesystem error report for type 5 error -117 [ 216.775006][ T7271] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #11: comm syz.0.1005: corrupted inode contents [ 216.795363][ T7271] EXT4-fs error (device loop0): ext4_truncate:4690: inode #11: comm syz.0.1005: mark_inode_dirty error [ 216.924490][ T7271] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 216.941666][ T7271] loop0: lost filesystem error report for type 5 error -117 [ 216.941878][ T7271] EXT4-fs (loop0): 1 truncate cleaned up [ 217.061453][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'. [ 217.141507][ T7287] hub 8-0:1.0: USB hub found [ 217.192320][ T7287] hub 8-0:1.0: 8 ports detected [ 217.518092][ T7303] set_capacity_and_notify: 2 callbacks suppressed [ 217.518574][ T7303] loop3: detected capacity change from 0 to 512 [ 217.621087][ T7303] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.650526][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 218.650544][ T28] audit: type=1400 audit(1778603832.802:1630): avc: denied { write } for pid=7301 comm="syz.3.1014" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 218.737622][ T28] audit: type=1400 audit(1778603832.842:1631): avc: denied { write } for pid=7301 comm="syz.3.1014" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 218.905787][ T7314] bridge0: port 4(batadv2) entered blocking state [ 218.947368][ T7314] bridge0: port 4(batadv2) entered disabled state [ 218.971019][ T7314] batadv2: entered allmulticast mode [ 218.987057][ T7314] batadv2: entered promiscuous mode [ 218.995983][ T7318] loop3: detected capacity change from 0 to 1024 [ 219.070450][ T28] audit: type=1400 audit(1778603833.992:1632): avc: denied { write } for pid=7317 comm="syz.3.1016" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.085976][ T7316] loop0: detected capacity change from 0 to 512 [ 219.120634][ T28] audit: type=1400 audit(1778603834.012:1633): avc: denied { map } for pid=7317 comm="syz.3.1016" path="/212/file1/freezer.self_freezing" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 219.227310][ T7316] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 219.260601][ T7316] EXT4-fs (loop0): orphan cleanup on readonly fs [ 219.272410][ T7316] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1018: bad orphan inode 15 [ 219.288712][ T7316] loop0: lost filesystem error report for type 5 error -117 [ 219.303962][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 219.318793][ C1] EXT4-fs (loop0): initial error at time 1778603834: ext4_orphan_get:1423 [ 219.328001][ C1] EXT4-fs (loop0): last error at time 1778603834: ext4_orphan_get:1423 [ 219.405151][ T3715] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 219.414477][ T3715] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 219.424063][ T7316] ext4_test_bit(bit=14, block=18) = 1 [ 219.471596][ T7316] is_bad_inode(inode)=0 [ 219.477356][ T7316] NEXT_ORPHAN(inode)=1023 [ 219.483405][ T7316] max_ino=32 [ 219.487251][ T7316] i_nlink=0 [ 219.505872][ T7316] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1018: bg 0: block 161: padding at end of block bitmap is not set [ 219.654233][ T7316] loop0: lost filesystem error report for type 5 error -117 [ 219.714476][ T7316] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 219.858470][ T7316] loop0: lost filesystem error report for type 5 error -117 [ 220.134806][ T7345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.153015][ T7322] gre0 speed is unknown, defaulting to 1000 [ 220.168097][ T7345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.225941][ T7322] xfrm0 speed is unknown, defaulting to 1000 [ 220.239000][ T7343] loop0: detected capacity change from 0 to 4096 [ 220.249139][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1025'. [ 220.264807][ T7349] loop4: detected capacity change from 0 to 512 [ 220.272529][ T28] audit: type=1400 audit(1778603835.192:1634): avc: denied { write } for pid=7342 comm="syz.0.1022" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.326276][ T7349] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1026: inode has both inline data and extents flags [ 220.357755][ T7349] fserror_report: 8 callbacks suppressed [ 220.357768][ T7349] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 220.363887][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 220.364562][ T7349] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1026: couldn't read orphan inode 15 (err -117) [ 220.373058][ C0] EXT4-fs (loop4): initial error at time 1778603835: ext4_orphan_get:1397: inode 15 [ 220.400826][ C0] EXT4-fs (loop4): last error at time 1778603835: ext4_orphan_get:1397: inode 15 [ 220.407756][ T7349] loop4: lost filesystem error report for type 5 error -117 [ 220.439423][ T7353] loop3: detected capacity change from 0 to 512 [ 220.472648][ T7357] loop0: detected capacity change from 0 to 512 [ 220.480490][ T7357] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 220.483229][ T7353] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.504809][ T7355] hub 8-0:1.0: USB hub found [ 220.509589][ T7355] hub 8-0:1.0: 8 ports detected [ 220.519791][ T28] audit: type=1400 audit(1778603835.442:1635): avc: denied { create } for pid=7348 comm="syz.4.1026" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rxrpc_socket permissive=1 [ 220.560081][ T28] audit: type=1400 audit(1778603835.472:1636): avc: denied { create } for pid=7348 comm="syz.4.1026" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=can_socket permissive=1 [ 220.581594][ T7357] EXT4-fs (loop0): 1 truncate cleaned up [ 220.598910][ T7357] EXT4-fs (loop0): shut down requested (0) [ 220.695219][ T7366] loop4: detected capacity change from 0 to 1024 [ 220.702996][ T7366] EXT4-fs: Ignoring removed nomblk_io_submit option [ 220.842991][ T28] audit: type=1400 audit(1778603835.702:1637): avc: denied { write } for pid=7352 comm="syz.3.1028" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.929397][ T7366] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01d, mo2=0003] [ 221.056762][ T7366] System zones: 0-1, 3-36 [ 221.115327][ T28] audit: type=1400 audit(1778603835.732:1638): avc: denied { write } for pid=7352 comm="syz.3.1028" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.215289][ T7366] EXT4-fs (loop4): shut down requested (2) [ 221.253411][ T28] audit: type=1400 audit(1778603836.172:1639): avc: denied { write } for pid=7365 comm="syz.4.1030" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.303252][ T7381] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1034'. [ 221.396696][ T7385] loop1: detected capacity change from 0 to 512 [ 221.417886][ T7385] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 221.451954][ T7385] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 221.474015][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 221.476040][ T7385] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #11: comm syz.1.1038: corrupted inode contents [ 221.481633][ C1] EXT4-fs (loop1): initial error at time 1778603836: mb_free_blocks:2049 [ 221.492766][ T7385] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 221.495237][ T7385] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #11: comm syz.1.1038: mark_inode_dirty error [ 221.502510][ C1] : inode 11 [ 221.510937][ T7385] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 221.511178][ T7385] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1038: invalid indirect mapped block 1 (level 1) [ 221.511209][ T7385] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 221.511438][ T7385] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #11: comm syz.1.1038: corrupted inode contents [ 221.523406][ C1] : block 64 [ 221.528027][ T7385] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 221.536189][ C1] [ 221.549294][ T7385] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 221.549319][ T7385] loop1: lost filesystem error report for type 5 error -117 [ 221.549490][ T7385] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #11: comm syz.1.1038: corrupted inode contents [ 221.549533][ T7385] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 221.559033][ C1] EXT4-fs (loop1): last error at time 1778603836: ext4_orphan_del:303 [ 221.571485][ T7385] EXT4-fs error (device loop1): ext4_truncate:4690: inode #11: comm syz.1.1038: mark_inode_dirty error [ 221.574105][ C1] : inode 11 [ 221.583315][ T7385] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 221.583510][ T7385] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 221.583534][ T7385] loop1: lost filesystem error report for type 5 error -117 [ 221.583719][ T7385] EXT4-fs (loop1): 1 truncate cleaned up [ 221.631843][ T7392] loop3: detected capacity change from 0 to 512 [ 221.635824][ C1] [ 221.652153][ T7392] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 221.807979][ T7396] hub 8-0:1.0: USB hub found [ 221.812738][ T7396] hub 8-0:1.0: 8 ports detected [ 221.882445][ T7392] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 221.904449][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 221.911660][ C0] EXT4-fs (loop3): initial error at time 1778603836: mb_free_blocks:2049: inode 11: block 64 [ 221.924199][ C0] EXT4-fs (loop3): last error at time 1778603836: mb_free_blocks:2049: inode 11: block 64 [ 221.936867][ T7392] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #11: comm syz.3.1040: corrupted inode contents [ 221.961018][ T7392] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 221.961732][ T7392] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #11: comm syz.3.1040: mark_inode_dirty error [ 222.013964][ T7392] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 222.014159][ T7392] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1040: invalid indirect mapped block 1 (level 1) [ 222.082305][ T7402] hub 8-0:1.0: USB hub found [ 222.103451][ T7402] hub 8-0:1.0: 8 ports detected [ 222.108719][ T7392] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 222.113125][ T7392] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #11: comm syz.3.1040: corrupted inode contents [ 222.135527][ T7403] EXT4-fs: test_dummy_encryption option not supported [ 222.163151][ T7392] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 222.204417][ T7400] gtp0: entered promiscuous mode [ 222.215488][ T7392] loop3: lost filesystem error report for type 5 error -117 [ 222.215723][ T7392] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #11: comm syz.3.1040: corrupted inode contents [ 222.266339][ T7400] gtp0: entered allmulticast mode [ 222.285663][ T7392] EXT4-fs error (device loop3): ext4_truncate:4690: inode #11: comm syz.3.1040: mark_inode_dirty error [ 222.312101][ T7378] Process accounting resumed [ 222.354304][ T7400] team0: Device gtp0 is of different type [ 222.361126][ T7392] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 222.380414][ T7409] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1044'. [ 222.389558][ T7392] loop3: lost filesystem error report for type 5 error -117 [ 222.390553][ T7392] EXT4-fs (loop3): 1 truncate cleaned up [ 222.900740][ T7419] set_capacity_and_notify: 4 callbacks suppressed [ 222.900937][ T7419] loop3: detected capacity change from 0 to 512 [ 223.019680][ T7426] loop4: detected capacity change from 0 to 512 [ 223.047444][ T7426] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.525199][ T7433] loop1: detected capacity change from 0 to 512 [ 223.686076][ T7408] Process accounting resumed [ 224.116402][ T7448] loop2: detected capacity change from 0 to 512 [ 224.174228][ T7447] loop4: detected capacity change from 0 to 4096 [ 224.260069][ T7454] loop1: detected capacity change from 0 to 512 [ 224.295399][ T7448] EXT4-fs: Ignoring removed nobh option [ 224.302662][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 224.302756][ T28] audit: type=1400 audit(1778603839.222:1645): avc: denied { write } for pid=7446 comm="syz.4.1053" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.351986][ T7454] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 224.428966][ T7448] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 224.460091][ T7454] EXT4-fs (loop1): 1 truncate cleaned up [ 224.517977][ T7450] EXT4-fs (loop1): shut down requested (0) [ 224.545672][ T7448] EXT4-fs (loop2): 1 truncate cleaned up [ 224.608598][ T28] audit: type=1400 audit(1778603839.532:1646): avc: denied { write } for pid=7439 comm="syz.2.1051" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.664394][ T7464] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1055'. [ 224.701126][ T28] audit: type=1400 audit(1778603839.532:1647): avc: denied { write } for pid=7439 comm="syz.2.1051" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.754679][ T28] audit: type=1400 audit(1778603839.532:1648): avc: denied { write } for pid=7439 comm="syz.2.1051" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.777564][ T28] audit: type=1400 audit(1778603839.532:1649): avc: denied { write } for pid=7439 comm="syz.2.1051" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.539072][ T7486] loop1: detected capacity change from 0 to 4096 [ 225.556303][ T28] audit: type=1400 audit(1778603840.482:1650): avc: denied { write } for pid=7485 comm="syz.1.1063" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.640552][ T28] audit: type=1400 audit(1778603840.482:1651): avc: denied { write } for pid=7485 comm="syz.1.1063" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.683991][ T7495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.702832][ T7495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.753928][ T28] audit: type=1400 audit(1778603840.512:1652): avc: denied { connect } for pid=7488 comm="syz.0.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 226.449845][ T28] audit: type=1400 audit(1778603841.372:1653): avc: denied { block_suspend } for pid=7516 comm="syz.3.1072" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 226.519866][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'. [ 226.569916][ T7517] loop3: detected capacity change from 0 to 256 [ 226.649521][ T7459] Process accounting resumed [ 226.741388][ T7530] loop4: detected capacity change from 0 to 4096 [ 226.751641][ T28] audit: type=1400 audit(1778603841.682:1654): avc: denied { write } for pid=7529 comm="syz.4.1077" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.809997][ T7535] xt_hashlimit: size too large, truncated to 1048576 [ 226.910954][ T7544] loop3: detected capacity change from 0 to 512 [ 226.938945][ T7540] EXT4-fs: Ignoring removed bh option [ 226.954854][ T7540] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 226.974928][ T7540] EXT4-fs (loop4): orphan cleanup on readonly fs [ 226.993638][ T7540] EXT4-fs error (device loop4): ext4_quota_enable:7221: comm syz.4.1080: Bad quota inum: 4294934528, type: 0 [ 227.027779][ T7540] loop4: lost filesystem error report for type 5 error -117 [ 227.029454][ T7540] EXT4-fs (loop4): Remounting filesystem read-only [ 227.037040][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 227.037068][ C1] EXT4-fs (loop4): initial error at time 1778603841: ext4_quota_enable:7221 [ 227.037107][ C1] EXT4-fs (loop4): last error at time 1778603841: ext4_quota_enable:7221 [ 227.086056][ T7540] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=4294934528). Please run e2fsck to fix. [ 227.119059][ T7540] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 227.207280][ T7557] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1086'. [ 227.275775][ T7561] FAULT_INJECTION: forcing a failure. [ 227.275775][ T7561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.297311][ T7561] CPU: 0 UID: 0 PID: 7561 Comm: syz.0.1088 Not tainted syzkaller #0 PREEMPT(full) [ 227.297344][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 227.297360][ T7561] Call Trace: [ 227.297368][ T7561] [ 227.297378][ T7561] __dump_stack+0x1d/0x30 [ 227.297436][ T7561] dump_stack_lvl+0x95/0xd0 [ 227.297555][ T7561] dump_stack+0x15/0x1b [ 227.297580][ T7561] should_fail_ex+0x263/0x280 [ 227.297627][ T7561] should_fail+0xb/0x20 [ 227.297658][ T7561] should_fail_usercopy+0x1a/0x20 [ 227.297687][ T7561] _copy_to_user+0x20/0xa0 [ 227.297759][ T7561] simple_read_from_buffer+0xb5/0x130 [ 227.297875][ T7561] proc_fail_nth_read+0x10e/0x150 [ 227.297906][ T7561] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 227.297972][ T7561] vfs_read+0x1ab/0x7f0 [ 227.298004][ T7561] ? __rcu_read_unlock+0x4e/0x70 [ 227.298024][ T7561] ? __fget_files+0x184/0x1c0 [ 227.298053][ T7561] ? mutex_lock+0x57/0x90 [ 227.298077][ T7561] ksys_read+0xdc/0x1a0 [ 227.298111][ T7561] __x64_sys_read+0x40/0x50 [ 227.298165][ T7561] x64_sys_call+0x2886/0x3020 [ 227.298190][ T7561] do_syscall_64+0x12c/0x3b0 [ 227.298223][ T7561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.298289][ T7561] RIP: 0033:0x7f89166cd60e [ 227.298329][ T7561] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 227.298353][ T7561] RSP: 002b:00007f8915166fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 227.298379][ T7561] RAX: ffffffffffffffda RBX: 00007f89151676c0 RCX: 00007f89166cd60e [ 227.298432][ T7561] RDX: 000000000000000f RSI: 00007f89151670a0 RDI: 0000000000000004 [ 227.298449][ T7561] RBP: 00007f8915167090 R08: 0000000000000000 R09: 0000000000000000 [ 227.298465][ T7561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.298481][ T7561] R13: 00007f8916986038 R14: 00007f8916985fa0 R15: 00007ffcd3cf3db8 [ 227.298502][ T7561] [ 227.652931][ T7572] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 227.686988][ T7572] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.1095: corrupted xattr entries [ 227.717928][ T7572] fserror_report: 3 callbacks suppressed [ 227.717947][ T7572] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 227.724727][ T7572] EXT4-fs (loop4): 1 truncate cleaned up [ 227.733940][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 227.733979][ C0] EXT4-fs (loop4): initial error at time 1778603842: xattr_find_entry:337: inode 15 [ 227.734013][ C0] EXT4-fs (loop4): last error at time 1778603842: xattr_find_entry:337: inode 15 [ 227.789217][ T7577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1094'. [ 227.809359][ T7577] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1094'. [ 227.881819][ T7581] EXT4-fs: Ignoring removed nobh option [ 227.888263][ T7581] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 228.015582][ T7581] EXT4-fs (loop1): 1 truncate cleaned up [ 228.621925][ T3306] EXT4-fs unmount: 55 callbacks suppressed [ 228.622035][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.041777][ T7599] set_capacity_and_notify: 4 callbacks suppressed [ 229.041794][ T7599] loop1: detected capacity change from 0 to 512 [ 229.056101][ T7599] EXT4-fs: Ignoring removed nobh option [ 229.278436][ T7599] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 229.307900][ T7599] EXT4-fs (loop1): 1 truncate cleaned up [ 229.315426][ T7599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.340755][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 229.340770][ T28] audit: type=1400 audit(1778603844.262:1697): avc: denied { write } for pid=7596 comm="syz.1.1099" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.945039][ T7606] loop2: detected capacity change from 0 to 512 [ 229.951759][ T7606] EXT4-fs: Ignoring removed nobh option [ 229.969635][ T7606] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 229.996503][ T7606] EXT4-fs (loop2): 1 truncate cleaned up [ 230.003317][ T7606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.091839][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.169400][ T28] audit: type=1400 audit(1778603844.262:1698): avc: denied { write } for pid=7596 comm="syz.1.1099" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.214867][ T28] audit: type=1400 audit(1778603844.262:1699): avc: denied { write } for pid=7596 comm="syz.1.1099" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.236595][ T28] audit: type=1400 audit(1778603844.302:1700): avc: denied { write } for pid=7596 comm="syz.1.1099" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.258428][ T28] audit: type=1326 audit(1778603844.332:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.0.1100" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f89166c9ad1 code=0x7ffc0000 [ 230.284217][ T28] audit: type=1326 audit(1778603844.822:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.0.1100" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f891670dbc9 code=0x7ffc0000 [ 230.330139][ T28] audit: type=1326 audit(1778603844.332:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.0.1100" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891670cdd9 code=0x7ffc0000 [ 230.386996][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.395993][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.408719][ T28] audit: type=1326 audit(1778603844.822:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.0.1100" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891670cdd9 code=0x7ffc0000 [ 230.434687][ T28] audit: type=1326 audit(1778603844.822:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.0.1100" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f89166c922c code=0x7ffc0000 [ 230.559036][ T7617] loop4: detected capacity change from 0 to 512 [ 230.590093][ T7621] loop2: detected capacity change from 0 to 7 [ 230.602385][ T28] audit: type=1326 audit(1778603844.822:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7594 comm="syz.0.1100" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f89166c9b3b code=0x7ffc0000 [ 230.651570][ T7619] loop1: detected capacity change from 0 to 512 [ 230.669304][ T7552] Process accounting resumed [ 230.747935][ T7623] ipt_REJECT: TCP_RESET invalid for non-tcp [ 230.851715][ T7619] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1106: inode has both inline data and extents flags [ 231.007936][ T7619] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 231.023873][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 231.039546][ C1] EXT4-fs (loop1): initial error at time 1778603845: ext4_orphan_get:1397: inode 15 [ 231.048972][ C1] EXT4-fs (loop1): last error at time 1778603845: ext4_orphan_get:1397: inode 15 [ 231.177439][ T7635] loop3: detected capacity change from 0 to 4096 [ 231.197895][ T7637] loop4: detected capacity change from 0 to 4096 [ 231.246835][ T7637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.289818][ T7619] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1106: couldn't read orphan inode 15 (err -117) [ 231.306297][ T7635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.387317][ T7619] loop1: lost filesystem error report for type 5 error -117 [ 231.398358][ T7619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.455182][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.629480][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.719139][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.735614][ T7643] loop3: detected capacity change from 0 to 512 [ 231.757363][ T7641] gre0 speed is unknown, defaulting to 1000 [ 231.780328][ T7643] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 231.859125][ T7643] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.1114: corrupted xattr entries [ 231.874768][ T7646] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1116'. [ 231.903092][ T7643] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 231.903435][ T7643] EXT4-fs (loop3): 1 truncate cleaned up [ 231.912619][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 231.912645][ C1] EXT4-fs (loop3): initial error at time 1778603846: xattr_find_entry:337: inode 15 [ 231.912679][ C1] EXT4-fs (loop3): last error at time 1778603846: xattr_find_entry:337: inode 15 [ 231.946061][ T7646] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1116'. [ 231.991782][ T7649] loop1: detected capacity change from 0 to 8192 [ 231.998552][ T7641] xfrm0 speed is unknown, defaulting to 1000 [ 232.059880][ T7643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.101649][ T7655] netlink: 'syz.1.1117': attribute type 16 has an invalid length. [ 232.154469][ T7655] netlink: 'syz.1.1117': attribute type 17 has an invalid length. [ 232.343599][ T7660] netlink: 700 bytes leftover after parsing attributes in process `syz.4.1119'. [ 232.371953][ T7655] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.379365][ T7655] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.431054][ T7662] loop0: detected capacity change from 0 to 512 [ 232.459994][ T7662] EXT4-fs: Ignoring removed i_version option [ 232.505012][ T7662] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 232.525954][ T7662] EXT4-fs (loop0): orphan cleanup on readonly fs [ 232.533307][ T7674] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1120'. [ 232.553160][ T7662] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 232.585199][ T7655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.596432][ T7662] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 232.603259][ T7662] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1118: bad orphan inode 67108864 [ 232.614150][ T7662] loop0: lost filesystem error report for type 5 error -117 [ 232.615235][ T7662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 232.637865][ T7655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.674345][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.710031][ T7676] loop4: p2 p3 p7 [ 232.758471][ T7676] netlink: 'syz.4.1123': attribute type 10 has an invalid length. [ 232.805463][ T7657] netlink: 'syz.0.1118': attribute type 2 has an invalid length. [ 232.819606][ T7681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1123'. [ 232.823186][ T3721] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.861582][ T3721] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.897137][ T7685] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1123'. [ 232.910780][ T3721] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.936697][ T3721] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.052983][ T7676] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 233.076753][ T3721] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.420107][ T7693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 233.587005][ T3721] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.596468][ T7693] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.614092][ T3721] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.727307][ T3721] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.737190][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.883212][ T7706] netlink: 'syz.0.1128': attribute type 10 has an invalid length. [ 233.929128][ T7706] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 234.291114][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 234.302100][ T7664] Process accounting resumed [ 234.334487][ T7714] netlink: 'syz.2.1132': attribute type 15 has an invalid length. [ 234.341405][ T7716] syzkaller0: entered promiscuous mode [ 234.342457][ T7714] netlink: 11910 bytes leftover after parsing attributes in process `syz.2.1132'. [ 234.348064][ T7716] syzkaller0: entered allmulticast mode [ 234.391417][ T7719] set_capacity_and_notify: 2 callbacks suppressed [ 234.391434][ T7719] loop4: detected capacity change from 0 to 512 [ 234.414226][ T7719] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 234.433066][ T7719] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.1134: corrupted xattr entries [ 234.444878][ T7719] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 234.445199][ T7719] EXT4-fs (loop4): 1 truncate cleaned up [ 234.454373][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 234.454394][ C1] EXT4-fs (loop4): initial error at time 1778603849: xattr_find_entry:337: inode 15 [ 234.454430][ C1] EXT4-fs (loop4): last error at time 1778603849: xattr_find_entry:337: inode 15 [ 234.485867][ T7719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.514730][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 234.514769][ T28] audit: type=1400 audit(1778603849.442:1731): avc: denied { append } for pid=7727 comm="syz.3.1135" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 234.591400][ T7731] loop3: detected capacity change from 0 to 4096 [ 234.632063][ T7731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.644771][ T7733] loop0: detected capacity change from 0 to 512 [ 234.667938][ T7733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 234.680708][ T7733] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.754344][ T28] audit: type=1400 audit(1778603849.662:1732): avc: denied { write } for pid=7730 comm="syz.3.1136" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.801835][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.886579][ T7741] loop3: detected capacity change from 0 to 4096 [ 234.997962][ T28] audit: type=1400 audit(1778603849.892:1733): avc: denied { write } for pid=7732 comm="syz.0.1137" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.041964][ T7741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.099197][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.109815][ T28] audit: type=1400 audit(1778603849.912:1734): avc: denied { write } for pid=7732 comm="syz.0.1137" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.226970][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.259706][ T7745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.268658][ T28] audit: type=1400 audit(1778603850.062:1735): avc: denied { write } for pid=7740 comm="syz.3.1138" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.296549][ T7745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.540384][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 235.639206][ T7754] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1142'. [ 236.011902][ T7761] loop2: detected capacity change from 0 to 512 [ 236.050476][ T7761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 236.075874][ T7761] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.363305][ T28] audit: type=1400 audit(1778603851.282:1736): avc: denied { write } for pid=7760 comm="syz.2.1143" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.462819][ T28] audit: type=1400 audit(1778603851.372:1737): avc: denied { write } for pid=7760 comm="syz.2.1143" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.667118][ T7769] loop1: detected capacity change from 0 to 1024 [ 236.691514][ T7769] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 236.904940][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 236.938076][ T7778] FAULT_INJECTION: forcing a failure. [ 236.938076][ T7778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.951404][ T7778] CPU: 0 UID: 0 PID: 7778 Comm: syz.2.1147 Not tainted syzkaller #0 PREEMPT(full) [ 236.951469][ T7778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 236.951485][ T7778] Call Trace: [ 236.951558][ T7778] [ 236.951566][ T7778] __dump_stack+0x1d/0x30 [ 236.951658][ T7778] dump_stack_lvl+0x95/0xd0 [ 236.951678][ T7778] dump_stack+0x15/0x1b [ 236.951701][ T7778] should_fail_ex+0x263/0x280 [ 236.951813][ T7778] should_fail+0xb/0x20 [ 236.951879][ T7778] should_fail_usercopy+0x1a/0x20 [ 236.952012][ T7778] _copy_to_user+0x20/0xa0 [ 236.952051][ T7778] simple_read_from_buffer+0xb5/0x130 [ 236.952132][ T7778] proc_fail_nth_read+0x10e/0x150 [ 236.952186][ T7778] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 236.952213][ T7778] vfs_read+0x1ab/0x7f0 [ 236.952248][ T7778] ? __rcu_read_unlock+0x4e/0x70 [ 236.952275][ T7778] ? __fget_files+0x184/0x1c0 [ 236.952330][ T7778] ? mutex_lock+0x57/0x90 [ 236.952358][ T7778] ksys_read+0xdc/0x1a0 [ 236.952416][ T7778] __x64_sys_read+0x40/0x50 [ 236.952446][ T7778] x64_sys_call+0x2886/0x3020 [ 236.952475][ T7778] do_syscall_64+0x12c/0x3b0 [ 236.952510][ T7778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.952545][ T7778] RIP: 0033:0x7fd8817bd60e [ 236.952560][ T7778] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 236.952606][ T7778] RSP: 002b:00007fd880256fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 236.952626][ T7778] RAX: ffffffffffffffda RBX: 00007fd8802576c0 RCX: 00007fd8817bd60e [ 236.952640][ T7778] RDX: 000000000000000f RSI: 00007fd8802570a0 RDI: 0000000000000004 [ 236.952652][ T7778] RBP: 00007fd880257090 R08: 0000000000000000 R09: 0000000000000000 [ 236.952668][ T7778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.952680][ T7778] R13: 00007fd881a76038 R14: 00007fd881a75fa0 R15: 00007ffcb3870ea8 [ 236.952725][ T7778] [ 237.173205][ T7781] loop2: detected capacity change from 0 to 512 [ 237.181271][ T7781] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 237.206194][ T7781] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.1149: corrupted xattr entries [ 237.222360][ T7781] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 237.222873][ T7781] EXT4-fs (loop2): 1 truncate cleaned up [ 237.232201][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 237.232227][ C1] EXT4-fs (loop2): initial error at time 1778603852: xattr_find_entry:337: inode 15 [ 237.232261][ C1] EXT4-fs (loop2): last error at time 1778603852: xattr_find_entry:337: inode 15 [ 237.264034][ T7781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.312670][ T7786] loop3: detected capacity change from 0 to 164 [ 237.321422][ T7752] Process accounting resumed [ 237.332500][ T7786] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 237.357570][ T28] audit: type=1400 audit(1778603852.282:1738): avc: denied { mount } for pid=7785 comm="syz.3.1151" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 237.419648][ T28] audit: type=1400 audit(1778603852.342:1739): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 237.435841][ T7789] hub 8-0:1.0: USB hub found [ 237.469688][ T7789] hub 8-0:1.0: 8 ports detected [ 237.486849][ T7793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.515247][ T7793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.922188][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1157'. [ 238.241858][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.442519][ T7825] blktrace: Concurrent blktraces are not allowed on loop2 [ 238.454879][ T7825] loop2: detected capacity change from 0 to 7 [ 238.633629][ T7827] netlink: 'syz.2.1162': attribute type 1 has an invalid length. [ 238.707663][ T7831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'. [ 238.721640][ T7827] 8021q: adding VLAN 0 to HW filter on device bond2 [ 238.735927][ T7831] bond2: (slave bridge1): making interface the new active one [ 238.744666][ T7831] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 238.779770][ T7827] macvlan2: entered promiscuous mode [ 238.808489][ T7831] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1162'. [ 238.810326][ T7827] macvlan2: entered allmulticast mode [ 238.836598][ T7827] bond2: entered promiscuous mode [ 238.842545][ T7827] bridge1: entered promiscuous mode [ 238.848717][ T7827] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 238.856404][ T7827] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 238.876091][ T7827] bond2: left promiscuous mode [ 238.885648][ T7827] bridge1: left promiscuous mode [ 239.128561][ T7838] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1165'. [ 239.715929][ T7852] loop1: detected capacity change from 0 to 512 [ 239.740142][ T7852] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 239.778205][ T7852] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.1171: corrupted xattr entries [ 239.806328][ T7852] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 239.806757][ T7852] EXT4-fs (loop1): 1 truncate cleaned up [ 239.815967][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 239.815992][ C0] EXT4-fs (loop1): initial error at time 2000000002: xattr_find_entry:337: inode 15 [ 239.816018][ C0] EXT4-fs (loop1): last error at time 2000000002: xattr_find_entry:337: inode 15 [ 239.875606][ T7852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.949027][ T7855] blktrace: Concurrent blktraces are not allowed on loop2 [ 239.968424][ T7855] loop2: detected capacity change from 0 to 7 [ 240.038562][ T7859] IPv6: addrconf: prefix option has invalid lifetime [ 240.051911][ T7861] FAULT_INJECTION: forcing a failure. [ 240.051911][ T7861] name failslab, interval 1, probability 0, space 0, times 0 [ 240.066771][ T28] audit: type=1400 audit(2000000002.290:1740): avc: denied { ioctl } for pid=7858 comm="syz.4.1174" path="socket:[18491]" dev="sockfs" ino=18491 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 240.124984][ T7861] CPU: 0 UID: 0 PID: 7861 Comm: syz.2.1175 Not tainted syzkaller #0 PREEMPT(full) [ 240.125035][ T7861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 240.125051][ T7861] Call Trace: [ 240.125058][ T7861] [ 240.125067][ T7861] __dump_stack+0x1d/0x30 [ 240.125098][ T7861] dump_stack_lvl+0x95/0xd0 [ 240.125186][ T7861] dump_stack+0x15/0x1b [ 240.125204][ T7861] should_fail_ex+0x263/0x280 [ 240.125233][ T7861] should_failslab+0x8c/0xb0 [ 240.125331][ T7861] kmem_cache_alloc_noprof+0x66/0x3f0 [ 240.125362][ T7861] ? alloc_empty_file+0x70/0x1e0 [ 240.125399][ T7861] alloc_empty_file+0x70/0x1e0 [ 240.125426][ T7861] alloc_file_pseudo+0xf6/0x190 [ 240.125457][ T7861] __shmem_file_setup+0x226/0x260 [ 240.125525][ T7861] shmem_file_setup+0x3b/0x50 [ 240.125547][ T7861] memfd_alloc_file+0x4e/0x300 [ 240.125583][ T7861] __se_sys_memfd_create+0x2e1/0x3b0 [ 240.125632][ T7861] __x64_sys_memfd_create+0x31/0x40 [ 240.125657][ T7861] x64_sys_call+0x1f22/0x3020 [ 240.125679][ T7861] do_syscall_64+0x12c/0x3b0 [ 240.125776][ T7861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.125797][ T7861] RIP: 0033:0x7fd8817fcdd9 [ 240.125812][ T7861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.125834][ T7861] RSP: 002b:00007fd880256e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 240.125875][ T7861] RAX: ffffffffffffffda RBX: 0000000000000517 RCX: 00007fd8817fcdd9 [ 240.125888][ T7861] RDX: 00007fd880256ee0 RSI: 0000000000000000 RDI: 00007fd881892f49 [ 240.125918][ T7861] RBP: 00002000000008c0 R08: 00000000ffffffff R09: 0000000000000000 [ 240.125934][ T7861] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000080 [ 240.125949][ T7861] R13: 00007fd880256ee0 R14: 00007fd880256ea0 R15: 0000200000000340 [ 240.125973][ T7861] [ 240.127596][ T7863] loop4: detected capacity change from 0 to 512 [ 240.389440][ T7867] --map-set only usable from mangle table [ 240.448991][ T7869] loop4: detected capacity change from 0 to 1024 [ 240.459970][ T7869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.480521][ T28] audit: type=1400 audit(2000000002.700:1741): avc: denied { write } for pid=7868 comm="syz.4.1179" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 240.562664][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.802340][ T7875] loop4: detected capacity change from 0 to 4096 [ 241.284953][ T7875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.364236][ T28] audit: type=1400 audit(2000000003.580:1742): avc: denied { write } for pid=7873 comm="syz.4.1180" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.437495][ T7884] hub 8-0:1.0: USB hub found [ 241.465479][ T7884] hub 8-0:1.0: 8 ports detected [ 241.619889][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.033392][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.073037][ T7898] loop4: detected capacity change from 0 to 512 [ 242.123300][ T7900] blktrace: Concurrent blktraces are not allowed on loop2 [ 242.148275][ T7887] loop3: detected capacity change from 0 to 512 [ 242.159921][ T7900] loop2: detected capacity change from 0 to 7 [ 242.214163][ T7908] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1192'. [ 242.244162][ T7908] netlink: zone id is out of range [ 242.264625][ T7908] netlink: zone id is out of range [ 242.271116][ T7912] loop3: detected capacity change from 0 to 128 [ 242.293614][ T7912] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 242.335401][ T7914] loop4: detected capacity change from 0 to 512 [ 242.342584][ T7908] netlink: set zone limit has 8 unknown bytes [ 242.356971][ T7912] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 242.361437][ T7914] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 242.366218][ T7917] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 242.397244][ T7914] EXT4-fs (loop4): 1 truncate cleaned up [ 242.403774][ T7914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.412356][ T7917] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 242.443877][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 242.450412][ C1] EXT4-fs (loop0): initial error at time 2000000004: mb_free_blocks:2049: inode 11: block 64 [ 242.456772][ T7917] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #11: comm syz.0.1197: corrupted inode contents [ 242.460657][ C1] EXT4-fs (loop0): last error at time 2000000004: mb_free_blocks:2049: inode 11: block 64 [ 242.472788][ T7917] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 242.483787][ T7914] EXT4-fs (loop4): shut down requested (0) [ 242.599781][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.608976][ T7917] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #11: comm syz.0.1197: mark_inode_dirty error [ 242.629882][ T7917] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 242.630168][ T7917] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1197: invalid indirect mapped block 1 (level 1) [ 242.674909][ T7917] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 242.675211][ T7917] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #11: comm syz.0.1197: corrupted inode contents [ 242.696650][ T7917] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 242.696816][ T7917] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 242.715011][ T7917] loop0: lost filesystem error report for type 5 error -117 [ 242.715170][ T7917] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #11: comm syz.0.1197: corrupted inode contents [ 242.761611][ T7917] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 242.761841][ T7917] EXT4-fs error (device loop0): ext4_truncate:4690: inode #11: comm syz.0.1197: mark_inode_dirty error [ 242.803393][ T7917] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 242.803555][ T7917] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 242.838261][ T7917] loop0: lost filesystem error report for type 5 error -117 [ 242.838462][ T7917] EXT4-fs (loop0): 1 truncate cleaned up [ 242.858852][ T7917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.957336][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.114089][ T28] audit: type=1400 audit(2000000005.340:1743): avc: denied { read } for pid=7938 comm="syz.1.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 243.152370][ T7939] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7939 comm=syz.1.1205 [ 243.176754][ T3709] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 243.569794][ T7947] blktrace: Concurrent blktraces are not allowed on loop2 [ 244.353051][ T7959] syzkaller1: entered promiscuous mode [ 244.358629][ T7959] syzkaller1: entered allmulticast mode [ 244.447225][ T7963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.473586][ T7963] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.506112][ T7967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.533347][ T7967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.570893][ T7963] tipc: Started in network mode [ 244.575912][ T7963] tipc: Node identity 62ae14d7d74f, cluster identity 4711 [ 244.583168][ T7963] tipc: Enabled bearer , priority 0 [ 244.607621][ T7963] tipc: Resetting bearer [ 244.622135][ T7963] tipc: Disabling bearer [ 244.676823][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.845785][ T7979] netlink: 'syz.1.1214': attribute type 10 has an invalid length. [ 245.348016][ T7990] set_capacity_and_notify: 4 callbacks suppressed [ 245.348035][ T7990] loop1: detected capacity change from 0 to 512 [ 245.378790][ T7990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 245.391578][ T7990] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.448163][ T7995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.456999][ T7995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.391157][ T28] audit: type=1400 audit(2000000008.610:1744): avc: denied { write } for pid=7989 comm="syz.1.1219" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 246.456271][ T28] audit: type=1400 audit(2000000008.680:1745): avc: denied { write } for pid=7989 comm="syz.1.1219" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 246.842775][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 247.113022][ T8014] loop4: detected capacity change from 0 to 512 [ 247.148019][ T8012] gre0 speed is unknown, defaulting to 1000 [ 247.158198][ T8014] EXT4-fs: Ignoring removed i_version option [ 247.172764][ T8013] loop2: detected capacity change from 0 to 2048 [ 247.216478][ T8014] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 247.230636][ T8013] EXT4-fs: dax option not supported [ 247.286576][ T8014] EXT4-fs (loop4): orphan cleanup on readonly fs [ 247.347794][ T8014] Quota error (device loop4): v2_read_file_info: Free block number 8 out of range (1, 6). [ 247.426260][ T8014] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 247.441364][ T8014] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 247.448310][ T8014] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1227: bad orphan inode 67108864 [ 247.459112][ T8014] loop4: lost filesystem error report for type 5 error -117 [ 247.460123][ T8014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 247.486367][ T8014] EXT4-fs (loop4): shut down requested (0) [ 247.495948][ T8012] xfrm0 speed is unknown, defaulting to 1000 [ 247.519358][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.448975][ T8033] gre0 speed is unknown, defaulting to 1000 [ 248.654236][ T8033] xfrm0 speed is unknown, defaulting to 1000 [ 248.845083][ T8039] loop1: detected capacity change from 0 to 1024 [ 248.915716][ T8039] EXT4-fs: test_dummy_encryption option not supported [ 248.957724][ T8038] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 249.028558][ T8045] loop4: detected capacity change from 0 to 512 [ 249.096852][ T8045] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1232: inode has both inline data and extents flags [ 249.173633][ T8045] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 249.173905][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 249.176117][ T8045] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1232: couldn't read orphan inode 15 (err -117) [ 249.183134][ C0] EXT4-fs (loop4): initial error at time 2000000011: ext4_orphan_get:1397: inode 15 [ 249.183160][ C0] EXT4-fs (loop4): last error at time 2000000011: ext4_orphan_get:1397: inode 15 [ 249.273948][ T8045] loop4: lost filesystem error report for type 5 error -117 [ 249.386235][ T8045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.476763][ T8051] loop3: detected capacity change from 0 to 256 [ 249.488167][ T8044] netlink: 'syz.4.1232': attribute type 12 has an invalid length. [ 249.529971][ T8044] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1232'. [ 249.740205][ T8053] loop2: detected capacity change from 0 to 128 [ 249.772543][ T8053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1234'. [ 249.896542][ T8055] blktrace: Concurrent blktraces are not allowed on loop2 [ 249.932781][ T8055] loop2: detected capacity change from 0 to 7 [ 251.540514][ T8067] loop3: detected capacity change from 0 to 1024 [ 251.554432][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.574037][ T8067] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 251.603981][ T8067] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 251.629129][ T8067] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 251.640341][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1239'. [ 251.658281][ T8067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.682651][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1239'. [ 251.717903][ T8067] ext4: Unknown parameter '' [ 251.753174][ T28] audit: type=1400 audit(2000000013.970:1746): avc: denied { ioctl } for pid=8066 comm="syz.3.1238" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 251.779302][ T8067] ext4: Unknown parameter 'ext4' [ 251.857364][ T8081] loop4: detected capacity change from 0 to 512 [ 251.874501][ T8081] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 251.895497][ T8081] EXT4-fs (loop4): 1 truncate cleaned up [ 251.912600][ T8087] loop1: detected capacity change from 0 to 512 [ 251.926143][ T8087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.941745][ T8081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.959903][ T28] audit: type=1400 audit(2000000014.180:1747): avc: denied { write } for pid=8086 comm="syz.1.1245" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 251.992990][ T8081] EXT4-fs (loop4): shut down requested (0) [ 252.056159][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.148618][ T8090] gre0 speed is unknown, defaulting to 1000 [ 252.281633][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.292207][ T8090] xfrm0 speed is unknown, defaulting to 1000 [ 252.294014][ T28] audit: type=1400 audit(2000000014.510:1748): avc: denied { write } for pid=8086 comm="syz.1.1245" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 252.563819][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.690675][ T8104] loop2: detected capacity change from 0 to 512 [ 252.736353][ T8106] loop0: detected capacity change from 0 to 512 [ 252.739432][ T8104] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 252.786950][ T8106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 252.811095][ T8104] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 252.833256][ T8106] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.865722][ T8104] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1250: Corrupt directory, running e2fsck is recommended [ 252.913327][ T8104] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 252.946026][ T8104] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.1250: corrupted in-inode xattr: invalid ea_ino [ 252.967024][ T8104] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 252.973356][ T8104] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1250: couldn't read orphan inode 15 (err -117) [ 252.982770][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 252.982785][ C1] EXT4-fs (loop2): initial error at time 2000000015: ext4_iget_extra_inode:5128: inode 15 [ 252.982810][ C1] EXT4-fs (loop2): last error at time 2000000015: ext4_iget_extra_inode:5128: inode 15 [ 253.021073][ T8104] loop2: lost filesystem error report for type 5 error -117 [ 253.025195][ T8104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.103823][ T28] audit: type=1400 audit(2000000015.310:1749): avc: denied { write } for pid=8105 comm="syz.0.1251" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 253.284840][ T28] audit: type=1400 audit(2000000015.370:1750): avc: denied { write } for pid=8105 comm="syz.0.1251" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 253.521490][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.564580][ T8115] syzkaller0: entered promiscuous mode [ 253.591431][ T8115] syzkaller0: entered allmulticast mode [ 253.637303][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 253.655919][ T8120] loop3: detected capacity change from 0 to 512 [ 253.707823][ T8120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 253.725503][ T8120] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.756291][ T8122] syzkaller1: entered promiscuous mode [ 253.763252][ T28] audit: type=1400 audit(2000000015.970:1751): avc: denied { sqpoll } for pid=8121 comm="syz.2.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 253.787112][ T8122] syzkaller1: entered allmulticast mode [ 253.835113][ T28] audit: type=1400 audit(2000000016.030:1752): avc: denied { getopt } for pid=8121 comm="syz.2.1257" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 253.859852][ T8126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1256'. [ 254.054681][ T28] audit: type=1400 audit(2000000016.270:1753): avc: denied { write } for pid=8118 comm="syz.3.1255" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.182975][ T8133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.239558][ T8137] loop0: detected capacity change from 0 to 512 [ 254.279950][ T8133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.327130][ T8137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.364529][ T28] audit: type=1400 audit(2000000016.320:1754): avc: denied { write } for pid=8118 comm="syz.3.1255" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.500918][ T8139] loop2: detected capacity change from 0 to 4096 [ 254.514496][ T28] audit: type=1400 audit(2000000016.740:1755): avc: denied { write } for pid=8136 comm="syz.0.1260" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.549115][ T8101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1249'. [ 254.563050][ T8139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.577957][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.623346][ T8101] loop1: detected capacity change from 0 to 512 [ 254.694194][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 254.737778][ T8101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.779881][ T8101] IPVS: set_ctl: invalid protocol: 33 100.1.1.0:20003 [ 254.815200][ T8148] 9p: Could not find request transport: fd0x0000000000000005 [ 255.025056][ T8151] ipt_REJECT: TCP_RESET invalid for non-tcp [ 255.199298][ T8158] loop3: detected capacity change from 0 to 512 [ 255.298673][ T8158] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 255.397884][ T8163] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.420035][ T8158] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 255.443920][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 255.450431][ C0] EXT4-fs (loop3): initial error at time 2000000017: mb_free_blocks:2049: inode 11: block 64 [ 255.460664][ C0] EXT4-fs (loop3): last error at time 2000000017: mb_free_blocks:2049: inode 11: block 64 [ 255.638802][ T8158] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #11: comm syz.3.1265: corrupted inode contents [ 256.348461][ T8158] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 256.349123][ T8158] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #11: comm syz.3.1265: mark_inode_dirty error [ 256.397053][ T8158] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 256.476277][ T8158] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1265: invalid indirect mapped block 1 (level 1) [ 256.587633][ T8158] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 256.587819][ T8158] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #11: comm syz.3.1265: corrupted inode contents [ 256.649070][ T8158] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 256.649296][ T8158] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 256.702700][ T8158] loop3: lost filesystem error report for type 5 error -117 [ 256.702870][ T8158] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #11: comm syz.3.1265: corrupted inode contents [ 256.765895][ T8158] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 256.766096][ T8158] EXT4-fs error (device loop3): ext4_truncate:4690: inode #11: comm syz.3.1265: mark_inode_dirty error [ 256.818091][ T8158] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 256.818265][ T8158] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 256.858255][ T8177] set_capacity_and_notify: 2 callbacks suppressed [ 256.858275][ T8177] loop4: detected capacity change from 0 to 512 [ 256.871677][ T8158] loop3: lost filesystem error report for type 5 error -117 [ 256.871863][ T8158] EXT4-fs (loop3): 1 truncate cleaned up [ 256.916188][ T8177] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 256.933173][ T8177] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 256.953863][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 256.960340][ C0] EXT4-fs (loop4): initial error at time 2000000019: mb_free_blocks:2049: inode 11: block 64 [ 256.970583][ C0] EXT4-fs (loop4): last error at time 2000000019: mb_free_blocks:2049: inode 11: block 64 [ 256.981029][ T8177] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.1272: corrupted inode contents [ 256.993097][ T8177] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 256.993281][ T8177] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #11: comm syz.4.1272: mark_inode_dirty error [ 257.024845][ T8177] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 257.025056][ T8177] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1272: invalid indirect mapped block 1 (level 1) [ 257.047678][ T8177] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 257.047869][ T8177] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.1272: corrupted inode contents [ 257.069527][ T8177] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 257.069733][ T8177] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 257.087793][ T8177] loop4: lost filesystem error report for type 5 error -117 [ 257.088092][ T8177] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.1272: corrupted inode contents [ 257.108425][ T8177] EXT4-fs error (device loop4): ext4_truncate:4690: inode #11: comm syz.4.1272: mark_inode_dirty error [ 257.119909][ T8177] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 257.129712][ T8177] loop4: lost filesystem error report for type 5 error -117 [ 257.129911][ T8177] EXT4-fs (loop4): 1 truncate cleaned up [ 257.293581][ T8190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.312802][ T8189] 9p: Could not find request transport: fd0x0000000000000005 [ 257.316149][ T8190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.333171][ T8187] loop1: detected capacity change from 0 to 512 [ 257.413390][ T8194] loop3: detected capacity change from 0 to 512 [ 257.440165][ T8182] loop2: detected capacity change from 0 to 512 [ 257.458103][ T8194] EXT4-fs: Ignoring removed nobh option [ 257.465859][ T8194] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 257.488934][ T8196] loop0: detected capacity change from 0 to 512 [ 257.499205][ T8196] ext4: Unknown parameter 'noacl' [ 257.505181][ T8194] EXT4-fs (loop3): 1 truncate cleaned up [ 257.518603][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 257.518616][ T28] audit: type=1400 audit(2000000019.740:1762): avc: denied { write } for pid=8184 comm="syz.3.1273" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 257.520159][ T8198] loop1: detected capacity change from 0 to 128 [ 257.593639][ T28] audit: type=1400 audit(2000000019.810:1763): avc: denied { write } for pid=8184 comm="syz.3.1273" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 257.659714][ T8182] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1270: inode has both inline data and extents flags [ 257.678382][ T28] audit: type=1400 audit(2000000019.840:1764): avc: denied { write } for pid=8184 comm="syz.3.1273" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 257.702150][ T28] audit: type=1400 audit(2000000019.840:1765): avc: denied { write } for pid=8184 comm="syz.3.1273" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 257.714943][ T8198] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.724010][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 257.724027][ C0] EXT4-fs (loop2): initial error at time 2000000019: ext4_orphan_get:1397: inode 15 [ 257.724057][ C0] EXT4-fs (loop2): last error at time 2000000019: ext4_orphan_get:1397: inode 15 [ 257.747694][ T8182] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1270: couldn't read orphan inode 15 (err -117) [ 257.774282][ T8182] loop2: lost filesystem error report for type 5 error -117 [ 257.831110][ T8204] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 257.848031][ T8204] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 257.856085][ T8204] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 257.870582][ T28] audit: type=1400 audit(2000000020.090:1766): avc: denied { write } for pid=8180 comm="syz.2.1270" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 258.085105][ T28] audit: type=1400 audit(2000000020.120:1767): avc: denied { write } for pid=8180 comm="syz.2.1270" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 258.182892][ T8198] tipc: Enabled bearer , priority 10 [ 258.395512][ T28] audit: type=1400 audit(2000000020.130:1768): avc: denied { write } for pid=8180 comm="syz.2.1270" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 258.419505][ T8209] tipc: Enabled bearer , priority 0 [ 258.798262][ T28] audit: type=1400 audit(2000000020.150:1769): avc: denied { write } for pid=8197 comm="syz.1.1278" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 258.985021][ T8213] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1279'. [ 259.026474][ T8213] dummy0: entered promiscuous mode [ 259.044458][ T8213] dummy0: entered allmulticast mode [ 259.232458][ T8218] loop2: detected capacity change from 0 to 512 [ 259.253315][ T8218] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 259.298955][ T8218] EXT4-fs (loop2): 1 truncate cleaned up [ 259.310526][ T3306] EXT4-fs unmount: 14 callbacks suppressed [ 259.310604][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 259.337321][ T8218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.417842][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.426900][ T3547] tipc: Node number set to 3051427031 [ 259.771679][ T28] audit: type=1400 audit(2000000020.160:1770): avc: denied { write } for pid=8197 comm="syz.1.1278" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 259.796421][ T28] audit: type=1400 audit(2000000021.610:1771): avc: denied { write } for pid=8217 comm="syz.2.1281" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 259.866410][ T8225] loop2: detected capacity change from 0 to 512 [ 259.913298][ T8225] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 259.948316][ T8225] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 259.962886][ T8225] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #11: comm syz.2.1284: corrupted inode contents [ 259.974820][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 259.974857][ C1] EXT4-fs (loop2): initial error at time 2000000022: mb_free_blocks:2049: inode 11: block 64 [ 259.974916][ C1] EXT4-fs (loop2): last error at time 2000000022: mb_free_blocks:2049: inode 11: block 64 [ 260.004211][ T8225] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #11: comm syz.2.1284: mark_inode_dirty error [ 260.017573][ T8225] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1284: invalid indirect mapped block 1 (level 1) [ 260.044119][ T8225] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #11: comm syz.2.1284: corrupted inode contents [ 260.059150][ T8225] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 260.071776][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.082323][ T8225] loop2: lost filesystem error report for type 5 error -117 [ 260.089230][ T8225] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #11: comm syz.2.1284: corrupted inode contents [ 260.131507][ T8232] 9p: Could not find request transport: fd0x0000000000000005 [ 260.142147][ T8225] EXT4-fs error (device loop2): ext4_truncate:4690: inode #11: comm syz.2.1284: mark_inode_dirty error [ 260.154261][ T8225] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 260.163747][ T8225] loop2: lost filesystem error report for type 5 error -117 [ 260.164018][ T8225] EXT4-fs (loop2): 1 truncate cleaned up [ 260.177650][ T8225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.275627][ T8239] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 260.310481][ T8243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.331638][ T8243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.843872][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.030859][ T8250] loop0: detected capacity change from 0 to 512 [ 261.385335][ T8261] loop1: detected capacity change from 0 to 512 [ 261.483951][ T8261] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1293: inode has both inline data and extents flags [ 261.526596][ T8261] fserror_report: 9 callbacks suppressed [ 261.526718][ T8261] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 261.552009][ T8261] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1293: couldn't read orphan inode 15 (err -117) [ 261.562091][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 261.562151][ C0] EXT4-fs (loop1): initial error at time 2000000023: ext4_orphan_get:1397: inode 15 [ 261.562458][ C0] EXT4-fs (loop1): last error at time 2000000023: ext4_orphan_get:1397: inode 15 [ 261.709156][ T8261] loop1: lost filesystem error report for type 5 error -117 [ 261.724387][ T8261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.950545][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.983147][ T3393] IPVS: starting estimator thread 0... [ 262.047314][ T8270] loop1: detected capacity change from 0 to 512 [ 262.087360][ T8270] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 262.094018][ T8268] IPVS: using max 2208 ests per chain, 110400 per kthread [ 262.150583][ T8270] EXT4-fs (loop1): 1 truncate cleaned up [ 262.158310][ T8270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.209497][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.284798][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1298'. [ 262.324150][ T8280] 9pnet_fd: Insufficient options for proto=fd [ 262.545325][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 262.545408][ T28] audit: type=1400 audit(2000000024.770:1777): avc: denied { getopt } for pid=8286 comm="syz.4.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 262.635711][ T8293] loop4: detected capacity change from 0 to 512 [ 262.652964][ T8293] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 262.675024][ T8293] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 262.693903][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 262.700486][ C0] EXT4-fs (loop4): initial error at time 2000000024: mb_free_blocks:2049: inode 11: block 64 [ 262.710893][ C0] EXT4-fs (loop4): last error at time 2000000024: mb_free_blocks:2049: inode 11: block 64 [ 262.721799][ T8293] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.1305: corrupted inode contents [ 262.733792][ T8293] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 262.734502][ T8293] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #11: comm syz.4.1305: mark_inode_dirty error [ 262.755884][ T8293] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 262.756301][ T8293] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1305: invalid indirect mapped block 1 (level 1) [ 262.778755][ T8293] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 262.780171][ T8293] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.1305: corrupted inode contents [ 262.801745][ T8293] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 262.803152][ T8293] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 262.823682][ T8293] loop4: lost filesystem error report for type 5 error -117 [ 262.824242][ T8293] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.1305: corrupted inode contents [ 262.848574][ T8293] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 262.849073][ T8293] EXT4-fs error (device loop4): ext4_truncate:4690: inode #11: comm syz.4.1305: mark_inode_dirty error [ 262.870645][ T8293] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 262.872049][ T8293] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 262.906007][ T8293] loop4: lost filesystem error report for type 5 error -117 [ 262.906261][ T8293] EXT4-fs (loop4): 1 truncate cleaned up [ 262.936080][ T8293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.997108][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.062104][ T8302] netlink: 'syz.4.1306': attribute type 10 has an invalid length. [ 263.086961][ T8302] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1306'. [ 263.116803][ T8250] msdos: Unknown parameter 'showexeã' [ 263.128370][ T8302] dummy0: entered promiscuous mode [ 263.138516][ T8302] dummy0: entered allmulticast mode [ 263.154009][ T8299] loop1: detected capacity change from 0 to 512 [ 263.163156][ T8302] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 263.212797][ T8299] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1302: corrupted inode contents [ 263.231681][ T8299] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 263.231916][ T8299] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.1302: mark_inode_dirty error [ 263.241132][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 263.241162][ C0] EXT4-fs (loop1): initial error at time 2000000025: ext4_do_update_inode:5690: inode 16 [ 263.241200][ C0] EXT4-fs (loop1): last error at time 2000000025: ext4_do_update_inode:5690: inode 16 [ 263.278652][ T8299] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 263.279533][ T8299] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1302: corrupted inode contents [ 263.300649][ T8299] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 263.302063][ T8299] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.1302: mark_inode_dirty error [ 263.324766][ T8299] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1302: corrupted inode contents [ 263.344293][ T8299] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 263.375348][ T8299] loop1: lost filesystem error report for type 5 error -117 [ 263.375623][ T8299] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.1302: corrupted inode contents [ 263.414940][ T8299] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.1302: mark_inode_dirty error [ 263.434324][ T8299] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 263.483400][ T8299] loop1: lost filesystem error report for type 5 error -117 [ 263.485398][ T8299] EXT4-fs (loop1): 1 truncate cleaned up [ 263.505455][ T3703] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 263.529524][ T3703] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:12: Failed to release dquot type 1 [ 263.566679][ T3703] loop1: lost filesystem error report for type 5 error -117 [ 263.620534][ T8299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.694660][ T8299] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.236854][ T28] audit: type=1400 audit(2000000026.460:1778): avc: denied { bind } for pid=8316 comm="syz.2.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 264.236889][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1309'. [ 264.274964][ T8319] 9pnet_fd: Insufficient options for proto=fd [ 264.441656][ T8331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.452793][ T8330] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 264.459524][ T8330] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 264.474420][ T8331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.485405][ T8330] vhci_hcd vhci_hcd.0: Device attached [ 264.506635][ T8336] loop2: detected capacity change from 0 to 128 [ 264.516845][ T8336] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 264.521432][ T8332] vhci_hcd: connection closed [ 264.533164][ T8336] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.548565][ T55] vhci_hcd vhci_hcd.3: stop threads [ 264.557243][ T28] audit: type=1400 audit(2000000026.780:1779): avc: denied { write } for pid=8335 comm="syz.2.1316" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 264.557720][ T55] vhci_hcd vhci_hcd.3: release socket [ 264.600629][ T8323] loop0: detected capacity change from 0 to 512 [ 264.615374][ T55] vhci_hcd vhci_hcd.3: disconnect device [ 264.621146][ T28] audit: type=1400 audit(2000000026.840:1780): avc: denied { write } for pid=8335 comm="syz.2.1316" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 264.673939][ T3935] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 264.924862][ T8336] tipc: Enabling of bearer rejected, already enabled [ 264.969564][ T8336] tipc: Enabling of bearer rejected, already enabled [ 265.514655][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 265.533033][ T8351] loop4: detected capacity change from 0 to 512 [ 265.551637][ T8351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 265.568218][ T8351] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.592741][ T8356] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1319'. [ 265.724762][ T28] audit: type=1400 audit(2000000027.920:1781): avc: denied { lock } for pid=8355 comm="syz.2.1319" path="socket:[18367]" dev="sockfs" ino=18367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 265.750620][ T28] audit: type=1400 audit(2000000027.920:1782): avc: denied { ioctl } for pid=8355 comm="syz.2.1319" path="socket:[19375]" dev="sockfs" ino=19375 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 265.794308][ T8360] loop0: detected capacity change from 0 to 512 [ 265.918254][ T8360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 265.968023][ T8360] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.497711][ T28] audit: type=1400 audit(2000000028.070:1783): avc: denied { write } for pid=8350 comm="syz.4.1320" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 266.642335][ T8368] 9pnet_fd: Insufficient options for proto=fd [ 266.687122][ T28] audit: type=1400 audit(2000000028.100:1784): avc: denied { write } for pid=8350 comm="syz.4.1320" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 266.901829][ T28] audit: type=1400 audit(2000000028.760:1785): avc: denied { write } for pid=8358 comm="syz.0.1321" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 267.014053][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 267.014086][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 267.036728][ T8370] loop3: detected capacity change from 0 to 512 [ 267.054001][ T8370] EXT4-fs: Ignoring removed nobh option [ 267.071851][ T8370] journal_path: Lookup failure for './file0' [ 267.097571][ T8370] EXT4-fs: error: could not find journal device path [ 267.303498][ T8386] loop3: detected capacity change from 0 to 128 [ 267.876779][ T8402] loop3: detected capacity change from 0 to 512 [ 267.911806][ T8402] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1334: inode has both inline data and extents flags [ 267.935127][ T8402] fserror_report: 4 callbacks suppressed [ 267.935296][ T8402] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 267.958174][ T8402] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1334: couldn't read orphan inode 15 (err -117) [ 267.968150][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 267.968201][ C1] EXT4-fs (loop3): initial error at time 2000000030: ext4_orphan_get:1397: inode 15 [ 267.968513][ C1] EXT4-fs (loop3): last error at time 2000000030: ext4_orphan_get:1397: inode 15 [ 268.022223][ T8407] loop2: detected capacity change from 0 to 512 [ 268.030444][ T8402] loop3: lost filesystem error report for type 5 error -117 [ 268.060145][ T8407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 268.109503][ T8407] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.124295][ T8402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.252827][ T8416] loop4: detected capacity change from 0 to 512 [ 268.259484][ T8416] EXT4-fs: Ignoring removed nobh option [ 268.336627][ T8416] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 268.365686][ T8416] EXT4-fs (loop4): 1 truncate cleaned up [ 268.371975][ T8416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.389128][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 268.389142][ T28] audit: type=1400 audit(2000000030.500:1789): avc: denied { write } for pid=8405 comm="syz.2.1335" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 268.526715][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.560992][ T8421] loop0: detected capacity change from 0 to 1024 [ 268.580514][ T8421] EXT4-fs: test_dummy_encryption option not supported [ 268.586212][ T28] audit: type=1400 audit(2000000030.580:1790): avc: denied { write } for pid=8405 comm="syz.2.1335" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 268.609174][ T28] audit: type=1400 audit(2000000030.580:1791): avc: denied { write } for pid=8401 comm="syz.3.1334" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 268.631028][ T28] audit: type=1400 audit(2000000030.610:1792): avc: denied { write } for pid=8412 comm="syz.4.1337" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 268.652915][ T28] audit: type=1400 audit(2000000030.610:1793): avc: denied { write } for pid=8412 comm="syz.4.1337" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 268.691812][ T28] audit: type=1400 audit(2000000030.610:1794): avc: denied { write } for pid=8412 comm="syz.4.1337" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 268.823921][ T28] audit: type=1400 audit(2000000030.610:1795): avc: denied { write } for pid=8412 comm="syz.4.1337" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 268.855144][ T28] audit: type=1400 audit(2000000030.640:1796): avc: denied { write } for pid=8401 comm="syz.3.1334" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 268.895084][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 269.855778][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.887803][ T28] audit: type=1400 audit(2000000032.110:1797): avc: denied { create } for pid=8432 comm="syz.2.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 270.154769][ T8429] loop0: detected capacity change from 0 to 1024 [ 270.161472][ T8429] ext4: Unknown parameter 'nouser_xattr' [ 270.209000][ T8431] loop3: detected capacity change from 0 to 4096 [ 270.236939][ T8431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.270793][ T28] audit: type=1400 audit(2000000032.490:1798): avc: denied { open } for pid=8441 comm="syz.2.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 270.322219][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.332759][ T8442] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1342'. [ 270.367850][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.721349][ T8450] loop0: detected capacity change from 0 to 512 [ 271.027103][ T8450] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 271.048765][ T8450] EXT4-fs (loop0): 1 truncate cleaned up [ 271.056449][ T8450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.076646][ T8450] EXT4-fs (loop0): shut down requested (0) [ 271.185470][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.316337][ T8467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.327653][ T8467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.340961][ T8467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1350'. [ 271.378817][ T8470] loop0: detected capacity change from 0 to 512 [ 271.401527][ T8470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 271.417929][ T8470] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.432337][ T8469] loop3: detected capacity change from 0 to 8192 [ 271.851112][ T8477] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1353'. [ 272.107184][ T8486] EXT4-fs: Ignoring removed nobh option [ 272.113307][ T8486] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 272.124933][ T8486] EXT4-fs (loop1): 1 truncate cleaned up [ 272.131263][ T8486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.166795][ T8485] EXT4-fs: Ignoring removed i_version option [ 272.201216][ T8485] ext4: Unknown parameter 'dont_appraise' [ 272.272531][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 272.337413][ T8479] set_capacity_and_notify: 2 callbacks suppressed [ 272.337432][ T8479] loop3: detected capacity change from 0 to 128 [ 272.514103][ T8491] can0: slcan on ptm0. [ 272.544038][ T8489] can0 (unregistered): slcan off ptm0. [ 272.573618][ T8495] loop3: detected capacity change from 0 to 512 [ 272.581902][ T8495] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 272.591572][ T8495] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 272.606350][ T8495] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #11: comm syz.3.1358: corrupted inode contents [ 272.613913][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 272.619225][ T8495] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 272.624708][ C0] EXT4-fs (loop3): initial error at time 2000000034: mb_free_blocks:2049: inode 11: block 64 [ 272.635929][ T8495] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #11: comm syz.3.1358: mark_inode_dirty error [ 272.644101][ C0] EXT4-fs (loop3): last error at time 2000000034: ext4_do_update_inode:5690: inode 11 [ 272.657074][ T8495] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 272.665846][ T8495] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1358: invalid indirect mapped block 1 (level 1) [ 272.688378][ T8495] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 272.688664][ T8495] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #11: comm syz.3.1358: corrupted inode contents [ 272.709782][ T8495] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 272.710086][ T8495] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 272.727889][ T8495] loop3: lost filesystem error report for type 5 error -117 [ 272.728189][ T8495] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #11: comm syz.3.1358: corrupted inode contents [ 272.747605][ T8495] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 272.747888][ T8495] EXT4-fs error (device loop3): ext4_truncate:4690: inode #11: comm syz.3.1358: mark_inode_dirty error [ 272.768305][ T8495] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 272.768593][ T8495] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 272.786700][ T8495] loop3: lost filesystem error report for type 5 error -117 [ 272.786969][ T8495] EXT4-fs (loop3): 1 truncate cleaned up [ 272.800605][ T8495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.835832][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.877922][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.912191][ T8501] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1360'. [ 272.928008][ T8501] syzkaller0: entered promiscuous mode [ 272.935197][ T8501] syzkaller0: entered allmulticast mode [ 272.987394][ T8507] netlink: 'syz.4.1362': attribute type 16 has an invalid length. [ 272.995587][ T8507] netlink: 'syz.4.1362': attribute type 17 has an invalid length. [ 273.177181][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.184462][ T8507] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.203197][ T8507] dummy0: left promiscuous mode [ 273.209006][ T8507] dummy0: left allmulticast mode [ 273.238641][ T8526] loop3: detected capacity change from 0 to 512 [ 273.260918][ T8526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 273.281886][ T8526] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.325448][ T8507] tipc: Resetting bearer [ 273.441368][ T3703] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.463296][ T3703] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.463482][ T8534] loop0: detected capacity change from 0 to 512 [ 273.485311][ T8531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.510176][ T8531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.648892][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 273.648958][ T28] audit: type=1400 audit(2000000035.830:1813): avc: denied { write } for pid=8524 comm="syz.3.1364" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 273.726127][ T8531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1365'. [ 273.735731][ T3703] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.845135][ T3703] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.956101][ T28] audit: type=1400 audit(2000000035.860:1814): avc: denied { write } for pid=8524 comm="syz.3.1364" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 274.063154][ T8547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.074393][ T8547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.090871][ T8548] loop0: detected capacity change from 0 to 512 [ 274.097633][ T8548] EXT4-fs: Ignoring removed nobh option [ 274.117818][ T8548] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 274.132834][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1369'. [ 274.144809][ T8548] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 274.154783][ T8548] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.1368: Failed to acquire dquot type 0 [ 274.166260][ T8548] loop0: lost filesystem error report for type 5 error -5 [ 274.169348][ T8547] gretap0: entered promiscuous mode [ 274.177592][ T8548] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.1368: corrupted inode contents [ 274.181781][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 274.200163][ C1] EXT4-fs (loop0): initial error at time 2000000036: ext4_acquire_dquot:7034 [ 274.208995][ C1] EXT4-fs (loop0): last error at time 2000000036: ext4_acquire_dquot:7034 [ 274.218992][ T8548] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 274.235911][ T8554] loop4: detected capacity change from 0 to 512 [ 274.252115][ T8548] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #16: comm syz.0.1368: mark_inode_dirty error [ 274.273734][ T8548] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 274.274424][ T8548] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.1368: corrupted inode contents [ 274.301071][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 274.323213][ T8554] EXT4-fs: Ignoring removed nobh option [ 274.325506][ T8548] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 274.329379][ T8548] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.1368: mark_inode_dirty error [ 274.350312][ T8548] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 274.350771][ T8548] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.1368: corrupted inode contents [ 274.372002][ T8548] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 274.372640][ T8554] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 274.381830][ T8548] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 274.381924][ T8548] loop0: lost filesystem error report for type 5 error -117 [ 274.402242][ T8554] EXT4-fs (loop4): 1 truncate cleaned up [ 274.416066][ T8548] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.1368: corrupted inode contents [ 274.428068][ T8548] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 274.428441][ T8548] EXT4-fs error (device loop0): ext4_truncate:4690: inode #16: comm syz.0.1368: mark_inode_dirty error [ 274.450782][ T8548] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 274.452682][ T8548] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 274.470866][ T8548] loop0: lost filesystem error report for type 5 error -117 [ 274.485273][ T8548] EXT4-fs (loop0): 1 truncate cleaned up [ 274.514635][ T8554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.549521][ T28] audit: type=1400 audit(2000000036.770:1815): avc: denied { write } for pid=8543 comm="syz.4.1370" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 274.581857][ T8548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.614011][ T28] audit: type=1400 audit(2000000036.770:1816): avc: denied { write } for pid=8543 comm="syz.4.1370" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 274.635961][ T8548] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.663346][ T8548] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 274.681141][ T28] audit: type=1400 audit(2000000036.770:1817): avc: denied { write } for pid=8543 comm="syz.4.1370" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 274.704860][ T8548] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 274.721096][ T8548] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.1368: Failed to acquire dquot type 0 [ 274.735725][ T28] audit: type=1400 audit(2000000036.770:1818): avc: denied { write } for pid=8543 comm="syz.4.1370" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 274.792186][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.009282][ T8577] loop1: detected capacity change from 0 to 4096 [ 275.031131][ T8577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.149244][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.276677][ T8580] loop1: detected capacity change from 0 to 512 [ 275.324548][ T8580] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1379: inode has both inline data and extents flags [ 275.339967][ T8580] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 275.343984][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 275.361168][ C1] EXT4-fs (loop1): initial error at time 2000000037: ext4_orphan_get:1397: inode 15 [ 275.371617][ C1] EXT4-fs (loop1): last error at time 2000000037: ext4_orphan_get:1397: inode 15 [ 275.388100][ T8580] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1379: couldn't read orphan inode 15 (err -117) [ 275.400333][ T8580] loop1: lost filesystem error report for type 5 error -117 [ 275.414026][ T8580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.495608][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.534146][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.828045][ T8591] blktrace: Concurrent blktraces are not allowed on loop2 [ 275.894753][ T8591] loop2: detected capacity change from 0 to 7 [ 275.961773][ T8587] loop4: detected capacity change from 0 to 1024 [ 276.161287][ T8593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1384'. [ 276.182079][ T8587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.217470][ T8596] gre0 speed is unknown, defaulting to 1000 [ 276.246249][ T8587] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 276.280828][ T8599] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 276.315390][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.380229][ T8596] xfrm0 speed is unknown, defaulting to 1000 [ 276.405567][ T2981] ================================================================== [ 276.413714][ T2981] BUG: KCSAN: data-race in set_nlink / set_nlink [ 276.420074][ T2981] [ 276.422431][ T2981] read to 0xffff888107882fd0 of 4 bytes by task 3290 on cpu 0: [ 276.429988][ T2981] set_nlink+0x29/0xb0 [ 276.434072][ T2981] kernfs_iop_permission+0x1e5/0x220 [ 276.439386][ T2981] inode_permission+0x31f/0x3b0 [ 276.444259][ T2981] link_path_walk+0x779/0xe30 [ 276.448956][ T2981] path_openat+0x1c6/0x2050 [ 276.453481][ T2981] do_file_open+0x16c/0x290 [ 276.458012][ T2981] do_sys_openat2+0x94/0x130 [ 276.462637][ T2981] __x64_sys_openat+0xf2/0x120 [ 276.467421][ T2981] x64_sys_call+0x1e39/0x3020 [ 276.472119][ T2981] do_syscall_64+0x12c/0x3b0 [ 276.476733][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.482652][ T2981] [ 276.484992][ T2981] write to 0xffff888107882fd0 of 4 bytes by task 2981 on cpu 1: [ 276.492641][ T2981] set_nlink+0x99/0xb0 [ 276.496724][ T2981] kernfs_iop_permission+0x1e5/0x220 [ 276.502024][ T2981] inode_permission+0x31f/0x3b0 [ 276.506897][ T2981] link_path_walk+0x779/0xe30 [ 276.511591][ T2981] path_lookupat+0x8c/0x500 [ 276.516121][ T2981] filename_lookup+0x190/0x390 [ 276.520923][ T2981] vfs_statx+0x96/0x170 [ 276.525108][ T2981] vfs_fstatat+0x118/0x170 [ 276.529537][ T2981] __se_sys_newfstatat+0x55/0x3e0 [ 276.534583][ T2981] __x64_sys_newfstatat+0x55/0x70 [ 276.539629][ T2981] x64_sys_call+0x2c64/0x3020 [ 276.544330][ T2981] do_syscall_64+0x12c/0x3b0 [ 276.548950][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.554861][ T2981] [ 276.557205][ T2981] value changed: 0x00000008 -> 0x00000009 [ 276.562935][ T2981] [ 276.565279][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 276.571454][ T2981] CPU: 1 UID: 0 PID: 2981 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 276.580318][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 276.590390][ T2981] ================================================================== [ 276.625201][ T8605] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 276.641934][ T8605] EXT4-fs (loop4): 1 truncate cleaned up [ 276.648605][ T8605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.705415][ T8605] gre0 speed is unknown, defaulting to 1000 [ 276.755930][ T8605] xfrm0 speed is unknown, defaulting to 1000 [ 276.956751][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.