last executing test programs: 8.327310068s ago: executing program 3 (id=1922): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xfe, 0x7ffffdbd}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000640)=@newtaction={0x50, 0x30, 0x829, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x2, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') pread64(r7, &(0x7f0000000140)=""/102400, 0x19000, 0x1000000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x2000002, 0xe, 0x2100, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x1008, &(0x7f0000001700)=""/4104, 0x40f00}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$rtc(&(0x7f0000000000), 0xfff, 0x101002) 7.345148286s ago: executing program 3 (id=1933): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, 0x0}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b000000050000000500000009"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x8982, 0x20000500) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000110000000800000000000000000000003000000000100"], 0x0, 0x4e}, 0x28) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[], 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="2b63707520f1796a0a96b5aaa356499c67417858ac6abf8e4908bb3d87ba9bd4d216e181830d1af715eefa10b586114b5272a603f7f95caa2a74f1376e25f8468513e1a3ed32ee8ec5b69aa1a1c7614922bba3ac897c2857e2578d82e94668a0e9f827ccff9cf0abf53206930079645c2371009970608c87cc7a67de8e8fbcd205df2a0fea90ea"], 0x5) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x95, 0x0, &(0x7f00000008c0)="791b5cbd9543057476c254d749681eef9f656db2a9cf9f90d654c5991694441c8886b8396706aeef006d2703aaebde6c6f7873ac70fd9eb6478a0dcab75f12228adbf869803175a3bf4972d0b171579ba9a9f2775ac8db72a646b987f875d32133079bdb95d35e8fcfda4edf2f1122cf2f21d3a52766c9a10a500057b142d04cb964060dbadba46f22e6946dae898777011e6eec21", 0x0, 0x8001, 0x0, 0xce, 0x0, &(0x7f00000009c0)="261339ae52644e3f43a5209fd4fe0eded2f9b85e4b0b6371d62ce3390057c349efa1c5d8df7603d42c97ffd784310e79d58e6683b849c640bacbbcbe9fe537d3e3e8e9cf761ed6b96b07cb4142ba450666ecee67b92be9b78763d11d78d6fdc9923dba54d05f049f144b9dff1e5b822fc45cd45d0a9a6fbaa17b8cf99bab77f1b163cac26156b229c4bfc4330fc53a8e42386f89911060b8da8be5226a00a226ff29bc678a82ee2fb1c127090e31b215ee7eb5b6025cfdb4f677dd5fa2060691a6bb9bb516584436142e91ae1005", 0x0, 0x2, 0x0, 0x4}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="2d63707520a2fbfdbd963e6d6d64aa34d4236f3a28a3c4cecafd11885981b6388708f0789613be46592d079c548d64"], 0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)=r3) close(r4) 7.088330489s ago: executing program 3 (id=1935): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") process_mrelease(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) lseek(r4, 0xffffffffffffff7f, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x24022, &(0x7f0000000180)={[{@name={'name', 0x3d, 'none'}}]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0300000000000000000000000016010000100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x0, 0xa6}, 0xc) 5.120930314s ago: executing program 3 (id=1947): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") process_mrelease(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) lseek(r4, 0xffffffffffffff7f, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x24022, &(0x7f0000000180)={[{@name={'name', 0x3d, 'none'}}]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0300000000000000000000000016010000100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x0, 0xa6}, 0xc) 4.635172127s ago: executing program 2 (id=1952): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x14702) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000006000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0xfffffffd, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80000}, 0x100}) close_range(r0, r0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000080), 0x10) write$binfmt_misc(r7, &(0x7f0000000240)="e290c205db92eed3c78ea99657bee9fb82158ccb2c46a20542de6d0d7d64b043c5e42c1f330083647b0de978e81a7406214b837a3e22644f935fc1e815a7cc82c2c9119d8c50909446", 0x49) splice(r6, 0x0, r8, 0x0, 0x4ffe6, 0x0) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r10, @in={{0x2, 0x0, @empty}}, 0x0, 0x8000}, 0x90) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @empty, 0x68}, 0x1c) 4.258512191s ago: executing program 1 (id=1954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000001c0)=r4) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 4.190932867s ago: executing program 2 (id=1955): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) ftruncate(r0, 0xf4ff) 4.015822413s ago: executing program 4 (id=1956): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2, r1}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtaction={0x48, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.015666923s ago: executing program 4 (id=1957): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 4.003850473s ago: executing program 4 (id=1958): syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x2, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) tkill(r0, 0x19) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_pdu(r4, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x60000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xffffa888}, 0x20000880) 3.904531233s ago: executing program 1 (id=1960): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) unshare(0x2c020400) socket(0x23, 0x6, 0x5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019c80)=""/102400, 0x19000) inotify_init1(0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x3, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0xe}, 0x8018, 0x0, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0x800, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x3, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x64) bpf$TOKEN_CREATE(0x24, 0x0, 0xfffffffffffffcff) setresgid(0x0, 0xee01, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) 3.732886138s ago: executing program 3 (id=1961): rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000080)=0x7, 0x4) recvmsg(r2, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x40000141) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x16, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91104e00000000009500020000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000600)={{{@in, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000000140)=0xe8) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x100000, &(0x7f00000003c0)={[{@user_xattr}, {@nodiscard}, {@noload}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@data_err_ignore}, {@barrier}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@sysvgroups}], [{@subj_type={'subj_type', 0x3d, 'journal_dev'}}, {@smackfsdef}, {@obj_type={'obj_type', 0x3d, 'jqfmt=vfsv0'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@uid_gt={'uid>', r3}}, {@fsname={'fsname', 0x3d, 'dummy0\x00'}}, {@audit}]}, 0x1, 0x5af, &(0x7f0000000940)="$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") write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r4, 0x0, 0xfff, 0x9) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x18, r5, 0x1, 0x0, 0x30000, {0x1a}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) mprotect(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r6, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) fsmount(0xffffffffffffffff, 0x0, 0x8a) 3.623793317s ago: executing program 2 (id=1962): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) process_mrelease(r3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) lseek(r5, 0xffffffffffffff7f, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x24022, &(0x7f0000000180)={[{@name={'name', 0x3d, 'none'}}]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0300000000000000000000000016010000100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x0, 0xa6}, 0xc) 3.237106642s ago: executing program 1 (id=1963): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xfe, 0x7ffffdbd}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000640)=@newtaction={0x50, 0x30, 0x829, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x2, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') pread64(r7, &(0x7f0000000140)=""/102400, 0x19000, 0x1000000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x2000002, 0xe, 0x2100, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x1008, &(0x7f0000001700)=""/4104, 0x40f00}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$rtc(&(0x7f0000000000), 0xfff, 0x101002) 3.04036684s ago: executing program 4 (id=1964): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) unshare(0x2c020400) socket(0x23, 0x6, 0x5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019c80)=""/102400, 0x19000) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x3, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0xe}, 0x8018, 0x0, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0x800, 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000500)={{0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x10440, &(0x7f0000000080)={@_ha_fsid={[0x2, 0xfeb9]}, {0x7, 0x85c7, 0x4, 0x8000}}, 0xffffce19, 0x0, &(0x7f0000000280)=0x9}, {[0x10001, 0x8001, 0x400, 0x40000000]}, 0x70556cb8, 0x16, &(0x7f0000000400)=""/22}) socket$kcm(0xa, 0x922000000003, 0x11) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x64) bpf$TOKEN_CREATE(0x24, 0x0, 0xfffffffffffffcff) setresgid(0x0, 0xee01, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) 2.503826587s ago: executing program 0 (id=1965): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.345888281s ago: executing program 2 (id=1966): syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x20, 0x1) brk(0x689d80000003) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x2, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) tkill(r0, 0x19) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f00080003400000000008000440000000"], 0x40}}, 0x0) r5 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_pdu(r5, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x60000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xffffa888}, 0x20000880) 1.840475237s ago: executing program 1 (id=1967): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 1.607519108s ago: executing program 0 (id=1968): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r0, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) acct(&(0x7f0000000100)='./file1\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000000, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x11e, 0x1, &(0x7f0000000140), 0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x204010, &(0x7f0000000200), 0xfe, 0x46e, &(0x7f00000007c0)="$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") acct(0x0) 1.557192391s ago: executing program 1 (id=1969): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xfe, 0x7ffffdbd}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000640)=@newtaction={0x50, 0x30, 0x829, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x2, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') pread64(r7, &(0x7f0000000140)=""/102400, 0x19000, 0x1000000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x2000002, 0xe, 0x2100, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x1008, &(0x7f0000001700)=""/4104, 0x40f00}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r10, 0x0, 0xcb, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x6, 0x5, @vifc_lcl_addr=@multicast1, @empty}, 0x10) syz_open_dev$rtc(&(0x7f0000000000), 0xfff, 0x101002) 1.455737841s ago: executing program 0 (id=1970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000001c0)=r4) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1.309365394s ago: executing program 2 (id=1971): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000014c0)='tasks\x00', 0x2, 0x0) r3 = syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000400)=r3, 0x12) 1.182680835s ago: executing program 4 (id=1972): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) ftruncate(r0, 0xf4ff) 1.120450201s ago: executing program 2 (id=1973): r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=ANY=[@ANYBLOB="45b526ec69ef1e01605fb5330354000057c3c8f07ccf05912133006adbed8f6dcc3d52be6c01fa55d28e260489eb48a076d68d69c0d92fb2f3d6c17697fba2f586edd79b7d9a23cabccc69270ad2440deb3efc86a031dde1bda56fd10a92741dca8208b9923d5f5d7585a64287926ce94f9660ec2ebef28d000100000000000000", @ANYRES16=r0, @ANYBLOB="01002bbd7000fcdbdf25350000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300020000000e0001006e657464657673696d0000000f"], 0x64}}, 0x0) unshare(0x6a000200) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x100000000, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r1) write$UHID_INPUT(r3, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="100000003d10"], 0x10}], 0x1, 0x0, 0x0, 0x5800}, 0x500) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm") r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000001300)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc4aecde660d218b6}, 0x4000) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x31, &(0x7f0000006680)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x21c9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_gettime(0x0, &(0x7f0000000300)) syz_extract_tcp_res$synack(&(0x7f0000000180)={0x41424344}, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000010022bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008001b00000000000c0000000300000008002900de6d0000"], 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x242, &(0x7f00000001c0)={@empty, @local, @val={@val={0x88a8, 0x4}, {0x8100, 0x2}}, {@mpls_mc={0x8848, {[{0x7fff, 0x0, 0x1}, {0x9}, {0x5}], @ipv6=@tcp={0xc, 0x6, "53ef28", 0x1f8, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', {[@routing={0x2c, 0xa, 0x1, 0x7, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @local]}, @dstopts={0x1d, 0x4, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfffffffb}]}, @fragment={0x2, 0x0, 0x2, 0x0, 0x0, 0x1e, 0x65}, @hopopts={0x0, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0x44a00000}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @calipso={0x7, 0x28, {0x1, 0x8, 0x8, 0x800, [0x6, 0x80, 0x3a, 0x6be]}}, @ra={0x5, 0x2, 0x313}, @jumbo={0xc2, 0x4, 0x10}, @ra={0x5, 0x2, 0xe}]}, @srh={0x87, 0x6, 0x4, 0x3, 0x9, 0x8, 0x9, [@private0, @mcast2, @mcast2]}, @srh={0x2c, 0xa, 0x4, 0x5, 0x81, 0x20, 0x3, [@private0, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @empty, @empty]}], {{0x4e20, 0x4e24, r7, r8, 0x0, 0x0, 0x8, 0x20, 0x8, 0x0, 0x800, {[@exp_smc={0xfe, 0x6}, @window={0x3, 0x3, 0x9a}, @window={0x3, 0x3, 0x51}]}}, {"8e41b61b979914615bc63168f6c9de765aeeca406282130c9afe535586aee99da79e7af948fdf38c1b9de0a1b9ac50c12a3a6e15123417351db82685f126ccd0525229ad8cc8fa8caecc30f9b1436cf9cb92ff58a5f4081994410bfd052bb95f"}}}}}}}}, &(0x7f0000000440)={0x1, 0x3, [0xbb1, 0x89a, 0xf3b, 0xe36]}) 993.002492ms ago: executing program 0 (id=1974): syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) brk(0x689d80000003) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x2, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) tkill(r0, 0x19) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f00080003400000000008000440000000"], 0x40}}, 0x0) r5 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_pdu(r5, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x60000, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xffffa888}, 0x20000880) 450.831191ms ago: executing program 1 (id=1975): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) 310.282903ms ago: executing program 3 (id=1976): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") process_mrelease(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) lseek(r4, 0xffffffffffffff7f, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x24022, &(0x7f0000000180)={[{@name={'name', 0x3d, 'none'}}]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0300000000000000000000000016010000100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x0, 0xa6}, 0xc) 208.566632ms ago: executing program 4 (id=1977): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket(0x23, 0x6, 0x5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019c80)=""/102400, 0x19000) inotify_init1(0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x3, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0xe}, 0x8018, 0x0, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0x800, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x3, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x64) bpf$TOKEN_CREATE(0x24, 0x0, 0xfffffffffffffcff) setresgid(0x0, 0xee01, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) 97.909902ms ago: executing program 0 (id=1978): socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x24, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x5, 0x40, 0x5, {0x77359400}, {}, {0x2, 0x1, 0x1}, 0x1, @can={{0x3, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "219573d0175f87e0"}}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xe12, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x80}}, 0x4) semop(0x0, &(0x7f00000000c0)=[{0x2}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 0s ago: executing program 0 (id=1979): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000640)=@newtaction={0x50, 0x30, 0x829, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x2, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/102400, 0x19000, 0x1000000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x2100, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x1008, &(0x7f0000001700)=""/4104, 0x40f00}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r8, 0x0, 0xcb, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x6, 0x5, @vifc_lcl_addr=@multicast1, @empty}, 0x10) kernel console output (not intermixed with test programs): 35] loop2: detected capacity change from 0 to 8192 [ 325.539315][ T28] audit: type=1400 audit(1771349802.631:222): avc: denied { mount } for pid=9036 comm="syz.4.1507" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 325.580360][ T28] audit: type=1400 audit(1771349802.671:223): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 325.656089][ T9040] loop4: detected capacity change from 0 to 128 [ 325.680089][ T9040] vfat: Unknown parameter 'ÿÿÿÿgÔ­¬aÆPpá0å‰úšpº–.{í6›' [ 325.692057][ T9041] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1506: iget: bad i_size value: 2533274857506816 [ 325.732307][ T9012] loop1: detected capacity change from 0 to 1024 [ 325.739449][ T9024] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1506: iget: bad i_size value: 2533274857506816 [ 325.752491][ T9024] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1506: iget: bad i_size value: 2533274857506816 [ 325.881018][ T9045] loop1: detected capacity change from 0 to 8192 [ 325.897842][ T28] audit: type=1400 audit(1771349802.991:224): avc: denied { append } for pid=9044 comm="syz.1.1510" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 325.927956][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.980480][ T28] audit: type=1400 audit(1771349803.071:225): avc: denied { write } for pid=9046 comm="syz.3.1511" name="xfrm_stat" dev="proc" ino=4026532531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 326.049506][ T28] audit: type=1400 audit(1771349803.141:226): avc: denied { module_request } for pid=9050 comm="syz.0.1513" kmod="net-pf-35-proto-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 327.022321][ T9062] lo speed is unknown, defaulting to 1000 [ 327.115285][ T9065] loop1: detected capacity change from 0 to 128 [ 327.137342][ T9062] loop3: detected capacity change from 0 to 2048 [ 327.178251][ T9062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.214921][ T9062] EXT4-fs error (device loop3): ext4_find_extent:941: inode #2: comm syz.3.1514: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 327.244633][ T9062] EXT4-fs error (device loop3): ext4_find_extent:941: inode #2: comm syz.3.1514: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 327.359049][ T9076] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1517'. [ 327.444651][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.717969][ T28] audit: type=1400 audit(1771349804.811:227): avc: denied { write } for pid=9077 comm="syz.2.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 327.864367][ T9081] futex_wake_op: syz.3.1519 tries to shift op by 32; fix this program [ 327.878492][ T9083] EXT4-fs: Ignoring removed i_version option [ 327.904117][ T9083] EXT4-fs: Ignoring removed bh option [ 327.931531][ T9083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.953456][ T9088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1518'. [ 327.964317][ T9083] ext4 filesystem being mounted at /292/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 328.118916][ T9097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1522'. [ 328.277345][ T9099] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1523'. [ 328.551679][ T9103] set_capacity_and_notify: 1 callbacks suppressed [ 328.551692][ T9103] loop1: detected capacity change from 0 to 128 [ 328.575368][ T9096] loop4: detected capacity change from 0 to 512 [ 328.582014][ T9096] EXT4-fs: Ignoring removed i_version option [ 328.588233][ T9096] EXT4-fs: Ignoring removed bh option [ 328.595133][ T9103] vfat: Unknown parameter 'ÿÿÿÿgÔ­¬aÆPpá0å‰úšpº–.{í6›' [ 328.610048][ T9096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.625860][ T9096] ext4 filesystem being mounted at /300/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 328.656098][ T9083] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1521: iget: bad i_size value: 2533274857506816 [ 328.674218][ T9083] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1521: iget: bad i_size value: 2533274857506816 [ 328.693224][ T9083] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1521: iget: bad i_size value: 2533274857506816 [ 328.743119][ T9101] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1525: iget: bad i_size value: 2533274857506816 [ 328.784910][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.820113][ T9108] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1525: iget: bad i_size value: 2533274857506816 [ 328.943557][ T9096] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1525: iget: bad i_size value: 2533274857506816 [ 329.123137][ T9120] lo speed is unknown, defaulting to 1000 [ 329.229360][ T9121] loop3: detected capacity change from 0 to 2048 [ 329.281442][ T9121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.823427][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.157717][ T9143] loop2: detected capacity change from 0 to 512 [ 330.168656][ T9143] EXT4-fs: Ignoring removed i_version option [ 330.206425][ T9131] loop1: detected capacity change from 0 to 1024 [ 330.208638][ T9143] EXT4-fs: Ignoring removed bh option [ 330.247673][ T9150] loop4: detected capacity change from 0 to 512 [ 330.254585][ T9150] EXT4-fs: Ignoring removed i_version option [ 330.260625][ T9150] EXT4-fs: Ignoring removed bh option [ 330.291842][ T9150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.309956][ T9143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.340655][ T9150] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 330.351171][ T9143] ext4 filesystem being mounted at /295/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 330.653292][ T9143] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1532: iget: bad i_size value: 2533274857506816 [ 330.692224][ T9160] loop0: detected capacity change from 0 to 512 [ 330.702422][ T9143] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1532: iget: bad i_size value: 2533274857506816 [ 330.724694][ T9143] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1532: iget: bad i_size value: 2533274857506816 [ 330.737748][ T9160] EXT4-fs: Ignoring removed i_version option [ 330.743787][ T9160] EXT4-fs: Ignoring removed bh option [ 330.774754][ T9165] loop1: detected capacity change from 0 to 2048 [ 330.785902][ T9160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.800406][ T9160] ext4 filesystem being mounted at /288/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 330.811523][ T9150] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1538: iget: bad i_size value: 2533274857506816 [ 330.814580][ T3309] loop1: p1 p3 p4 [ 330.834265][ T3309] loop1: p4 size 589824 extends beyond EOD, truncated [ 330.836080][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.859335][ T9165] loop1: p1 p3 p4 [ 330.874541][ T9165] loop1: p4 size 589824 extends beyond EOD, truncated [ 330.891619][ T9163] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1538: iget: bad i_size value: 2533274857506816 [ 330.908160][ T28] audit: type=1400 audit(1771349808.001:228): avc: denied { create } for pid=9164 comm="syz.1.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 330.929658][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.935319][ T9150] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1538: iget: bad i_size value: 2533274857506816 [ 330.953288][ T28] audit: type=1400 audit(1771349808.041:229): avc: denied { ioctl } for pid=9164 comm="syz.1.1542" path="socket:[20473]" dev="sockfs" ino=20473 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 331.021216][ T9171] loop2: detected capacity change from 0 to 128 [ 331.040271][ T28] audit: type=1400 audit(1771349808.071:230): avc: denied { write } for pid=9164 comm="syz.1.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 331.062160][ T28] audit: type=1400 audit(1771349808.091:231): avc: denied { attach_queue } for pid=9164 comm="syz.1.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 331.084013][ T28] audit: type=1400 audit(1771349808.101:232): avc: denied { write } for pid=9164 comm="syz.1.1542" name="loop1p1" dev="devtmpfs" ino=2017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 331.109916][ T9172] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1539'. [ 331.122748][ T9171] vfat: Unknown parameter 'ÿÿÿÿgÔ­¬aÆPpá0å‰úšpº–.{í6›' [ 331.134790][ T28] audit: type=1400 audit(1771349808.101:233): avc: denied { open } for pid=9164 comm="syz.1.1542" path="/dev/loop1p1" dev="devtmpfs" ino=2017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 331.186474][ T28] audit: type=1400 audit(1771349808.111:234): avc: denied { ioctl } for pid=9164 comm="syz.1.1542" path="/dev/loop1p1" dev="devtmpfs" ino=2017 ioctlcmd=0x5429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 331.256284][ T3637] udevd[3637]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 331.259672][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 331.277827][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 331.327086][ T9160] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1541: iget: bad i_size value: 2533274857506816 [ 331.340481][ T9160] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1541: iget: bad i_size value: 2533274857506816 [ 331.341920][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.355497][ T9160] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1541: iget: bad i_size value: 2533274857506816 [ 331.429003][ T9179] loop4: detected capacity change from 0 to 512 [ 331.445291][ T9179] EXT4-fs: Ignoring removed i_version option [ 331.454197][ T9179] EXT4-fs: Ignoring removed bh option [ 331.458778][ T9182] EXT4-fs: Ignoring removed orlov option [ 331.478585][ T9179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.491422][ T9182] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 331.500065][ T9179] ext4 filesystem being mounted at /305/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 331.511345][ T9182] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 331.519686][ T9182] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.1546: corrupted in-inode xattr: e_value size too large [ 331.534281][ T9182] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 331.534522][ T9182] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1546: couldn't read orphan inode 15 (err -117) [ 331.555712][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 331.555729][ C1] EXT4-fs (loop1): initial error at time 1771349808: ext4_iget_extra_inode:5025: inode 15 [ 331.555764][ C1] EXT4-fs (loop1): last error at time 1771349808: ext4_iget_extra_inode:5025: inode 15 [ 331.583668][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.592858][ T9182] loop1: lost filesystem error report for type 5 error -117 [ 331.593480][ T9182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.630379][ T28] audit: type=1326 audit(1771349808.721:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9181 comm="syz.1.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aec7bc629 code=0x7ffc0000 [ 331.674833][ T28] audit: type=1326 audit(1771349808.721:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9181 comm="syz.1.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aec7bc629 code=0x7ffc0000 [ 331.698624][ T28] audit: type=1326 audit(1771349808.721:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9181 comm="syz.1.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aec7bc629 code=0x7ffc0000 [ 331.899154][ T9194] lo speed is unknown, defaulting to 1000 [ 331.916396][ T9179] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1545: iget: bad i_size value: 2533274857506816 [ 331.934884][ T9179] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1545: iget: bad i_size value: 2533274857506816 [ 331.984894][ T9179] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1545: iget: bad i_size value: 2533274857506816 [ 332.070321][ T9201] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1550'. [ 332.081676][ T9198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.161975][ T9204] FAT-fs (loop2): Directory bread(block 64) failed [ 332.168603][ T9204] FAT-fs (loop2): Directory bread(block 65) failed [ 332.175168][ T9204] FAT-fs (loop2): Directory bread(block 66) failed [ 332.181782][ T9204] FAT-fs (loop2): Directory bread(block 67) failed [ 332.188415][ T9204] FAT-fs (loop2): Directory bread(block 68) failed [ 332.194999][ T9204] FAT-fs (loop2): Directory bread(block 69) failed [ 332.201673][ T9204] FAT-fs (loop2): Directory bread(block 70) failed [ 332.208246][ T9204] FAT-fs (loop2): Directory bread(block 71) failed [ 332.214906][ T9204] FAT-fs (loop2): Directory bread(block 72) failed [ 332.221448][ T9204] FAT-fs (loop2): Directory bread(block 73) failed [ 332.317784][ T9201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.400095][ T9201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.470652][ T9201] bond0 (unregistering): Released all slaves [ 332.557210][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.896796][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.045267][ T9208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.337333][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.557731][ T9235] set_capacity_and_notify: 4 callbacks suppressed [ 334.557748][ T9235] loop3: detected capacity change from 0 to 512 [ 334.666410][ T9235] EXT4-fs: Ignoring removed i_version option [ 334.672645][ T9235] EXT4-fs: Ignoring removed bh option [ 334.709877][ T9071] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 334.791412][ T9235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.941837][ T9235] ext4 filesystem being mounted at /318/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 334.969107][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1564'. [ 335.068679][ T9235] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1562: iget: bad i_size value: 2533274857506816 [ 335.393227][ T9261] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1562: iget: bad i_size value: 2533274857506816 [ 335.439578][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.554207][ T9230] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1562: iget: bad i_size value: 2533274857506816 [ 335.592228][ T9268] loop4: detected capacity change from 0 to 1024 [ 335.619695][ T9268] EXT4-fs: Ignoring removed nobh option [ 335.625441][ T9268] EXT4-fs: Ignoring removed nomblk_io_submit option [ 335.647045][ T9268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.716031][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.883696][ T9280] loop1: detected capacity change from 0 to 512 [ 335.913010][ T9280] EXT4-fs: Ignoring removed i_version option [ 335.924218][ T9283] hub 2-0:1.0: USB hub found [ 335.928933][ T9283] hub 2-0:1.0: 8 ports detected [ 335.945143][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 335.945158][ T28] audit: type=1400 audit(1771349813.041:339): avc: denied { create } for pid=9282 comm="syz.4.1574" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 335.976196][ T9283] loop4: detected capacity change from 0 to 512 [ 335.982715][ T9280] EXT4-fs: Ignoring removed bh option [ 336.022614][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.047331][ T9280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.061473][ T9287] FAULT_INJECTION: forcing a failure. [ 336.061473][ T9287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.085652][ T9287] CPU: 1 UID: 0 PID: 9287 Comm: syz.4.1577 Not tainted syzkaller #0 PREEMPT(full) [ 336.085754][ T9287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 336.085768][ T9287] Call Trace: [ 336.085775][ T9287] [ 336.085854][ T9287] __dump_stack+0x1d/0x30 [ 336.085883][ T9287] dump_stack_lvl+0x95/0xd0 [ 336.085976][ T9287] dump_stack+0x15/0x1b [ 336.085999][ T9287] should_fail_ex+0x263/0x280 [ 336.086125][ T9287] should_fail+0xb/0x20 [ 336.086148][ T9287] should_fail_usercopy+0x1a/0x20 [ 336.086176][ T9287] _copy_to_user+0x20/0xa0 [ 336.086270][ T9287] simple_read_from_buffer+0xb5/0x130 [ 336.086335][ T9287] proc_fail_nth_read+0x10e/0x150 [ 336.086374][ T9287] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 336.086400][ T9287] vfs_read+0x1ab/0x7f0 [ 336.086428][ T9287] ? __rcu_read_unlock+0x4e/0x70 [ 336.086447][ T9287] ? __fget_files+0x184/0x1c0 [ 336.086541][ T9287] ? mutex_lock+0x57/0x90 [ 336.086567][ T9287] ksys_read+0xdc/0x1a0 [ 336.086597][ T9287] __x64_sys_read+0x40/0x50 [ 336.086633][ T9287] x64_sys_call+0x2886/0x3020 [ 336.086662][ T9287] do_syscall_64+0x12c/0x370 [ 336.086698][ T9287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.086716][ T9287] RIP: 0033:0x7ff2bcfccece [ 336.086749][ T9287] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 336.086765][ T9287] RSP: 002b:00007ff2bba5efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 336.086786][ T9287] RAX: ffffffffffffffda RBX: 00007ff2bba5f6c0 RCX: 00007ff2bcfccece [ 336.086801][ T9287] RDX: 000000000000000f RSI: 00007ff2bba5f0a0 RDI: 0000000000000006 [ 336.086815][ T9287] RBP: 00007ff2bba5f090 R08: 0000000000000000 R09: 0000000000000000 [ 336.086829][ T9287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.086875][ T9287] R13: 00007ff2bd286038 R14: 00007ff2bd285fa0 R15: 00007ffd9d4b58a8 [ 336.086910][ T9287] [ 336.088537][ T9280] ext4 filesystem being mounted at /345/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 336.356590][ T9297] ALSA: seq fatal error: cannot create timer (-22) [ 336.391067][ T28] audit: type=1326 audit(1771349813.481:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6459c629 code=0x7ffc0000 [ 336.396154][ T9299] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1581'. [ 336.430579][ T28] audit: type=1326 audit(1771349813.481:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b6459c629 code=0x7ffc0000 [ 336.454435][ T28] audit: type=1326 audit(1771349813.481:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6459c629 code=0x7ffc0000 [ 336.478454][ T28] audit: type=1326 audit(1771349813.481:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b6459c629 code=0x7ffc0000 [ 336.491972][ T9293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.504201][ T28] audit: type=1326 audit(1771349813.481:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6459c629 code=0x7ffc0000 [ 336.524470][ T9293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.568370][ T28] audit: type=1326 audit(1771349813.481:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b6459c629 code=0x7ffc0000 [ 336.592692][ T28] audit: type=1326 audit(1771349813.481:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6459c629 code=0x7ffc0000 [ 336.630023][ T28] audit: type=1326 audit(1771349813.481:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4b6459c629 code=0x7ffc0000 [ 336.654264][ T28] audit: type=1326 audit(1771349813.491:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.3.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b6459c629 code=0x7ffc0000 [ 336.699442][ T9280] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1573: iget: bad i_size value: 2533274857506816 [ 336.729933][ T9280] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1573: iget: bad i_size value: 2533274857506816 [ 336.753345][ T9280] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1573: iget: bad i_size value: 2533274857506816 [ 336.802827][ T9314] FAULT_INJECTION: forcing a failure. [ 336.802827][ T9314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.824326][ T9314] CPU: 1 UID: 0 PID: 9314 Comm: syz.4.1586 Not tainted syzkaller #0 PREEMPT(full) [ 336.824366][ T9314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 336.824380][ T9314] Call Trace: [ 336.824388][ T9314] [ 336.824397][ T9314] __dump_stack+0x1d/0x30 [ 336.824459][ T9314] dump_stack_lvl+0x95/0xd0 [ 336.824483][ T9314] dump_stack+0x15/0x1b [ 336.824505][ T9314] should_fail_ex+0x263/0x280 [ 336.824661][ T9314] should_fail+0xb/0x20 [ 336.824682][ T9314] should_fail_usercopy+0x1a/0x20 [ 336.824768][ T9314] _copy_from_user+0x1c/0xb0 [ 336.824795][ T9314] ___sys_sendmsg+0xc1/0x1e0 [ 336.824836][ T9314] __x64_sys_sendmsg+0xd4/0x160 [ 336.824924][ T9314] x64_sys_call+0x194c/0x3020 [ 336.824999][ T9314] do_syscall_64+0x12c/0x370 [ 336.825088][ T9314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.825145][ T9314] RIP: 0033:0x7ff2bd00c629 [ 336.825159][ T9314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.825177][ T9314] RSP: 002b:00007ff2bba5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.825205][ T9314] RAX: ffffffffffffffda RBX: 00007ff2bd285fa0 RCX: 00007ff2bd00c629 [ 336.825219][ T9314] RDX: 0000000020000000 RSI: 00002000000000c0 RDI: 0000000000000009 [ 336.825234][ T9314] RBP: 00007ff2bba5f090 R08: 0000000000000000 R09: 0000000000000000 [ 336.825247][ T9314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.825323][ T9314] R13: 00007ff2bd286038 R14: 00007ff2bd285fa0 R15: 00007ffd9d4b58a8 [ 336.825340][ T9314] [ 336.831262][ T9312] loop3: detected capacity change from 0 to 512 [ 336.884908][ T9311] loop0: detected capacity change from 0 to 512 [ 336.894486][ T9312] EXT4-fs: Ignoring removed i_version option [ 336.900396][ T9311] EXT4-fs: Ignoring removed i_version option [ 336.916459][ T9312] EXT4-fs: Ignoring removed bh option [ 336.920503][ T9311] EXT4-fs: Ignoring removed bh option [ 337.026449][ T9312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.042357][ T9312] ext4 filesystem being mounted at /321/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 337.061787][ T9312] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1585: iget: bad i_size value: 2533274857506816 [ 337.076482][ T9312] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1585: iget: bad i_size value: 2533274857506816 [ 337.106083][ T9311] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 337.139099][ T9311] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1584: iget: bad i_size value: 2533274857506816 [ 337.153202][ T9311] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1584: iget: bad i_size value: 2533274857506816 [ 337.228701][ T9326] loop3: detected capacity change from 0 to 8192 [ 337.237868][ T9327] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.264471][ T9326] loop3: p1 < > p4 < > [ 337.273162][ T9326] loop3: partition table partially beyond EOD, truncated [ 337.281016][ T9326] loop3: p1 start 655360 is beyond EOD, truncated [ 337.299574][ T9330] net_ratelimit: 33018 callbacks suppressed [ 337.299591][ T9330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.337219][ T3637] udevd[3637]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 337.352133][ T9336] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1587'. [ 337.364929][ T9327] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.389316][ T9335] geneve1: entered allmulticast mode [ 337.438936][ T9327] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.512805][ T9339] ALSA: seq fatal error: cannot create timer (-22) [ 337.529332][ T9343] loop2: detected capacity change from 0 to 512 [ 337.542116][ T9343] EXT4-fs: Ignoring removed i_version option [ 337.556259][ T9343] EXT4-fs: Ignoring removed bh option [ 337.569390][ T9327] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.581273][ T9346] lo speed is unknown, defaulting to 1000 [ 337.594806][ T9351] loop3: detected capacity change from 0 to 2048 [ 337.629376][ T9350] lo speed is unknown, defaulting to 1000 [ 337.643713][ T9354] loop0: detected capacity change from 0 to 2048 [ 337.702554][ T1909] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.727332][ T9343] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 337.816405][ T1909] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.854787][ T1909] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.874211][ T1909] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.214532][ T9354] EXT4-fs error (device loop0): ext4_find_extent:941: inode #2: comm syz.0.1596: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 338.231680][ T9354] EXT4-fs error (device loop0): ext4_find_extent:941: inode #2: comm syz.0.1596: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 338.248625][ T9343] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1593: iget: bad i_size value: 2533274857506816 [ 338.264195][ T9343] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1593: iget: bad i_size value: 2533274857506816 [ 338.277219][ T9343] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1593: iget: bad i_size value: 2533274857506816 [ 338.328911][ T9363] netlink: 'syz.0.1597': attribute type 29 has an invalid length. [ 338.337433][ T9363] netlink: 'syz.0.1597': attribute type 3 has an invalid length. [ 338.345504][ T9363] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1597'. [ 338.401769][ T9365] netlink: 'syz.0.1598': attribute type 1 has an invalid length. [ 338.421869][ T9365] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.491780][ T9365] gretap1: entered promiscuous mode [ 338.550850][ T9368] syzkaller0: entered promiscuous mode [ 338.556495][ T9368] syzkaller0: entered allmulticast mode [ 338.564361][ T3637] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 338.570936][ T3637] loop2: partition table partially beyond EOD, truncated [ 338.587258][ T9368] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1599'. [ 338.616486][ T3637] loop2: p1 start 30976 is beyond EOD, truncated [ 338.626069][ T3637] loop2: p2 size 16128 extends beyond EOD, truncated [ 338.640141][ T3637] loop2: p3 start 327168 is beyond EOD, truncated [ 338.647631][ T3637] loop2: p5 start 30976 is beyond EOD, truncated [ 338.654376][ T3637] loop2: p6 size 16128 extends beyond EOD, truncated [ 338.664340][ T9371] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 338.669560][ T9371] loop2: partition table partially beyond EOD, truncated [ 338.755816][ T9371] loop2: p1 start 30976 is beyond EOD, truncated [ 338.762307][ T9371] loop2: p2 size 16128 extends beyond EOD, truncated [ 338.770292][ T9371] loop2: p3 start 327168 is beyond EOD, truncated [ 338.777510][ T9371] loop2: p5 start 30976 is beyond EOD, truncated [ 338.783978][ T9371] loop2: p6 size 16128 extends beyond EOD, truncated [ 338.974271][ T3637] udevd[3637]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 338.984607][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 338.995031][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 339.031688][ T3637] udevd[3637]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 339.032359][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 339.052714][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 339.460421][ T9396] ALSA: seq fatal error: cannot create timer (-22) [ 339.947136][ T9417] set_capacity_and_notify: 2 callbacks suppressed [ 339.947152][ T9417] loop4: detected capacity change from 0 to 2048 [ 340.015147][ T9419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1613'. [ 340.032105][ T9416] gretap1: left promiscuous mode [ 340.451593][ T9412] lo speed is unknown, defaulting to 1000 [ 340.950232][ T9433] ALSA: seq fatal error: cannot create timer (-22) [ 341.050931][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 341.050946][ T28] audit: type=1400 audit(1771349818.141:362): avc: denied { getopt } for pid=9440 comm="syz.0.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 341.052224][ T9441] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1621'. [ 341.090222][ T9441] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1621'. [ 341.110090][ T28] audit: type=1400 audit(1771349818.201:363): avc: denied { getopt } for pid=9439 comm="syz.3.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 341.165375][ T28] audit: type=1400 audit(1771349818.221:364): avc: denied { ioctl } for pid=9439 comm="syz.3.1622" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21885 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 341.235889][ T28] audit: type=1400 audit(1771349818.301:365): avc: denied { getattr } for pid=9439 comm="syz.3.1622" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 341.263936][ T9449] loop3: detected capacity change from 0 to 512 [ 341.272182][ T9449] EXT4-fs: Ignoring removed i_version option [ 341.278765][ T9449] EXT4-fs: Ignoring removed bh option [ 341.320692][ T9449] ext4 filesystem being mounted at /335/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 341.343021][ T9456] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1626'. [ 341.433873][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1626'. [ 341.503652][ T28] audit: type=1400 audit(1771349818.591:366): avc: denied { bind } for pid=9455 comm="syz.2.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 341.563990][ T28] audit: type=1400 audit(1771349818.601:367): avc: denied { connect } for pid=9455 comm="syz.2.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 341.614566][ T28] audit: type=1400 audit(1771349818.601:368): avc: denied { read } for pid=9455 comm="syz.2.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 341.700596][ T9463] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1628'. [ 341.702208][ T28] audit: type=1400 audit(1771349818.601:369): avc: denied { ioctl } for pid=9455 comm="syz.2.1626" path="socket:[21072]" dev="sockfs" ino=21072 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 341.734279][ T28] audit: type=1400 audit(1771349818.631:370): avc: denied { write } for pid=9455 comm="syz.2.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 341.825376][ T9466] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1625: iget: bad i_size value: 2533274857506816 [ 341.876690][ T9449] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1625: iget: bad i_size value: 2533274857506816 [ 341.929916][ T9449] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1625: iget: bad i_size value: 2533274857506816 [ 342.069420][ T9470] ALSA: seq fatal error: cannot create timer (-22) [ 342.174379][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1632'. [ 342.694295][ T9480] pimreg: entered allmulticast mode [ 342.794641][ T28] audit: type=1400 audit(1771349819.891:371): avc: denied { shutdown } for pid=9485 comm="syz.1.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 342.858036][ T9452] loop0: detected capacity change from 0 to 1024 [ 343.744601][ T9501] ALSA: seq fatal error: cannot create timer (-22) [ 344.247910][ T9504] loop4: detected capacity change from 0 to 512 [ 344.415263][ T9504] EXT4-fs: Ignoring removed i_version option [ 344.421644][ T9504] EXT4-fs: Ignoring removed bh option [ 344.478486][ T9504] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 344.618842][ T9516] loop1: detected capacity change from 0 to 512 [ 344.646658][ T9516] EXT4-fs: Ignoring removed i_version option [ 344.703358][ T9516] EXT4-fs: Ignoring removed bh option [ 344.714437][ T9507] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1642: iget: bad i_size value: 2533274857506816 [ 344.783296][ T9516] ext4 filesystem being mounted at /353/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 344.844515][ T9522] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1642: iget: bad i_size value: 2533274857506816 [ 344.955815][ T9504] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1642: iget: bad i_size value: 2533274857506816 [ 345.035799][ T9523] loop3: detected capacity change from 0 to 164 [ 345.054605][ T9528] loop0: detected capacity change from 0 to 1024 [ 345.153575][ T9523] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 345.203750][ T9516] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1645: iget: bad i_size value: 2533274857506816 [ 345.234086][ T9516] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1645: iget: bad i_size value: 2533274857506816 [ 345.247274][ T9516] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1645: iget: bad i_size value: 2533274857506816 [ 345.361730][ T9533] loop4: detected capacity change from 0 to 512 [ 345.448306][ T9535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1651'. [ 345.525257][ T9537] ALSA: seq fatal error: cannot create timer (-22) [ 345.558407][ T9539] loop4: detected capacity change from 0 to 128 [ 345.566121][ T9539] vfat: Unknown parameter 'ÿÿÿÿgÔ­¬aÆPpá0å‰úšpº–.{í6›' [ 345.600817][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1654'. [ 345.631583][ T9546] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1655'. [ 345.640851][ T9546] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1655'. [ 345.658729][ T9549] lo speed is unknown, defaulting to 1000 [ 345.839950][ T9564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1658'. [ 346.056978][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 346.057014][ T28] audit: type=1400 audit(1771349823.143:397): avc: denied { map_create } for pid=9570 comm="syz.2.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 346.146213][ T9573] ALSA: seq fatal error: cannot create timer (-22) [ 346.172974][ T28] audit: type=1400 audit(1771349823.173:398): avc: denied { perfmon } for pid=9570 comm="syz.2.1663" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 346.206641][ T28] audit: type=1400 audit(1771349823.173:399): avc: denied { map_read map_write } for pid=9570 comm="syz.2.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 346.226471][ T28] audit: type=1400 audit(1771349823.173:400): avc: denied { prog_load } for pid=9570 comm="syz.2.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 346.245656][ T28] audit: type=1400 audit(1771349823.173:401): avc: denied { bpf } for pid=9570 comm="syz.2.1663" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 346.266333][ T28] audit: type=1400 audit(1771349823.173:402): avc: denied { prog_run } for pid=9570 comm="syz.2.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 346.292381][ T28] audit: type=1400 audit(1771349823.193:403): avc: denied { listen } for pid=9565 comm="syz.0.1662" lport=55596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 346.322514][ T28] audit: type=1400 audit(1771349823.293:404): avc: denied { create } for pid=9570 comm="syz.2.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 346.353362][ T28] audit: type=1400 audit(1771349823.293:405): avc: denied { connect } for pid=9570 comm="syz.2.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 346.373232][ T28] audit: type=1400 audit(1771349823.293:406): avc: denied { write } for pid=9570 comm="syz.2.1663" path="socket:[22113]" dev="sockfs" ino=22113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 346.518220][ T9578] loop4: detected capacity change from 0 to 512 [ 346.615665][ T9586] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1668'. [ 346.685865][ T9578] EXT4-fs: Ignoring removed i_version option [ 346.733024][ T9578] EXT4-fs: Ignoring removed bh option [ 346.740788][ T9594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1666'. [ 346.882663][ T9578] EXT4-fs mount: 18 callbacks suppressed [ 346.882678][ T9578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.912902][ T9598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1671'. [ 346.974628][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1671'. [ 346.995278][ T9578] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 347.535022][ T9606] loop2: detected capacity change from 0 to 4096 [ 347.555342][ T9606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.592234][ T9610] ALSA: seq fatal error: cannot create timer (-22) [ 347.648179][ T9612] loop1: detected capacity change from 0 to 128 [ 347.671981][ T9612] vfat: Unknown parameter 'ÿÿÿÿgÔ­¬aÆPpá0å‰úšpº–.{í6›' [ 347.760319][ T9578] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1665: iget: bad i_size value: 2533274857506816 [ 347.795380][ T9578] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1665: iget: bad i_size value: 2533274857506816 [ 347.854524][ T9615] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1665: iget: bad i_size value: 2533274857506816 [ 347.903756][ T9619] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1676'. [ 347.923792][ T9552] loop3: detected capacity change from 0 to 1024 [ 348.014241][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.068340][ T9626] FAULT_INJECTION: forcing a failure. [ 348.068340][ T9626] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 348.084505][ T9626] CPU: 0 UID: 0 PID: 9626 Comm: syz.0.1680 Not tainted syzkaller #0 PREEMPT(full) [ 348.084554][ T9626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 348.084626][ T9626] Call Trace: [ 348.084633][ T9626] [ 348.084640][ T9626] __dump_stack+0x1d/0x30 [ 348.084696][ T9626] dump_stack_lvl+0x95/0xd0 [ 348.084715][ T9626] dump_stack+0x15/0x1b [ 348.084742][ T9626] should_fail_ex+0x263/0x280 [ 348.084847][ T9626] should_fail_alloc_page+0xf2/0x100 [ 348.084882][ T9626] __alloc_frozen_pages_noprof+0x108/0x360 [ 348.084944][ T9626] alloc_pages_mpol+0xb3/0x260 [ 348.084973][ T9626] alloc_pages_noprof+0x8f/0x130 [ 348.085025][ T9626] __pud_alloc+0x47/0x4a0 [ 348.085103][ T9626] handle_mm_fault+0x1d59/0x3020 [ 348.085148][ T9626] ? mt_find+0x291/0x3d0 [ 348.085167][ T9626] ? lock_mm_and_find_vma+0x8b/0x440 [ 348.085185][ T9626] do_user_addr_fault+0x3fd/0x1050 [ 348.085230][ T9626] ? __rcu_read_unlock+0x4e/0x70 [ 348.085300][ T9626] exc_page_fault+0x62/0xa0 [ 348.085330][ T9626] asm_exc_page_fault+0x26/0x30 [ 348.085353][ T9626] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 348.085431][ T9626] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 19 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 348.085544][ T9626] RSP: 0018:ffffc90012153cb0 EFLAGS: 00050212 [ 348.085564][ T9626] RAX: ffff88810160bbf8 RBX: 0000000000000010 RCX: 0000000000000010 [ 348.085579][ T9626] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: ffff88811aa190c0 [ 348.085594][ T9626] RBP: 0000000000000010 R08: 0000000000000234 R09: 0000000000000000 [ 348.085608][ T9626] R10: 000188811aa190c0 R11: 000188811aa190cf R12: 00002000000003c0 [ 348.085664][ T9626] R13: 0000000000000000 R14: ffff88811aa190c0 R15: 00002000000003c0 [ 348.085685][ T9626] _copy_from_user+0x6f/0xb0 [ 348.085764][ T9626] xfrm_user_policy+0x19b/0x530 [ 348.085790][ T9626] do_ip_setsockopt+0x1722/0x2290 [ 348.085817][ T9626] ip_setsockopt+0x58/0x110 [ 348.085842][ T9626] tcp_setsockopt+0x98/0xb0 [ 348.085922][ T9626] sock_common_setsockopt+0x69/0x80 [ 348.085960][ T9626] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 348.085998][ T9626] __sys_setsockopt+0x184/0x200 [ 348.086034][ T9626] __x64_sys_setsockopt+0x64/0x80 [ 348.086059][ T9626] x64_sys_call+0x2327/0x3020 [ 348.086146][ T9626] do_syscall_64+0x12c/0x370 [ 348.086182][ T9626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.086222][ T9626] RIP: 0033:0x7fbac450c629 [ 348.086236][ T9626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.086255][ T9626] RSP: 002b:00007fbac2f5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 348.086270][ T9626] RAX: ffffffffffffffda RBX: 00007fbac4785fa0 RCX: 00007fbac450c629 [ 348.086281][ T9626] RDX: 0008008000000010 RSI: 0000000000000000 RDI: 0000000000000003 [ 348.086320][ T9626] RBP: 00007fbac2f5f090 R08: 0000000000000010 R09: 0000000000000000 [ 348.086384][ T9626] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 348.086398][ T9626] R13: 00007fbac4786038 R14: 00007fbac4785fa0 R15: 00007ffd80b2b348 [ 348.086474][ T9626] [ 348.141100][ T9628] syzkaller0: entered promiscuous mode [ 348.409769][ T9628] syzkaller0: entered allmulticast mode [ 348.603400][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.699242][ T9647] ALSA: seq fatal error: cannot create timer (-22) [ 348.769305][ T9649] tipc: Failed to obtain node identity [ 348.796278][ T9649] tipc: Enabling of bearer rejected, failed to enable media [ 348.807425][ T9634] loop3: detected capacity change from 0 to 1024 [ 349.322302][ T9659] lo speed is unknown, defaulting to 1000 [ 349.401782][ T9664] loop2: detected capacity change from 0 to 512 [ 349.409371][ T9664] EXT4-fs: Ignoring removed i_version option [ 349.409399][ T9664] EXT4-fs: Ignoring removed bh option [ 349.440367][ T9664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.457544][ T9664] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 349.496339][ T9659] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.529781][ T9659] EXT4-fs error (device loop0): ext4_find_extent:941: inode #2: comm syz.0.1688: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 349.561105][ T9659] EXT4-fs error (device loop0): ext4_find_extent:941: inode #2: comm syz.0.1688: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 349.747931][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.761470][ T9664] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1690: iget: bad i_size value: 2533274857506816 [ 349.774680][ T9664] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1690: iget: bad i_size value: 2533274857506816 [ 349.788074][ T9664] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1690: iget: bad i_size value: 2533274857506816 [ 349.827653][ T9680] EXT4-fs: Ignoring removed i_version option [ 349.834284][ T9680] EXT4-fs: Ignoring removed bh option [ 349.852778][ T9680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.865655][ T9680] ext4 filesystem being mounted at /317/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 349.907530][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.044305][ T9685] syzkaller0: entered promiscuous mode [ 350.049888][ T9685] syzkaller0: entered allmulticast mode [ 350.052043][ T9680] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1693: iget: bad i_size value: 2533274857506816 [ 350.071353][ T9680] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1693: iget: bad i_size value: 2533274857506816 [ 350.085211][ T9680] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1693: iget: bad i_size value: 2533274857506816 [ 350.195593][ T9693] set_capacity_and_notify: 2 callbacks suppressed [ 350.195621][ T9693] loop3: detected capacity change from 0 to 512 [ 350.209547][ T9693] EXT4-fs: Ignoring removed i_version option [ 350.220648][ T9693] EXT4-fs: Ignoring removed bh option [ 350.237897][ T9693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.254320][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.254696][ T9693] ext4 filesystem being mounted at /345/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 350.279805][ T9693] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1697: iget: bad i_size value: 2533274857506816 [ 350.294404][ T9693] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1697: iget: bad i_size value: 2533274857506816 [ 350.377180][ T9691] loop2: detected capacity change from 0 to 1024 [ 350.553079][ T9704] __nla_validate_parse: 2 callbacks suppressed [ 350.556424][ T9704] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1699'. [ 350.631733][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.729287][ T9711] ALSA: seq fatal error: cannot create timer (-22) [ 351.067970][ T9723] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1703'. [ 351.096493][ T9724] loop2: detected capacity change from 0 to 1024 [ 351.400681][ T9728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1705'. [ 351.662621][ T9730] loop3: detected capacity change from 0 to 512 [ 351.782863][ T9730] EXT4-fs: Ignoring removed i_version option [ 351.806527][ T9730] EXT4-fs: Ignoring removed bh option [ 351.927595][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 351.927613][ T28] audit: type=1400 audit(1771349829.016:487): avc: denied { write } for pid=9736 comm="syz.4.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 351.937683][ T9739] loop4: detected capacity change from 0 to 1024 [ 351.961785][ T28] audit: type=1400 audit(1771349829.016:488): avc: denied { create } for pid=9734 comm="syz.2.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 351.993424][ T9730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.016490][ T9730] ext4 filesystem being mounted at /347/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 352.034483][ T28] audit: type=1400 audit(1771349829.126:489): avc: denied { read } for pid=9734 comm="syz.2.1708" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 352.057213][ T28] audit: type=1400 audit(1771349829.126:490): avc: denied { open } for pid=9734 comm="syz.2.1708" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 352.099182][ T9739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.256800][ T9754] loop0: detected capacity change from 0 to 512 [ 352.289922][ T9754] EXT4-fs: Ignoring removed i_version option [ 352.295954][ T9754] EXT4-fs: Ignoring removed bh option [ 352.370529][ T9754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.397725][ T28] audit: type=1400 audit(1771349829.406:491): avc: denied { create } for pid=9736 comm="syz.4.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 352.407216][ T9754] ext4 filesystem being mounted at /320/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 352.423106][ T28] audit: type=1400 audit(1771349829.406:492): avc: denied { write } for pid=9736 comm="syz.4.1709" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 352.461442][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.481637][ T9754] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1711: iget: bad i_size value: 2533274857506816 [ 352.495996][ T9754] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1711: iget: bad i_size value: 2533274857506816 [ 352.510857][ T28] audit: type=1400 audit(1771349829.406:493): avc: denied { setattr } for pid=9736 comm="syz.4.1709" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 352.593225][ T28] audit: type=1400 audit(1771349829.406:494): avc: denied { write } for pid=9736 comm="syz.4.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 352.608283][ T9764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1713'. [ 352.632173][ T28] audit: type=1400 audit(1771349829.636:495): avc: denied { block_suspend } for pid=9761 comm="syz.4.1712" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 352.653824][ T28] audit: type=1326 audit(1771349829.686:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9763 comm="syz.4.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2bd00c629 code=0x7ffc0000 [ 352.711041][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.725074][ T9730] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1706: iget: bad i_size value: 2533274857506816 [ 352.743316][ T9730] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1706: iget: bad i_size value: 2533274857506816 [ 352.759233][ T9730] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1706: iget: bad i_size value: 2533274857506816 [ 352.841369][ T9768] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1715'. [ 352.975929][ T9776] loop4: detected capacity change from 0 to 512 [ 352.994833][ T9776] EXT4-fs: Ignoring removed i_version option [ 353.059193][ T9776] EXT4-fs: Ignoring removed bh option [ 353.118768][ T9776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.234862][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.251890][ T9776] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 353.297676][ T9778] ALSA: seq fatal error: cannot create timer (-22) [ 353.332821][ T9776] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1716: iget: bad i_size value: 2533274857506816 [ 353.368696][ T9786] loop3: detected capacity change from 0 to 512 [ 353.403717][ T9786] EXT4-fs: Ignoring removed i_version option [ 353.428955][ T9786] EXT4-fs: Ignoring removed bh option [ 353.449510][ T9791] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1716: iget: bad i_size value: 2533274857506816 [ 353.509006][ T9773] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1716: iget: bad i_size value: 2533274857506816 [ 353.534257][ T9786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.557981][ T9793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1720'. [ 353.573048][ T9786] ext4 filesystem being mounted at /348/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 353.695912][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.777980][ T9797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5922 sclass=netlink_route_socket pid=9797 comm=syz.4.1721 [ 353.865893][ T9786] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1719: iget: bad i_size value: 2533274857506816 [ 353.884348][ T9797] netlink: 444 bytes leftover after parsing attributes in process `syz.4.1721'. [ 353.893659][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1721'. [ 353.903313][ T9786] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1719: iget: bad i_size value: 2533274857506816 [ 353.924299][ T9786] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1719: iget: bad i_size value: 2533274857506816 [ 354.060977][ T9803] loop1: detected capacity change from 0 to 512 [ 354.072834][ T9806] loop0: detected capacity change from 0 to 512 [ 354.082887][ T9803] EXT4-fs: Ignoring removed i_version option [ 354.089353][ T9803] EXT4-fs: Ignoring removed bh option [ 354.095335][ T9806] EXT4-fs: Ignoring removed i_version option [ 354.101866][ T9806] EXT4-fs: Ignoring removed bh option [ 354.135767][ T9806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.153506][ T9809] lo speed is unknown, defaulting to 1000 [ 354.170414][ T9803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.188342][ T9806] ext4 filesystem being mounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 354.208265][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.211019][ T9803] ext4 filesystem being mounted at /368/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 354.277703][ T9816] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1725'. [ 354.315631][ T9803] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1722: iget: bad i_size value: 2533274857506816 [ 354.329715][ T9803] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1722: iget: bad i_size value: 2533274857506816 [ 354.330180][ T9809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.422870][ T9809] EXT4-fs error (device loop4): ext4_find_extent:941: inode #2: comm syz.4.1724: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 354.455331][ T9806] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1723: iget: bad i_size value: 2533274857506816 [ 354.456337][ T9809] EXT4-fs error (device loop4): ext4_find_extent:941: inode #2: comm syz.4.1724: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 354.485328][ T9820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1726'. [ 354.494542][ T9806] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1723: iget: bad i_size value: 2533274857506816 [ 354.518708][ T9806] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1723: iget: bad i_size value: 2533274857506816 [ 354.539240][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.591836][ T9826] EXT4-fs: Ignoring removed i_version option [ 354.602173][ T9826] EXT4-fs: Ignoring removed bh option [ 354.773880][ T9826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.939749][ T9826] ext4 filesystem being mounted at /335/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.158176][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.168456][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.310537][ T9850] ALSA: seq fatal error: cannot create timer (-22) [ 355.497866][ T1909] Bluetooth: hci0: Frame reassembly failed (-84) [ 355.629050][ T9826] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1729: iget: bad i_size value: 2533274857506816 [ 355.674837][ T9826] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1729: iget: bad i_size value: 2533274857506816 [ 355.721013][ T9826] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1729: iget: bad i_size value: 2533274857506816 [ 355.893613][ T9866] lo speed is unknown, defaulting to 1000 [ 355.900592][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.948565][ T9857] set_capacity_and_notify: 2 callbacks suppressed [ 355.948581][ T9857] loop4: detected capacity change from 0 to 1024 [ 355.952024][ T9869] loop2: detected capacity change from 0 to 512 [ 355.977916][ T9869] EXT4-fs: Ignoring removed i_version option [ 355.984064][ T9867] loop1: detected capacity change from 0 to 2048 [ 355.984522][ T9869] EXT4-fs: Ignoring removed bh option [ 356.025521][ T9869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.063596][ T9867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.140636][ T9869] ext4 filesystem being mounted at /336/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 356.167255][ T9876] loop0: detected capacity change from 0 to 128 [ 356.187941][ T9876] vfat: Unknown parameter 'ÿÿÿÿgÔ­¬aÆPpá0å‰úšpº–.{í6›' [ 356.469367][ T9869] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1739: iget: bad i_size value: 2533274857506816 [ 356.514312][ T9869] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1739: iget: bad i_size value: 2533274857506816 [ 356.547038][ T9869] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1739: iget: bad i_size value: 2533274857506816 [ 356.700031][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.888033][ T9743] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 356.923746][ T9882] loop2: detected capacity change from 0 to 512 [ 356.940098][ T9882] EXT4-fs: Ignoring removed i_version option [ 356.961068][ T9882] EXT4-fs: Ignoring removed bh option [ 357.024068][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 357.024084][ T28] audit: type=1326 audit(1771349834.118:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9886 comm="syz.0.1743" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbac450c629 code=0x0 [ 357.074125][ T9882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.104766][ T9882] ext4 filesystem being mounted at /338/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 357.135346][ T9882] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1742: iget: bad i_size value: 2533274857506816 [ 357.157672][ T9882] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1742: iget: bad i_size value: 2533274857506816 [ 357.251497][ T9894] ALSA: seq fatal error: cannot create timer (-22) [ 357.298625][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.547290][ T3556] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 357.553454][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 357.623900][ T9902] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1748'. [ 357.630047][ T28] audit: type=1326 audit(1771349834.718:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9901 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbac450c629 code=0x7ffc0000 [ 357.663089][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.726745][ T28] audit: type=1326 audit(1771349834.718:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9901 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbac450c629 code=0x7ffc0000 [ 357.823578][ T28] audit: type=1326 audit(1771349834.718:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9901 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbac450c629 code=0x7ffc0000 [ 357.854158][ T9914] loop1: detected capacity change from 0 to 512 [ 357.861433][ T9914] EXT4-fs: Ignoring removed i_version option [ 357.890447][ T9914] EXT4-fs: Ignoring removed bh option [ 357.906238][ T28] audit: type=1326 audit(1771349834.718:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9901 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbac450c629 code=0x7ffc0000 [ 358.006573][ T28] audit: type=1326 audit(1771349834.718:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9901 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbac450c629 code=0x7ffc0000 [ 358.030096][ T28] audit: type=1326 audit(1771349834.718:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9901 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fbac450c629 code=0x7ffc0000 [ 358.089397][ T9914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.120815][ T9914] ext4 filesystem being mounted at /374/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 358.134313][ T28] audit: type=1326 audit(1771349834.718:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9901 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbac450c629 code=0x7ffc0000 [ 358.173067][ T28] audit: type=1326 audit(1771349834.718:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9901 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbac450c629 code=0x7ffc0000 [ 358.226481][ T28] audit: type=1326 audit(1771349834.728:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9901 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbac450c629 code=0x7ffc0000 [ 358.535493][ T9914] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1744: iget: bad i_size value: 2533274857506816 [ 358.560298][ T9914] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1744: iget: bad i_size value: 2533274857506816 [ 358.592879][ T9914] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1744: iget: bad i_size value: 2533274857506816 [ 358.642393][ T9927] lo speed is unknown, defaulting to 1000 [ 358.697498][ T9930] loop4: detected capacity change from 0 to 2048 [ 358.883903][ T9930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.060815][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.107275][ T9940] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1758'. [ 359.142506][ T9939] ALSA: seq fatal error: cannot create timer (-22) [ 359.154297][ T54] tipc: Subscription rejected, illegal request [ 359.277522][ T9944] loop2: detected capacity change from 0 to 512 [ 359.297097][ T9944] EXT4-fs: Ignoring removed i_version option [ 359.328423][ T9944] EXT4-fs: Ignoring removed bh option [ 359.378228][ T9944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.390973][ T9944] ext4 filesystem being mounted at /340/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 359.530110][ T9958] loop1: detected capacity change from 0 to 512 [ 359.536878][ T9958] EXT4-fs: Ignoring removed i_version option [ 359.543326][ T9958] EXT4-fs: Ignoring removed bh option [ 359.567502][ T9958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.585865][ T9958] ext4 filesystem being mounted at /378/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 359.603717][ T9958] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1765: iget: bad i_size value: 2533274857506816 [ 359.628433][ T9958] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1765: iget: bad i_size value: 2533274857506816 [ 359.727928][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1768'. [ 359.755690][ T9967] netlink: zone id is out of range [ 359.762431][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.804424][ T9967] loop0: detected capacity change from 0 to 512 [ 359.848358][ T9967] vfat: Unknown parameter '0000000000000000000001777777777777777777777' [ 359.874176][ T9970] EXT4-fs: Ignoring removed i_version option [ 359.885674][ T9970] EXT4-fs: Ignoring removed bh option [ 359.901699][ T9944] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1759: iget: bad i_size value: 2533274857506816 [ 359.904733][ T9970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.945087][ T9970] ext4 filesystem being mounted at /379/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 360.053119][ T9968] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1759: iget: bad i_size value: 2533274857506816 [ 360.156580][ T9975] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1759: iget: bad i_size value: 2533274857506816 [ 360.187422][ T9980] ALSA: seq fatal error: cannot create timer (-22) [ 360.295929][ T9970] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1769: iget: bad i_size value: 2533274857506816 [ 360.319208][ T9970] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1769: iget: bad i_size value: 2533274857506816 [ 360.344034][ T9970] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1769: iget: bad i_size value: 2533274857506816 [ 360.369623][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.670059][ T9992] syzkaller0: entered promiscuous mode [ 360.696914][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.705255][ T9992] syzkaller0: entered allmulticast mode [ 360.839559][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.951632][T10007] EXT4-fs: Ignoring removed bh option [ 360.960789][T10004] set_capacity_and_notify: 3 callbacks suppressed [ 360.960806][T10004] loop0: detected capacity change from 0 to 512 [ 361.004819][T10007] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 361.018036][T10004] EXT4-fs: Ignoring removed i_version option [ 361.024269][T10004] EXT4-fs: Ignoring removed bh option [ 361.030645][T10007] EXT4-fs (loop2): orphan cleanup on readonly fs [ 361.041966][T10007] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.1780: dx entry: limit 0 != root limit 125 [ 361.054213][T10007] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1780: Corrupt directory, running e2fsck is recommended [ 361.067916][T10016] loop3: detected capacity change from 0 to 512 [ 361.077462][T10007] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #2: block 8: comm syz.2.1780: lblock 11 mapped to illegal pblock 8 (length 1) [ 361.077591][T10004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.097161][T10016] EXT4-fs: Ignoring removed i_version option [ 361.110619][T10004] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 361.135652][T10007] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 361.138842][T10007] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 361.148114][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 361.148141][ C0] EXT4-fs (loop2): initial error at time 1771349838: ext4_map_blocks:776: inode 2: block 8 [ 361.148167][ C0] EXT4-fs (loop2): last error at time 1771349838: ext4_map_blocks:776: inode 2: block 8 [ 361.183170][T10007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 361.196301][T10016] EXT4-fs: Ignoring removed bh option [ 361.224656][T10016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.255412][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.285621][T10024] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1786'. [ 361.306998][T10024] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1786'. [ 361.327262][T10016] ext4 filesystem being mounted at /365/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 361.364178][T10009] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1782: iget: bad i_size value: 2533274857506816 [ 361.364602][T10009] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1782: iget: bad i_size value: 2533274857506816 [ 361.411785][T10004] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1781: iget: bad i_size value: 2533274857506816 [ 361.412208][T10004] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1781: iget: bad i_size value: 2533274857506816 [ 361.412467][T10004] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1781: iget: bad i_size value: 2533274857506816 [ 361.507786][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.618689][T10037] loop3: detected capacity change from 0 to 512 [ 361.637371][T10037] EXT4-fs: Ignoring removed i_version option [ 361.643488][T10037] EXT4-fs: Ignoring removed bh option [ 361.651884][T10039] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1787'. [ 361.677427][T10037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.692811][T10037] ext4 filesystem being mounted at /367/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 361.714441][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.839623][T10045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1790'. [ 362.325149][T10049] ALSA: seq fatal error: cannot create timer (-22) [ 362.545199][ T28] kauditd_printk_skb: 144 callbacks suppressed [ 362.545212][ T28] audit: type=1400 audit(1771349839.651:700): avc: denied { create } for pid=10050 comm="syz.1.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 362.588825][T10052] loop1: detected capacity change from 0 to 512 [ 362.602601][T10052] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 362.655521][T10052] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1792: bg 0: block 384: padding at end of block bitmap is not set [ 362.693839][T10052] loop1: lost filesystem error report for type 5 error -117 [ 362.694005][T10052] EXT4-fs (loop1): Remounting filesystem read-only [ 362.701370][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 362.701410][ C1] EXT4-fs (loop1): initial error at time 1771349839: ext4_validate_block_bitmap:441 [ 362.701438][ C1] EXT4-fs (loop1): last error at time 1771349839: ext4_validate_block_bitmap:441 [ 362.735009][T10037] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1789: iget: bad i_size value: 2533274857506816 [ 362.764633][T10037] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1789: iget: bad i_size value: 2533274857506816 [ 362.770546][ T28] audit: type=1400 audit(1771349839.871:701): avc: denied { create } for pid=10051 comm="syz.4.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 362.795814][T10037] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1789: iget: bad i_size value: 2533274857506816 [ 362.801569][T10052] EXT4-fs (loop1): 1 truncate cleaned up [ 362.844628][T10052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.862509][ T28] audit: type=1400 audit(1771349839.961:702): avc: denied { shutdown } for pid=10050 comm="syz.1.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 362.912509][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.075639][T10061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1794'. [ 363.208731][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.553275][T10059] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 363.567261][ T28] audit: type=1400 audit(1771349840.651:703): avc: denied { create } for pid=10058 comm="syz.1.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 363.588104][ T28] audit: type=1400 audit(1771349840.651:704): avc: denied { mount } for pid=10058 comm="syz.1.1795" name="/" dev="rpc_pipefs" ino=23892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 363.625721][ T28] audit: type=1400 audit(1771349840.671:705): avc: denied { setopt } for pid=10062 comm="syz.0.1797" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 363.660954][T10059] loop1: detected capacity change from 0 to 512 [ 363.672111][ T28] audit: type=1400 audit(1771349840.721:706): avc: denied { name_bind } for pid=10068 comm="syz.3.1796" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 363.725255][T10059] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 363.750654][T10071] loop3: detected capacity change from 0 to 512 [ 363.796863][ T28] audit: type=1400 audit(1771349840.892:707): avc: denied { create } for pid=10070 comm="syz.3.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 363.829556][T10076] loop4: detected capacity change from 0 to 512 [ 363.846641][T10076] EXT4-fs: Ignoring removed i_version option [ 363.848190][T10059] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1795: invalid indirect mapped block 4294967295 (level 0) [ 363.860620][T10076] EXT4-fs: Ignoring removed bh option [ 363.877552][T10059] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 363.879409][T10059] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1795: invalid indirect mapped block 4294967295 (level 1) [ 363.889499][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 363.889574][ C1] EXT4-fs (loop1): initial error at time 1771349840: ext4_free_branches:1023: inode 16 [ 363.889763][ C1] EXT4-fs (loop1): last error at time 1771349840: ext4_free_branches:1023: inode 16 [ 363.933844][T10059] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 363.938029][T10076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.945893][T10059] EXT4-fs (loop1): 1 orphan inode deleted [ 363.965205][T10076] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 363.969414][T10059] EXT4-fs (loop1): 1 truncate cleaned up [ 363.985104][ T28] audit: type=1400 audit(1771349841.092:708): avc: denied { create } for pid=10077 comm="syz.3.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 364.010525][T10059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.013104][ T28] audit: type=1400 audit(1771349841.092:709): avc: denied { read write } for pid=10077 comm="syz.3.1800" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 364.073115][T10074] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1799: iget: bad i_size value: 2533274857506816 [ 364.104725][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.173559][T10076] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1799: iget: bad i_size value: 2533274857506816 [ 364.229857][T10083] loop1: detected capacity change from 0 to 512 [ 364.263856][T10083] EXT4-fs: Ignoring removed i_version option [ 364.269961][T10083] EXT4-fs: Ignoring removed bh option [ 364.323604][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.333268][T10083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.353997][T10084] syzkaller0: entered promiscuous mode [ 364.359647][T10084] syzkaller0: entered allmulticast mode [ 364.383893][T10083] ext4 filesystem being mounted at /384/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 364.527471][T10090] lo speed is unknown, defaulting to 1000 [ 364.536806][T10094] loop0: detected capacity change from 0 to 512 [ 364.543935][T10094] EXT4-fs: Ignoring removed bh option [ 364.568045][T10094] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.1805: dx entry: limit 0 != root limit 125 [ 364.623226][T10094] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1805: Corrupt directory, running e2fsck is recommended [ 364.639700][T10094] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #2: block 8: comm syz.0.1805: lblock 11 mapped to illegal pblock 8 (length 1) [ 364.673216][T10094] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 364.683338][T10094] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 364.700636][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 364.700670][ C0] EXT4-fs (loop0): initial error at time 1771349841: ext4_map_blocks:776: inode 2: block 8 [ 364.700717][ C0] EXT4-fs (loop0): last error at time 1771349841: ext4_map_blocks:776: inode 2: block 8 [ 364.727599][T10094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.777248][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.840804][T10101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1806'. [ 365.000227][T10105] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1807'. [ 365.075013][T10106] loop0: detected capacity change from 0 to 256 [ 365.104662][T10083] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1801: iget: bad i_size value: 2533274857506816 [ 365.225667][T10102] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1801: iget: bad i_size value: 2533274857506816 [ 365.357263][T10083] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1801: iget: bad i_size value: 2533274857506816 [ 365.405223][T10111] ip6erspan0: entered promiscuous mode [ 365.534089][T10113] syz.0.1811: attempt to access beyond end of device [ 365.534089][T10113] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 365.575207][T10113] syz.0.1811: attempt to access beyond end of device [ 365.575207][T10113] loop0: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 365.598510][T10113] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 365.620092][T10113] syz.0.1811: attempt to access beyond end of device [ 365.620092][T10113] loop0: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 365.637596][T10113] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 365.657929][T10113] syz.0.1811: attempt to access beyond end of device [ 365.657929][T10113] loop0: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 365.705962][T10113] syz.0.1811: attempt to access beyond end of device [ 365.705962][T10113] loop0: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 365.723162][T10113] Buffer I/O error on dev loop0, logical block 83, lost async page write [ 365.741827][T10113] syz.0.1811: attempt to access beyond end of device [ 365.741827][T10113] loop0: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 365.770481][T10113] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 365.789641][T10113] syz.0.1811: attempt to access beyond end of device [ 365.789641][T10113] loop0: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 365.829601][T10113] syz.0.1811: attempt to access beyond end of device [ 365.829601][T10113] loop0: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 365.852586][T10113] Buffer I/O error on dev loop0, logical block 95, lost async page write [ 365.861193][T10113] syz.0.1811: attempt to access beyond end of device [ 365.861193][T10113] loop0: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 365.882560][T10113] Buffer I/O error on dev loop0, logical block 96, lost async page write [ 365.883573][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.893836][T10113] syz.0.1811: attempt to access beyond end of device [ 365.893836][T10113] loop0: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 365.927590][T10113] Buffer I/O error on dev loop0, logical block 99, lost async page write [ 365.940849][T10113] Buffer I/O error on dev loop0, logical block 100, lost async page write [ 365.952720][T10113] Buffer I/O error on dev loop0, logical block 111, lost async page write [ 365.962144][T10113] Buffer I/O error on dev loop0, logical block 112, lost async page write [ 366.304615][T10134] lo speed is unknown, defaulting to 1000 [ 366.622973][T10141] ALSA: seq fatal error: cannot create timer (-22) [ 366.808033][T10146] ALSA: seq fatal error: cannot create timer (-22) [ 367.058468][T10150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1822'. [ 367.301925][T10152] set_capacity_and_notify: 2 callbacks suppressed [ 367.302100][T10152] loop1: detected capacity change from 0 to 512 [ 367.454931][T10152] EXT4-fs: Ignoring removed i_version option [ 367.460990][T10152] EXT4-fs: Ignoring removed bh option [ 367.484764][T10152] ext4 filesystem being mounted at /386/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 367.675378][T10162] loop3: detected capacity change from 0 to 512 [ 367.701755][T10162] EXT4-fs: Ignoring removed i_version option [ 367.717298][T10162] EXT4-fs: Ignoring removed bh option [ 367.759912][T10165] loop0: detected capacity change from 0 to 128 [ 367.774207][T10162] ext4 filesystem being mounted at /378/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 367.802820][T10165] vfat: Unknown parameter 'ÿÿÿÿgÔ­¬aÆPpá0å‰úšpº–.{í6›' [ 367.835626][T10152] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1823: iget: bad i_size value: 2533274857506816 [ 367.852655][T10152] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1823: iget: bad i_size value: 2533274857506816 [ 367.872921][T10152] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1823: iget: bad i_size value: 2533274857506816 [ 368.043242][T10170] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1825: iget: bad i_size value: 2533274857506816 [ 368.101017][T10162] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1825: iget: bad i_size value: 2533274857506816 [ 368.123493][T10162] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1825: iget: bad i_size value: 2533274857506816 [ 368.184088][T10156] loop2: detected capacity change from 0 to 1024 [ 368.262058][T10172] pimreg: entered allmulticast mode [ 368.346895][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 368.346913][ T28] audit: type=1400 audit(2000000002.140:728): avc: denied { mount } for pid=10174 comm="syz.3.1828" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 368.385242][T10175] loop3: detected capacity change from 0 to 512 [ 368.398157][ T28] audit: type=1400 audit(2000000002.190:729): avc: denied { module_request } for pid=10176 comm="syz.2.1830" kmod=6E65742D70662D31362D70726F746F2D31362D66616D696C792D05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 368.452977][T10175] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.465479][ T28] audit: type=1400 audit(2000000002.270:730): avc: denied { read write } for pid=10174 comm="syz.3.1828" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 368.532408][ T28] audit: type=1400 audit(2000000002.270:731): avc: denied { open } for pid=10174 comm="syz.3.1828" path="/379/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 368.622955][T10187] loop1: detected capacity change from 0 to 512 [ 368.653228][T10187] EXT4-fs: Ignoring removed i_version option [ 368.659289][T10187] EXT4-fs: Ignoring removed bh option [ 368.739085][T10187] ext4 filesystem being mounted at /388/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 368.758267][T10193] ALSA: seq fatal error: cannot create timer (-22) [ 368.804528][T10180] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1829: iget: bad i_size value: 2533274857506816 [ 368.826217][T10180] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1829: iget: bad i_size value: 2533274857506816 [ 368.850875][ T28] audit: type=1400 audit(2000000002.640:732): avc: denied { ioctl } for pid=10194 comm="syz.0.1832" path="socket:[24375]" dev="sockfs" ino=24375 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 368.999816][ T28] audit: type=1400 audit(2000000002.790:733): avc: denied { write } for pid=10196 comm="syz.0.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 369.302511][T10185] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 369.338979][ T28] audit: type=1400 audit(2000000003.130:734): avc: denied { map } for pid=10207 comm="syz.1.1837" path="socket:[24406]" dev="sockfs" ino=24406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 369.390048][ T54] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 369.422204][T10217] loop0: detected capacity change from 0 to 1024 [ 369.439970][T10218] loop2: detected capacity change from 0 to 512 [ 369.442197][ T54] EXT4-fs (loop3): This should not happen!! Data will be lost [ 369.442197][ T54] [ 369.456061][ T54] EXT4-fs (loop3): Total free blocks count 0 [ 369.456998][T10218] EXT4-fs: Ignoring removed i_version option [ 369.462099][ T54] EXT4-fs (loop3): Free/Dirty block details [ 369.591043][T10218] EXT4-fs: Ignoring removed bh option [ 369.713532][T10218] ext4 filesystem being mounted at /350/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 369.739165][T10226] ALSA: seq fatal error: cannot create timer (-22) [ 369.829082][ T54] EXT4-fs (loop3): free_blocks=65280 [ 369.834482][ T54] EXT4-fs (loop3): dirty_blocks=33 [ 369.839652][ T54] EXT4-fs (loop3): Block reservation details [ 369.845688][ T54] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 370.086082][T10236] loop3: detected capacity change from 0 to 512 [ 370.099079][T10236] EXT4-fs: Ignoring removed i_version option [ 370.116878][T10213] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1839: iget: bad i_size value: 2533274857506816 [ 370.129523][T10236] EXT4-fs: Ignoring removed bh option [ 370.137124][T10213] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1839: iget: bad i_size value: 2533274857506816 [ 370.169962][T10236] ext4 filesystem being mounted at /381/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 370.237157][T10239] syzkaller0: entered promiscuous mode [ 370.242789][T10239] syzkaller0: entered allmulticast mode [ 370.250994][T10213] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1839: iget: bad i_size value: 2533274857506816 [ 370.630161][T10246] loop0: detected capacity change from 0 to 512 [ 370.648073][T10250] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 370.653238][T10246] EXT4-fs: Ignoring removed i_version option [ 370.662518][ T28] audit: type=1400 audit(2000000004.440:735): avc: denied { ioctl } for pid=10248 comm="syz.2.1848" path="socket:[24487]" dev="sockfs" ino=24487 ioctlcmd=0x586e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 370.697547][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1848'. [ 370.706532][T10246] EXT4-fs: Ignoring removed bh option [ 370.717828][T10249] vlan2: entered allmulticast mode [ 370.723753][ T28] audit: type=1400 audit(2000000004.440:736): avc: denied { mac_admin } for pid=10248 comm="syz.2.1848" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 370.748878][T10249] dummy0: entered allmulticast mode [ 370.772533][ T28] audit: type=1400 audit(2000000004.490:737): avc: denied { relabelto } for pid=10248 comm="syz.2.1848" name="syz1" dev="cgroup2" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 370.812585][T10246] ext4 filesystem being mounted at /355/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 370.814755][T10236] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1844: iget: bad i_size value: 2533274857506816 [ 370.841821][T10236] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1844: iget: bad i_size value: 2533274857506816 [ 370.855339][T10246] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1847: iget: bad i_size value: 2533274857506816 [ 370.868584][T10246] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1847: iget: bad i_size value: 2533274857506816 [ 370.898329][T10252] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1844: iget: bad i_size value: 2533274857506816 [ 370.940089][T10262] ext4 filesystem being mounted at /366/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 370.959391][T10262] EXT4-fs (loop4): shut down requested (1) [ 371.053600][T10271] ALSA: seq fatal error: cannot create timer (-22) [ 371.164708][T10272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1852'. [ 371.744330][T10288] lo speed is unknown, defaulting to 1000 [ 371.828246][T10293] EXT4-fs: Ignoring removed i_version option [ 371.828351][T10293] EXT4-fs: Ignoring removed bh option [ 371.865743][T10294] EXT4-fs error (device loop0): ext4_find_extent:941: inode #2: comm syz.0.1859: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 371.908317][T10294] EXT4-fs error (device loop0): ext4_find_extent:941: inode #2: comm syz.0.1859: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 371.997587][T10305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1858'. [ 372.117234][T10293] ext4 filesystem being mounted at /399/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 372.572194][T10293] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1863: iget: bad i_size value: 2533274857506816 [ 372.588550][T10293] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1863: iget: bad i_size value: 2533274857506816 [ 372.601542][T10320] set_capacity_and_notify: 3 callbacks suppressed [ 372.601555][T10320] loop0: detected capacity change from 0 to 2048 [ 372.614964][T10293] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1863: iget: bad i_size value: 2533274857506816 [ 372.704515][T10320] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 372.727461][T10320] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 372.740008][T10320] EXT4-fs (loop0): This should not happen!! Data will be lost [ 372.740008][T10320] [ 372.750215][T10320] EXT4-fs (loop0): Total free blocks count 0 [ 372.772841][T10320] EXT4-fs (loop0): Free/Dirty block details [ 372.772859][T10320] EXT4-fs (loop0): free_blocks=2415919104 [ 372.773065][T10320] EXT4-fs (loop0): dirty_blocks=64 [ 372.773076][T10320] EXT4-fs (loop0): Block reservation details [ 372.773085][T10320] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 372.800542][T10334] lo speed is unknown, defaulting to 1000 [ 372.806617][ T2049] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 372.806692][ T2049] EXT4-fs (loop0): This should not happen!! Data will be lost [ 372.806692][ T2049] [ 372.871841][T10335] loop2: detected capacity change from 0 to 2048 [ 373.262472][T10345] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 373.580199][T10354] syzkaller0: entered promiscuous mode [ 373.595593][T10354] syzkaller0: entered allmulticast mode [ 374.061093][T10370] pimreg: entered allmulticast mode [ 374.099679][T10364] loop1: detected capacity change from 0 to 128 [ 374.120076][T10364] FAT-fs (loop1): bogus number of FAT sectors [ 374.143359][T10364] FAT-fs (loop1): Can't find a valid FAT filesystem [ 374.191251][T10373] loop4: detected capacity change from 0 to 512 [ 374.221933][T10373] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1887: inode has both inline data and extents flags [ 374.260014][T10373] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 374.260383][T10373] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1887: couldn't read orphan inode 15 (err -117) [ 374.269743][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 374.269762][ C1] EXT4-fs (loop4): initial error at time 2000000008: ext4_orphan_get:1391: inode 15 [ 374.269802][ C1] EXT4-fs (loop4): last error at time 2000000008: ext4_orphan_get:1391: inode 15 [ 374.308169][T10373] loop4: lost filesystem error report for type 5 error -117 [ 374.317218][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 374.317233][ T28] audit: type=1400 audit(2000000008.110:754): avc: denied { ioctl } for pid=10372 comm="syz.4.1887" path="/375/file0/bus" dev="loop4" ino=18 ioctlcmd=0x6629 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 374.357292][T10373] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 374.363853][T10373] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 374.396388][T10373] vhci_hcd vhci_hcd.0: Device attached [ 374.408702][T10376] vhci_hcd: connection closed [ 374.409247][ T54] vhci_hcd vhci_hcd.4: stop threads [ 374.419307][ T54] vhci_hcd vhci_hcd.4: release socket [ 374.426118][ T54] vhci_hcd vhci_hcd.4: disconnect device [ 374.573406][T10388] loop0: detected capacity change from 0 to 128 [ 374.581202][T10388] vfat: Unknown parameter 'ÿÿÿÿgÔ­¬aÆPpá0å‰úšpº–.{í6›' [ 374.601790][ T28] audit: type=1400 audit(2000000008.390:755): avc: denied { create } for pid=10384 comm="syz.2.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 374.621289][T10389] ieee802154 phy0 wpan0: encryption failed: -22 [ 374.623700][ T28] audit: type=1400 audit(2000000008.410:756): avc: denied { setopt } for pid=10384 comm="syz.2.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 374.674129][ T28] audit: type=1400 audit(2000000008.410:757): avc: denied { write } for pid=10384 comm="syz.2.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 374.711751][ T28] audit: type=1400 audit(2000000008.450:758): avc: denied { write } for pid=10384 comm="syz.2.1889" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 374.827982][T10392] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1891'. [ 374.872441][ T28] audit: type=1400 audit(2000000008.660:759): avc: denied { read write } for pid=3326 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 374.903613][ T28] audit: type=1400 audit(2000000008.660:760): avc: denied { open } for pid=3326 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 374.927994][ T28] audit: type=1400 audit(2000000008.660:761): avc: denied { ioctl } for pid=3326 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 374.954247][ T28] audit: type=1400 audit(2000000008.700:762): avc: denied { open } for pid=10396 comm="syz.2.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 374.973594][ T28] audit: type=1400 audit(2000000008.700:763): avc: denied { perfmon } for pid=10396 comm="syz.2.1893" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 375.045744][T10403] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1895'. [ 375.087890][T10407] lo speed is unknown, defaulting to 1000 [ 375.146752][T10412] loop2: detected capacity change from 0 to 2048 [ 375.194668][T10416] loop3: detected capacity change from 0 to 512 [ 375.214091][T10416] EXT4-fs: Ignoring removed i_version option [ 375.273577][T10416] EXT4-fs: Ignoring removed bh option [ 375.339966][T10416] ext4 filesystem being mounted at /388/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 375.372655][T10418] loop1: detected capacity change from 0 to 512 [ 375.395331][T10418] EXT4-fs: Ignoring removed i_version option [ 375.439846][T10418] EXT4-fs: Ignoring removed bh option [ 375.481551][T10416] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1897: iget: bad i_size value: 2533274857506816 [ 375.542556][T10418] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 375.818471][T10429] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1897: iget: bad i_size value: 2533274857506816 [ 375.869090][T10430] ALSA: seq fatal error: cannot create timer (-22) [ 375.899936][T10410] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1897: iget: bad i_size value: 2533274857506816 [ 376.038805][T10433] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1898: iget: bad i_size value: 2533274857506816 [ 376.137741][T10418] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1898: iget: bad i_size value: 2533274857506816 [ 376.181755][T10418] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1898: iget: bad i_size value: 2533274857506816 [ 376.194542][T10440] loop3: detected capacity change from 0 to 512 [ 376.194885][T10440] EXT4-fs: Ignoring removed i_version option [ 376.194912][T10440] EXT4-fs: Ignoring removed bh option [ 376.234250][T10440] ext4 filesystem being mounted at /390/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 376.273977][T10440] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1904: iget: bad i_size value: 2533274857506816 [ 376.292298][T10440] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1904: iget: bad i_size value: 2533274857506816 [ 376.307007][T10451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1905'. [ 376.329431][T10450] loop0: detected capacity change from 0 to 1024 [ 376.529978][T10455] ------------[ cut here ]------------ [ 376.535676][T10455] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x4000000, 0x0] s64=[0x4000000, 0x0] u32=[0x4000000, 0x0] s32=[0x4000000, 0x0] var_off=(0x0, 0x0) [ 376.553602][T10455] WARNING: kernel/bpf/verifier.c:2769 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.3.1907/10455 [ 376.564692][T10455] Modules linked in: [ 376.568620][T10455] CPU: 0 UID: 0 PID: 10455 Comm: syz.3.1907 Not tainted syzkaller #0 PREEMPT(full) [ 376.578037][T10455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 376.588158][T10455] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 376.594491][T10455] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 376.614144][T10455] RSP: 0018:ffffc9001106f368 EFLAGS: 00010246 [ 376.620233][T10455] RAX: ffff8881035ced78 RBX: 0000000000000000 RCX: 0000000004000000 [ 376.628251][T10455] RDX: ffffffff86812749 RSI: ffffffff867e6cf5 RDI: ffffffff871d3850 [ 376.636344][T10455] RBP: ffff88811b2e7ae0 R08: 0000000000000000 R09: 0000000004000000 [ 376.644372][T10455] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88811b2e7aa0 [ 376.652407][T10455] R13: 0000000000000000 R14: ffff88811b2e7aec R15: ffff88811b2e7ad8 [ 376.660401][T10455] FS: 00007f4b62fef6c0(0000) GS:ffff8882ae8e4000(0000) knlGS:0000000000000000 [ 376.669382][T10455] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.676021][T10455] CR2: 00007f4b6464e9d3 CR3: 0000000124a70000 CR4: 00000000003506f0 [ 376.684047][T10455] Call Trace: [ 376.687367][T10455] [ 376.690357][T10455] reg_set_min_max+0x21c/0x260 [ 376.695215][T10455] check_cond_jmp_op+0x1355/0x1ab0 [ 376.700391][T10455] do_check+0x4a9b/0x9860 [ 376.704784][T10455] do_check_common+0xd0b/0x1630 [ 376.709743][T10455] bpf_check+0x2f6d/0xcc10 [ 376.714222][T10455] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 376.720279][T10455] ? alloc_pages_bulk_noprof+0x4aa/0x530 [ 376.725960][T10455] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 376.731911][T10455] ? css_rstat_updated+0xbb/0x280 [ 376.737010][T10455] ? pcpu_block_update+0x232/0x3b0 [ 376.742142][T10455] ? _find_next_zero_bit+0x29/0xa0 [ 376.747366][T10455] ? pcpu_block_refresh_hint+0x157/0x170 [ 376.753094][T10455] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 376.759216][T10455] ? css_rstat_updated+0xbb/0x280 [ 376.764375][T10455] ? mod_memcg_state+0x182/0x270 [ 376.769332][T10455] ? __rcu_read_unlock+0x4e/0x70 [ 376.774306][T10455] ? avc_has_perm_noaudit+0xab/0x130 [ 376.779666][T10455] ? avc_has_perm+0x101/0x190 [ 376.784385][T10455] ? selinux_bpf_prog_load+0x197/0x1c0 [ 376.789968][T10455] ? security_bpf_prog_load+0x9e/0x140 [ 376.795516][T10455] bpf_prog_load+0xf76/0x1140 [ 376.800228][T10455] ? security_bpf+0x2b/0x90 [ 376.804858][T10455] __sys_bpf+0x505/0x7e0 [ 376.809155][T10455] __x64_sys_bpf+0x41/0x50 [ 376.813695][T10455] x64_sys_call+0x10cb/0x3020 [ 376.818462][T10455] do_syscall_64+0x12c/0x370 [ 376.823108][T10455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.829061][T10455] RIP: 0033:0x7f4b6459c629 [ 376.833508][T10455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.853170][T10455] RSP: 002b:00007f4b62fef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 376.861675][T10455] RAX: ffffffffffffffda RBX: 00007f4b64815fa0 RCX: 00007f4b6459c629 [ 376.869696][T10455] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 376.877777][T10455] RBP: 00007f4b64632b39 R08: 0000000000000000 R09: 0000000000000000 [ 376.885785][T10455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.893885][T10455] R13: 00007f4b64816038 R14: 00007f4b64815fa0 R15: 00007ffe90592af8 [ 376.902001][T10455] [ 376.905070][T10455] ---[ end trace 0000000000000000 ]--- [ 376.913353][ T3317] EXT4-fs unmount: 32 callbacks suppressed [ 376.913367][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.021681][T10457] EXT4-fs: Ignoring removed i_version option [ 377.030410][T10457] EXT4-fs: Ignoring removed bh option [ 377.046035][T10457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.059242][T10457] ext4 filesystem being mounted at /368/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 377.205252][T10469] EXT4-fs: Ignoring removed i_version option [ 377.225171][T10469] EXT4-fs: Ignoring removed bh option [ 377.273624][T10469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.294419][T10469] ext4 filesystem being mounted at /379/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 377.335141][T10469] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1911: iget: bad i_size value: 2533274857506816 [ 377.355078][T10469] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1911: iget: bad i_size value: 2533274857506816 [ 377.360752][T10457] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1909: iget: bad i_size value: 2533274857506816 [ 377.397485][T10457] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1909: iget: bad i_size value: 2533274857506816 [ 377.434018][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.445051][T10457] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1909: iget: bad i_size value: 2533274857506816 [ 377.649703][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.808011][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.872221][T10489] set_capacity_and_notify: 3 callbacks suppressed [ 377.872234][T10489] loop1: detected capacity change from 0 to 1024 [ 377.936276][T10489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.950963][T10493] loop4: detected capacity change from 0 to 512 [ 377.966092][T10493] EXT4-fs: Ignoring removed i_version option [ 377.991531][T10493] EXT4-fs: Ignoring removed bh option [ 378.075636][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.107210][T10493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.178544][T10493] ext4 filesystem being mounted at /382/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 378.197388][T10506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1921'. [ 378.229706][T10501] syzkaller0: entered promiscuous mode [ 378.236069][T10501] syzkaller0: entered allmulticast mode [ 378.243873][T10507] loop0: detected capacity change from 0 to 2048 [ 378.319102][T10505] lo speed is unknown, defaulting to 1000 [ 378.328531][T10493] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1917: iget: bad i_size value: 2533274857506816 [ 378.353446][T10507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.387312][T10507] EXT4-fs error (device loop0): ext4_find_extent:941: inode #2: comm syz.0.1920: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 378.404005][T10507] EXT4-fs error (device loop0): ext4_find_extent:941: inode #2: comm syz.0.1920: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 378.473681][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.554307][T10520] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1917: iget: bad i_size value: 2533274857506816 [ 378.573953][T10486] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1917: iget: bad i_size value: 2533274857506816 [ 378.605640][T10521] ALSA: seq fatal error: cannot create timer (-22) [ 378.746788][T10525] loop1: detected capacity change from 0 to 512 [ 378.763635][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.788193][T10525] EXT4-fs: Ignoring removed i_version option [ 378.803766][T10525] EXT4-fs: Ignoring removed bh option [ 378.838844][T10525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.840015][T10525] ext4 filesystem being mounted at /407/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 379.115010][T10525] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1926: iget: bad i_size value: 2533274857506816 [ 379.192040][T10525] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1926: iget: bad i_size value: 2533274857506816 [ 379.195002][T10525] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1926: iget: bad i_size value: 2533274857506816 [ 379.503967][T10552] syzkaller0: entered promiscuous mode [ 379.510369][T10552] syzkaller0: entered allmulticast mode [ 379.548466][T10555] loop3: detected capacity change from 0 to 512 [ 379.562823][T10555] EXT4-fs: Ignoring removed i_version option [ 379.607814][T10555] EXT4-fs: Ignoring removed bh option [ 379.629713][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.700863][T10555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.716832][T10555] ext4 filesystem being mounted at /397/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 379.717117][T10564] loop2: detected capacity change from 0 to 512 [ 379.778694][T10564] EXT4-fs: Ignoring removed i_version option [ 379.833185][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 379.833198][ T28] audit: type=1400 audit(2000000013.630:855): avc: denied { create } for pid=10566 comm="syz.1.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 379.859153][T10564] EXT4-fs: Ignoring removed bh option [ 379.875763][ T3159] hid (null): unknown global tag 0xc [ 379.891448][ T3159] hid (null): unknown global tag 0xe [ 379.908448][T10567] loop1: detected capacity change from 0 to 1024 [ 379.922501][ T3159] hid (null): report_id 51758 is invalid [ 379.932745][ T3159] hid (null): invalid report_count -1401828858 [ 379.944041][T10567] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 379.956590][ T28] audit: type=1400 audit(2000000013.730:856): avc: denied { mounton } for pid=10566 comm="syz.1.1938" path="/409/file0" dev="tmpfs" ino=2249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 379.983158][ T3159] hid (null): unknown global tag 0xe [ 379.993624][ T3159] hid-generic 0003:0008:FFFFFFFA.0002: reserved main item tag 0xe [ 380.025096][ T3159] hid-generic 0003:0008:FFFFFFFA.0002: unknown main item tag 0x3 [ 380.033332][T10567] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #3: comm syz.1.1938: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0) [ 380.065264][ T3159] hid-generic 0003:0008:FFFFFFFA.0002: unknown global tag 0xc [ 380.082641][T10567] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 380.083983][T10567] EXT4-fs error (device loop1): ext4_quota_enable:7197: comm syz.1.1938: Bad quota inode: 3, type: 0 [ 380.093075][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 380.093094][ C1] EXT4-fs (loop1): initial error at time 2000000013: ext4_ext_check_inode:521: inode 3 [ 380.093122][ C1] EXT4-fs (loop1): last error at time 2000000013: ext4_ext_check_inode:521: inode 3 [ 380.120618][ T3159] hid-generic 0003:0008:FFFFFFFA.0002: item 0 4 1 12 parsing failed [ 380.151074][T10567] loop1: lost filesystem error report for type 5 error -117 [ 380.151235][T10567] EXT4-fs warning (device loop1): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 380.184797][T10567] EXT4-fs (loop1): mount failed [ 380.203543][T10564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.229551][ T3159] hid-generic 0003:0008:FFFFFFFA.0002: probe with driver hid-generic failed with error -22 [ 380.247335][T10564] ext4 filesystem being mounted at /368/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 380.342915][T10564] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1937: iget: bad i_size value: 2533274857506816 [ 380.444372][T10555] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1935: iget: bad i_size value: 2533274857506816 [ 380.639402][T10578] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1935: iget: bad i_size value: 2533274857506816 [ 380.703913][T10564] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1937: iget: bad i_size value: 2533274857506816 [ 380.965891][T10555] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1935: iget: bad i_size value: 2533274857506816 [ 381.044724][T10564] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1937: iget: bad i_size value: 2533274857506816 [ 381.137170][ T28] audit: type=1400 audit(2000000014.930:857): avc: denied { read } for pid=10588 comm="syz.1.1944" path="socket:[25076]" dev="sockfs" ino=25076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 381.416869][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.461491][T10598] loop4: detected capacity change from 0 to 512 [ 381.477023][T10598] EXT4-fs: Ignoring removed i_version option [ 381.477277][T10598] EXT4-fs: Ignoring removed bh option [ 381.534059][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.625371][T10598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.680006][T10609] loop3: detected capacity change from 0 to 512 [ 381.692020][T10609] EXT4-fs: Ignoring removed i_version option [ 381.699357][T10609] EXT4-fs: Ignoring removed bh option [ 381.734235][T10598] ext4 filesystem being mounted at /388/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 381.745222][T10610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1948'. [ 381.869004][T10609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.881881][T10609] ext4 filesystem being mounted at /398/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 381.953173][T10595] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1946: iget: bad i_size value: 2533274857506816 [ 381.982485][T10624] ALSA: seq fatal error: cannot create timer (-22) [ 381.993707][T10595] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.1946: iget: bad i_size value: 2533274857506816 [ 382.074476][T10609] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1947: iget: bad i_size value: 2533274857506816 [ 382.140099][ T28] audit: type=1400 audit(2000000015.930:858): avc: denied { create } for pid=10618 comm="syz.2.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 382.204027][ T28] audit: type=1400 audit(2000000015.960:859): avc: denied { connect } for pid=10618 comm="syz.2.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 382.253098][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.302277][ T28] audit: type=1400 audit(2000000016.090:860): avc: denied { create } for pid=10628 comm="syz.4.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 382.327956][T10629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1953'. [ 382.360693][T10630] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1947: iget: bad i_size value: 2533274857506816 [ 382.398183][T10602] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1947: iget: bad i_size value: 2533274857506816 [ 382.433485][T10627] syzkaller0: entered promiscuous mode [ 382.442371][T10627] syzkaller0: entered allmulticast mode [ 382.806935][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.176360][T10656] loop2: detected capacity change from 0 to 512 [ 383.250195][T10656] EXT4-fs: Ignoring removed i_version option [ 383.314813][T10656] EXT4-fs: Ignoring removed bh option [ 383.386087][T10656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.476683][T10656] ext4 filesystem being mounted at /372/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 383.601375][T10656] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1962: iget: bad i_size value: 2533274857506816 [ 383.652169][T10669] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.1962: iget: bad i_size value: 2533274857506816 [ 384.191380][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.484333][T10678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1966'. [ 384.870655][T10680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1967'. [ 384.965235][T10653] loop3: detected capacity change from 0 to 1024 [ 384.993326][ T28] audit: type=1400 audit(2000000018.790:861): avc: denied { create } for pid=10681 comm="syz.0.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 385.017767][ T3159] Process accounting resumed [ 385.042409][ T28] audit: type=1400 audit(2000000018.810:862): avc: denied { setopt } for pid=10681 comm="syz.0.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 385.359613][T10687] syzkaller0: entered promiscuous mode [ 385.382733][T10687] syzkaller0: entered allmulticast mode [ 385.451183][T10698] lo speed is unknown, defaulting to 1000 [ 385.602903][T10699] loop2: detected capacity change from 0 to 2048 [ 385.705128][T10704] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1974'. [ 385.864164][T10699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.089073][T10709] loop1: detected capacity change from 0 to 128 [ 386.119592][ T28] audit: type=1400 audit(2000000019.910:863): avc: denied { mount } for pid=10708 comm="syz.1.1975" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 386.132482][T10709] bio_check_eod: 33 callbacks suppressed [ 386.132519][T10709] syz.1.1975: attempt to access beyond end of device [ 386.132519][T10709] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 386.189511][T10709] syz.1.1975: attempt to access beyond end of device [ 386.189511][T10709] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 386.245053][T10709] buffer_io_error: 19 callbacks suppressed [ 386.245067][T10709] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 386.288731][T10711] loop3: detected capacity change from 0 to 512 [ 386.296309][T10709] syz.1.1975: attempt to access beyond end of device [ 386.296309][T10709] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 386.319315][T10711] EXT4-fs: Ignoring removed i_version option [ 386.332425][T10711] EXT4-fs: Ignoring removed bh option [ 386.345292][T10709] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 386.360095][T10711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.379828][T10709] syz.1.1975: attempt to access beyond end of device [ 386.379828][T10709] loop1: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 386.403437][T10709] syz.1.1975: attempt to access beyond end of device [ 386.403437][T10709] loop1: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 386.417831][T10711] ext4 filesystem being mounted at /400/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 386.450711][ T28] audit: type=1400 audit(2000000020.240:864): avc: denied { write } for pid=10715 comm="syz.0.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 386.485582][T10709] Buffer I/O error on dev loop1, logical block 83, lost async page write [ 386.544081][T10709] syz.1.1975: attempt to access beyond end of device [ 386.544081][T10709] loop1: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 386.586691][T10709] Buffer I/O error on dev loop1, logical block 84, lost async page write [ 386.607287][T10709] syz.1.1975: attempt to access beyond end of device [ 386.607287][T10709] loop1: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 386.687353][T10709] syz.1.1975: attempt to access beyond end of device [ 386.687353][T10709] loop1: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 387.075983][ T3321] ================================================================== [ 387.084147][ T3321] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 387.092072][ T3321] [ 387.094408][ T3321] read-write to 0xffff88811cadbf50 of 8 bytes by task 10724 on cpu 0: [ 387.102570][ T3321] shmem_add_to_page_cache+0x4b2/0x5b0 [ 387.108062][ T3321] shmem_get_folio_gfp+0x4f3/0xd60 [ 387.113211][ T3321] shmem_write_begin+0xfc/0x1f0 [ 387.118100][ T3321] generic_perform_write+0x183/0x490 [ 387.123407][ T3321] shmem_file_write_iter+0xc5/0xf0 [ 387.128545][ T3321] __kernel_write_iter+0x319/0x590 [ 387.133682][ T3321] dump_user_range+0xa7d/0xdb0 [ 387.138462][ T3321] elf_core_dump+0x21a2/0x2330 [ 387.143254][ T3321] coredump_write+0xacf/0xdf0 [ 387.147948][ T3321] vfs_coredump+0x26c7/0x3130 [ 387.152641][ T3321] get_signal+0xd80/0xf60 [ 387.157006][ T3321] arch_do_signal_or_restart+0x96/0x450 [ 387.162574][ T3321] irqentry_exit+0xf7/0x520 [ 387.167110][ T3321] asm_exc_page_fault+0x26/0x30 [ 387.171975][ T3321] [ 387.174316][ T3321] read to 0xffff88811cadbf50 of 8 bytes by task 3321 on cpu 1: [ 387.181862][ T3321] shmem_getattr+0x68/0x200 [ 387.186386][ T3321] vfs_getattr_nosec+0x146/0x1e0 [ 387.191373][ T3321] vfs_getattr+0x48/0x60 [ 387.195626][ T3321] vfs_statx_path+0x28/0x140 [ 387.200244][ T3321] vfs_statx+0xc4/0x170 [ 387.204416][ T3321] vfs_fstatat+0x118/0x170 [ 387.208848][ T3321] __se_sys_newfstatat+0x55/0x3e0 [ 387.213895][ T3321] __x64_sys_newfstatat+0x55/0x70 [ 387.218940][ T3321] x64_sys_call+0x2c64/0x3020 [ 387.223657][ T3321] do_syscall_64+0x12c/0x370 [ 387.228287][ T3321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.234205][ T3321] [ 387.236545][ T3321] value changed: 0x0000000000001a1a -> 0x0000000000001a1c [ 387.243660][ T3321] [ 387.246005][ T3321] Reported by Kernel Concurrency Sanitizer on: [ 387.252168][ T3321] CPU: 1 UID: 0 PID: 3321 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 387.263236][ T3321] Tainted: [W]=WARN [ 387.267056][ T3321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 387.277134][ T3321] ================================================================== [ 387.318200][T10709] Buffer I/O error on dev loop1, logical block 95, lost async page write [ 387.350421][T10709] syz.1.1975: attempt to access beyond end of device [ 387.350421][T10709] loop1: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 387.411458][T10709] Buffer I/O error on dev loop1, logical block 96, lost async page write [ 387.455396][T10728] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1976: iget: bad i_size value: 2533274857506816 [ 387.575638][ T28] audit: type=1400 audit(2000000021.370:865): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 387.655293][T10730] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1980'. [ 387.722089][T10711] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1976: iget: bad i_size value: 2533274857506816 [ 387.763741][T10711] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1976: iget: bad i_size value: 2533274857506816 [ 387.984869][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.253319][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.