last executing test programs: 7.864870141s ago: executing program 2 (id=2050): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet6(0xa, 0x802, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, 0x0, &(0x7f0000000300)) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000040)=0x5) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000100)=0xde89) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet6(r5, &(0x7f0000001840), 0x3b, 0xc00) 6.750037526s ago: executing program 2 (id=2055): r0 = syz_open_dev$sg(0x0, 0x0, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) unshare(0x44040200) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) writev(r0, &(0x7f0000000300)=[{0x0}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 6.196353403s ago: executing program 1 (id=2061): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x3}, {0xa, 0x4e23, 0x7, @mcast2, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4000000000003, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000780)=[{0x10, 0x0, [0x81, 0x0, 0x6, 0xffffffff, 0x8, 0x3, 0x2, 0x3, 0x9, 0xf9d4, 0x10, 0x2, 0x6, 0x1, 0xccc, 0x1000]}, {0x6, 0x0, [0x2, 0x100, 0x767, 0x4, 0x0, 0x5, 0x9, 0x9, 0x0, 0x80000001, 0xaa3, 0x9, 0x5, 0x7fffffff, 0x6, 0x46f]}, {0x4, 0x0, [0xe, 0x8, 0x7, 0x7, 0x0, 0xaac9, 0x678, 0x72, 0x4, 0x200, 0x3, 0x6, 0x0, 0x5, 0x2, 0x6]}, {0x42, 0x0, [0xfffffff8, 0xc, 0x4f4, 0x6fd5414b, 0x0, 0xfff, 0x6, 0x6, 0xe, 0x4, 0xfffffff7, 0x0, 0xff, 0x63c, 0x1, 0xfffffffe]}, {0x1b, 0x0, [0x1, 0x6, 0x4002, 0x7f6, 0x0, 0x81, 0x4, 0x4, 0x3, 0xfffff8b3, 0xad1, 0x2, 0x755b, 0x7, 0xf00, 0x2]}, {0x6, 0x0, [0x3788, 0x6, 0xfffffff7, 0x6, 0xffff, 0x40, 0x800, 0xba, 0x3, 0x2, 0xd7e, 0xf, 0x5, 0x3, 0x0, 0x3]}, {0x28, 0x0, [0x7, 0x6, 0x4, 0x3, 0x200, 0x1, 0xfffffffb, 0xf0000000, 0x7, 0xb301, 0x4, 0x8, 0x8000, 0xff, 0x1, 0x4]}], 0xffffffffffffffff, 0x1, 0x1, 0x1f8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) shutdown(r0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e21, 0x800, @mcast2, 0x7}}, 0x0, 0x0, 0xfffffffd, 0x0, 0xce024d, 0x0, 0x4}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e20, 0x1, @empty, 0x6}}, 0x3, 0x3, 0x7fff, 0x81, 0x0, 0x85e, 0xf}, &(0x7f0000000b00)=0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4004084) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x401f, 0x44108, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x4, 0xfffffffffffffffc}, 0xc0e9, 0x0, 0x0, 0x3, 0x7, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffef, 0xffffffffffffffff, 0x1) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0x4, 0x0, 0x4}, 0x1c) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 4.822801237s ago: executing program 4 (id=2063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001"], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x20, 0x1, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x69}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x5800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x48501) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000003c0)={r3, 0x1000, {0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061a74df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce6, 0xa]}}) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x1000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000280), &(0x7f0000000140)=r4}, 0x22) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) ioctl$NILFS_IOCTL_SYNC(r2, 0x80086e8a, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) fcntl$notify(r1, 0x402, 0x41) fcntl$notify(0xffffffffffffffff, 0x402, 0x40000029) 4.813227907s ago: executing program 0 (id=2074): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r6, 0x2) 4.812543837s ago: executing program 1 (id=2064): setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @broadcast}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) fsopen(0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x2000, 0x8902}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r5, 0x11000, 0x10080}}}}}}]}, 0x48}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) 4.812002297s ago: executing program 3 (id=2065): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0x1, 0x0, 0x0, 0x1}]}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x105006, &(0x7f00000002c0)={[{@quota}, {@lazytime}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@max_batch_time={'max_batch_time', 0x3d, 0x858c}}, {@acl}, {@debug}]}, 0x3, 0x43e, &(0x7f0000000d80)="$eJzs3MtvG0UYAPBv10lKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZvYjp3m4cQB/37SJjPesWc+z449u5NNAD1rOPuRROyLiN8jYrCWbSwwXPt1e/Hq1N+LV6eSqFTe+iuplru1eHWqKFo8b2+eGUkj0s+SONKi3rnLV85Plsszl/L82PyF98fmLl959tyFybMzZ2cuTpw6dfLE+AvPTzzXkTizNt06/NHs0UOvvXP9janT19/9+dukiL8pjg4ZXm3nE5VKh6vrrv116aSviw1hXUoRkXVXf3X8D0YpljtvMF79tKuNA7ZUpVKp7G2/e6EC/I8l0e0WAN1RfNFn57/Ftk1Tjx3h5ku1E6As7tv5VtvTF2lepr/p/Lb5EslmDEfE6YV/vsq22JrrEAAADb7P5j/PtJr/pXF/Xbm787WhoYi4JyIORMS9EXEwIu6LqJZ9ICIeXGf9zYskK+c/6Y0NBbZG2fzvxXxtq3H+V8z+YqiU5/ZX4+9PzpwrzxzP35OR6N+V5cdXqeOHV377ot2++vlftmX1F3PBvB03+nY1Pmd6cn5yMzHXu/lJxOG+VvEnSysB2WT3UEQc3mAd55765mi7fXeOfxUdWGeqfB3xZK3/F6Ip/kKy+vrk2F1Rnjk+VhwVK/3y67U329W/qfg7IOv/PS2P/6X4h5L69dq59ddx7Y/PW5zTDCylNnL8DyRvN7zKh5Pz85fGIwaS12uNrn98Yvm5Rb4on8U/cqz1+D8Qy+/EkYjIDuKHIuLhiHgk77tHI+KxiDi2Svw/vfz4e+327YT+n15X/y8nBqL5kdaJ0vkfv2uodGg98Wf9f7KaGskfWcvn31ratbGjGQAAAP570ojYF0k6upRO09HR2t/LH4w9aXl2bv7pM7MfXJyu3SMwFP1pcaVrsO566Hh+Wl/kJ5ryJ/Lrxl+Wdlfzo1Oz5eluBw89bm+b8Z/5s9Tt1gFbzv1a0LuMf+hdxj/0LuMfeleL8b+7G+0Atl+r7/+Pu9AOYPs1jX/LftBDnP9D7zL+oXcZ/9CT5nbHnW+Sl5BYkYh0RzRDopYo/l1Rx16wyx9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHfJvAAAA//9Fd+ND") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1d8}}, 0x4000814) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc, 0x2}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x802) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc050) 3.926133446s ago: executing program 0 (id=2069): r0 = io_uring_setup(0x664b, &(0x7f0000000500)) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b00000001a007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d525146add31b7bc77c26d8982be29d889d1e35355848794ca3f8b38aef1e114ab9fbebe9c6609e64b1e5a3b0c81c6f8144e74fe12780ca46c1a6c04ad73c9d44b605f90000000000", 0x9a}, {&(0x7f00000001c0)="68cabf2dfb58fc0af787a8ffff0200258f00", 0x12}], 0x2}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c2ec, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r3 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f00000003c0)=[@ioring_restriction_sqe_op, @ioring_restriction_sqe_flags_required={0x3, 0x19}], 0x2) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) io_uring_enter(r3, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000004480)=[{&(0x7f00000041c0)="a51fed5f71", 0x5}], 0x1}, 0x4004000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) close_range(r0, 0xffffffffffffffff, 0x0) 3.904457076s ago: executing program 1 (id=2070): r0 = socket$unix(0x1, 0x1, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_emit_ethernet(0x5a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaa6727c0d22d6e7a74b56a31aaaaaaaaaaaaaaaaaa0008004e00004c00000000000690780a2110000000000000000701ffffffffffffaa7eac1414aa000080010710090000308d2bb7"], 0x0) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000500)={'vxcan0\x00', 0x0}) sendmmsg$sock(r4, &(0x7f00000004c0)=[{{&(0x7f0000000680)=@can={0x1d, r5}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x18, 0x1, 0x3d, 0x1000000000003}}], 0x18}}], 0x1, 0x8840) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000240)=0x80, 0x4) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000000)={0xa0028010}) 3.835540279s ago: executing program 4 (id=2071): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x18, 0x901, 0x70bd2c, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8048, 0x40008, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x22020400) poll(0x0, 0x0, 0x9) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000100)=0xd0e, 0x4) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.764085212s ago: executing program 1 (id=2072): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x18, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000180), 0xc}, 0x0, 0x7fff, 0x800000, 0x6, 0x3ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0xfe33) syz_emit_ethernet(0xaf, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setscheduler(r0, 0x5, 0x0) poll(0x0, 0x0, 0xa) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20008020) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0xc2, @private1, 0x6}], 0x1c) chmod(&(0x7f0000000000)='./file0\x00', 0x40) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1a1081, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.763635683s ago: executing program 2 (id=2073): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x1100e8, 0x5, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff, 0x400, 0x7fc, &(0x7f0000000840)="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", 0x54, 0xe, 0x5, 0xf4, 0x1, 0x0, 0x2b69e42f, 'syz1\x00'}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) ioctl$PIO_UNISCRNMAP(r0, 0x4b52, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, 0x0, 0x93020007) r2 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00') write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000001900)={0x7, 0x7f, 0x1}, 0x7) lseek(r3, 0x2004, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) io_uring_enter(r4, 0x2219, 0xdf58, 0x54, 0x0, 0x0) 2.763366983s ago: executing program 3 (id=2075): socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$mouse(&(0x7f0000000080), 0x6, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) r1 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x3800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) r3 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x74}]}) getpriority(0x1, r3) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x2, 0x2, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000140)='\x00u', 0x2, 0x24008084, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) shutdown(r2, 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r4, 0xda8d) accept4$inet(r4, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2.762922352s ago: executing program 0 (id=2076): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x13, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) uname(0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1_to_bridge\x00'}) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}}, 0x2c000010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000380)={@multicast2, 0x1, 0x0, 0x60, 0x0, [{@broadcast}, {@dev}, {@empty}, {@local}, {}, {@dev}]}}) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x401, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}]}, 0x38}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x48090) 2.762276743s ago: executing program 4 (id=2077): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESHEX=0x0], 0xfe33) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, 0x0, 0x0) listen(r2, 0x8) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000600)=ANY=[@ANYBLOB="757466383d312c696f636861727365743d6d6163677265656b2c756e695f786c6174653d302c696f636861727365743d7574c6382c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c636865636b2e72656c617865642c73686f72746e616d653d6c6f7765722c757466383d302c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c73686f72746e616d653d77696e6e762c00"], 0x0, 0x362, &(0x7f0000000280)="$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") open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r3, 0x0, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdc01, {0x7, 0x0, 0x0, r5, 0x80, 0x6e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008840}, 0x4040000) syz_emit_ethernet(0x11dc0, 0x0, 0x0) shutdown(r1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x89, 0x1, '\x00', [@generic={0x7}, @jumbo={0xc2, 0x4, 0x20000007}]}]}}}}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffdffb) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) 2.587147638s ago: executing program 2 (id=2078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001"], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x20, 0x1, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x69}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x5800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x48501) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000003c0)={r3, 0x1000, {0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061a74df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce6, 0xa]}}) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x1000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000280), &(0x7f0000000140)=r4}, 0x22) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) ioctl$NILFS_IOCTL_SYNC(r2, 0x80086e8a, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) fcntl$notify(r1, 0x402, 0x41) fcntl$notify(0xffffffffffffffff, 0x402, 0x40000029) 2.586793398s ago: executing program 4 (id=2079): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x9c}}, 0x0}, 0x94) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={r3, 0x800}, &(0x7f00000001c0)=0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) socket$kcm(0x29, 0x2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2000000000000268, &(0x7f00000001c0)=[{0x6, 0x5c, 0x0, 0x7fff0000}, {0x6, 0x2, 0x77, 0x959a}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840), 0x1, 0x782, &(0x7f0000000880)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 2.586055218s ago: executing program 0 (id=2088): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8048, 0x40008, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x22020400) poll(0x0, 0x0, 0x9) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000100)=0xd0e, 0x4) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.516780282s ago: executing program 1 (id=2080): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = socket(0x1e, 0x4, 0x0) io_uring_setup(0x6c2, &(0x7f0000000140)={0x0, 0xea06, 0x20, 0x0, 0x274}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r1, 0x0, 0x0, 0x9200000000000000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x28) socket$inet6_udp(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) fsopen(&(0x7f00000003c0)='sysfs\x00', 0x1) socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_bp={0x0, 0x8}, 0x90, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x2, 0xa, 0x2) openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)={r3, 0x9}, &(0x7f00000001c0)=0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r4, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r4, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x15, 0xa, 0x0, 0x0, 0x4}, 0x94) 1.509351232s ago: executing program 3 (id=2081): syz_emit_ethernet(0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a"], 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x2b, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f00000002c0)=[{0x30, 0x1, 0x0, 0xfffff01c}, {0x6, 0x2, 0x0, 0x5}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000000206010800000000000000000a00000014000780080011400000000005001500e9ffffff0500010006000000050005000a00000005000400010000000900020073797a320000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f00000002c0)={{0x8001000000000000, 0x5}, {0x0, 0xae7}, 0xfffffe29, 0x6}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x0, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000300)={r3, 0x1, 0x6, @remote}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000700142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260600000fff07906706000011000000170300000ee60060bf050000000000001d360000000000006507f9ff01000000a70700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000023000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733a9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819cf5c8ac86d8a297dff0445a13d00dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d7039dd21be3f3767ce603c9d48cac052ca363f601ae899a53f67b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424b92e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef5d5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b67845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bfeffe6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a84e3d6bd82526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 1.474914963s ago: executing program 0 (id=2082): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8048, 0x40008, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x22020400) poll(0x0, 0x0, 0x9) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000100)=0xd0e, 0x4) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.381751776s ago: executing program 1 (id=2083): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = creat(&(0x7f0000000140)='./file2\x00', 0x99) fallocate(r0, 0x0, 0xbf5, 0x2000402) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0x10, 0x5}, {0xc, 0x3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c090}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x90404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1000002}, 0x1101, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setresuid(0xee01, 0x0, 0x0) getegid() write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x4e, 0x2, {0x3, 0x6, 0x80}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x4c840) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0x3, 0x4) close(0x3) 1.381239976s ago: executing program 3 (id=2084): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r6, 0x2) 657.152379ms ago: executing program 2 (id=2085): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x3}, {0xa, 0x4e23, 0x7, @mcast2, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4000000000003, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000780)=[{0x10, 0x0, [0x81, 0x0, 0x6, 0xffffffff, 0x8, 0x3, 0x2, 0x3, 0x9, 0xf9d4, 0x10, 0x2, 0x6, 0x1, 0xccc, 0x1000]}, {0x6, 0x0, [0x2, 0x100, 0x767, 0x4, 0x0, 0x5, 0x9, 0x9, 0x0, 0x80000001, 0xaa3, 0x9, 0x5, 0x7fffffff, 0x6, 0x46f]}, {0x4, 0x0, [0xe, 0x8, 0x7, 0x7, 0x0, 0xaac9, 0x678, 0x72, 0x4, 0x200, 0x3, 0x6, 0x0, 0x5, 0x2, 0x6]}, {0x42, 0x0, [0xfffffff8, 0xc, 0x4f4, 0x6fd5414b, 0x0, 0xfff, 0x6, 0x6, 0xe, 0x4, 0xfffffff7, 0x0, 0xff, 0x63c, 0x1, 0xfffffffe]}, {0x1b, 0x0, [0x1, 0x6, 0x4002, 0x7f6, 0x0, 0x81, 0x4, 0x4, 0x3, 0xfffff8b3, 0xad1, 0x2, 0x755b, 0x7, 0xf00, 0x2]}, {0x6, 0x0, [0x3788, 0x6, 0xfffffff7, 0x6, 0xffff, 0x40, 0x800, 0xba, 0x3, 0x2, 0xd7e, 0xf, 0x5, 0x3, 0x0, 0x3]}, {0x28, 0x0, [0x7, 0x6, 0x4, 0x3, 0x200, 0x1, 0xfffffffb, 0xf0000000, 0x7, 0xb301, 0x4, 0x8, 0x8000, 0xff, 0x1, 0x4]}], 0xffffffffffffffff, 0x1, 0x1, 0x1f8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) shutdown(r0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e21, 0x800, @mcast2, 0x7}}, 0x0, 0x0, 0xfffffffd, 0x0, 0xce024d, 0x0, 0x4}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e20, 0x1, @empty, 0x6}}, 0x3, 0x3, 0x7fff, 0x81, 0x0, 0x85e, 0xf}, &(0x7f0000000b00)=0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4004084) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x401f, 0x44108, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x4, 0xfffffffffffffffc}, 0xc0e9, 0x0, 0x0, 0x3, 0x7, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffef, 0xffffffffffffffff, 0x1) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0x4, 0x0, 0x4}, 0x1c) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 653.478069ms ago: executing program 4 (id=2086): msgget(0x2, 0x601) r0 = msgget(0x0, 0x358) msgctl$IPC_RMID(r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYBLOB="010000000000000000000c000000280005801400f4800400020000000000080001000000000008"], 0x3c}}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x20000023893) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0xa, 0x3, 0x3a) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000001000)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="10000000000000000100000000000000"], 0x10, 0x8000}}], 0x1, 0x0) msgget(0x0, 0x200) msgctl$IPC_RMID(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 151.407045ms ago: executing program 3 (id=2087): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20000e, &(0x7f0000000c80)={[{@i_version}, {@nogrpid}, {@quota}]}, 0x1, 0x509, &(0x7f0000000cc0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000200)=@rnullb, 0x0, &(0x7f0000000540)={0x4, 0x10000000000000, 0x3, 0x8, 0x5, 0x6, 0x20000001000, 0xf64, 0xfffffffd}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x8, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x8001, 0x4, 0x80000001, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x800, 0x9, 0x9, 0x9, 0xf5, 0x8, 0x6, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x5, 0x6, 0x2000ff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x7, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x4000, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x8, 0xa000000, 0x3, 0x5, 0x8, 0x3, 0x4, 0x402, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x4251, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x401, 0xfff, 0x8, 0xf, 0x0, 0x6, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0x800, 0x8, 0x7, 0x6d5f, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x2, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x0, 0x2e9, 0x8, 0x3ff, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x9, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0x4, 0x8, 0x8, 0x5597, 0x3, 0x804, 0x7fff, 0x62, 0xfffeffff, 0x5, 0x0, 0x7fffffff, 0x3, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeaf, 0x3, 0x5, 0x9, 0xfc, 0xc000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x10001, 0x5, 0x9, 0x3, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x6, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0x36, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0xc010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) rmdir(0x0) r4 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r4, 0x0, 0x0, 0x8450) r5 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/uevent_seqnum', 0x1eb080, 0x88) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x800, {0x0, 0x0, 0x0, 0x1, 0x8002, 0x0, 0x0, 0x20, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0x6, 0xa]}}) 82.251247ms ago: executing program 2 (id=2089): mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x90a3b4a3e4f91378) syz_usb_disconnect(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x4008, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x2b, 0x1, 0x1) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000001280)=0x10) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000000)='cpu\t&0&&\t') r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@multicast, @multicast, @val={@val={0x88a8, 0x1, 0x1, 0x3}, {0x8100, 0x0, 0x0, 0x3}}, {@x25={0x805, {0x0, 0x3, 0xfb, "d05dbab632"}}}}, 0x0) 0s ago: executing program 0 (id=2090): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x1100e8, 0x5, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff, 0x400, 0x7fc, &(0x7f0000000840)="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", 0x54, 0xe, 0x5, 0xf4, 0x1, 0x0, 0x2b69e42f, 'syz1\x00'}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) ioctl$PIO_UNISCRNMAP(r0, 0x4b52, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, 0x0, 0x93020007) r2 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00') write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000001900)={0x7, 0x7f, 0x1}, 0x7) lseek(r3, 0x2004, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) io_uring_enter(r4, 0x2219, 0xdf58, 0x54, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 445.592074][ T9408] total_inactive_file 0 [ 445.597995][ T9408] total_active_file 0 [ 445.653662][ T9408] total_unevictable 0 [ 445.665561][ T9427] loop4: detected capacity change from 0 to 512 [ 445.672469][ T9408] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1684,pid=9408,uid=0 [ 445.687172][ T9408] Memory cgroup out of memory: Killed process 9408 (syz.1.1684) total-vm:96348kB, anon-rss:1240kB, file-rss:22204kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 445.705700][ T9427] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 445.830672][ T9427] EXT4-fs (loop4): 1 truncate cleaned up [ 445.849438][ T28] audit: type=1400 audit(2000000165.740:893): avc: denied { getattr } for pid=9434 comm="syz.1.1690" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=26120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 445.875676][ T9427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.027678][ T3615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.252573][ T9440] loop1: detected capacity change from 0 to 512 [ 446.259936][ T9440] EXT4-fs: Ignoring removed i_version option [ 446.687910][ T9447] loop4: detected capacity change from 0 to 256 [ 446.739680][ T3433] net_ratelimit: 12 callbacks suppressed [ 446.739699][ T3433] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 446.885809][ T9447] FAT-fs (loop4): codepage cp860 not found [ 447.085673][ T3451] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 447.097791][ T28] audit: type=1400 audit(2000000166.990:894): avc: denied { bind } for pid=9448 comm="syz.0.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 447.873587][ T28] audit: type=1400 audit(2000000167.760:895): avc: denied { listen } for pid=9448 comm="syz.0.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 448.072075][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.082232][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 448.105125][ T9440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.250371][ T9467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1699'. [ 448.264281][ T9440] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.376801][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 448.416180][ T28] audit: type=1400 audit(2000000168.310:896): avc: denied { write } for pid=9437 comm="syz.1.1691" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 448.543581][ T3433] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 448.653582][ T53] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 448.763580][ T3433] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 448.843695][ T3433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.852099][ T3433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.121495][ T9440] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 449.196228][ T28] audit: type=1400 audit(2000000169.080:897): avc: denied { cpu } for pid=9470 comm="syz.4.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 449.287834][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.387980][ T9482] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1705'. [ 449.400167][ T9484] loop1: detected capacity change from 0 to 512 [ 449.500186][ T9484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.513509][ T9484] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.526018][ T9484] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1704: iget: bad i_size value: 2533274857506816 [ 449.552895][ T9484] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1704: iget: bad i_size value: 2533274857506816 [ 449.571702][ T28] audit: type=1400 audit(2000000169.470:898): avc: denied { read } for pid=9491 comm="syz.4.1707" name="file0" dev="tmpfs" ino=1902 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 449.600717][ T9497] bond0: (slave bridge_slave_0): Error: Device is in use and cannot be enslaved [ 449.615415][ T9486] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1706'. [ 449.627843][ T9501] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1704: iget: bad i_size value: 2533274857506816 [ 449.641910][ T9486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1706'. [ 449.652561][ T28] audit: type=1400 audit(2000000169.470:899): avc: denied { open } for pid=9491 comm="syz.4.1707" path="/326/file0" dev="tmpfs" ino=1902 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 449.698938][ T9484] netlink: 6760 bytes leftover after parsing attributes in process `syz.1.1704'. [ 449.727095][ T9484] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1704: iget: bad i_size value: 2533274857506816 [ 449.869746][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.892205][ T9504] loop1: detected capacity change from 0 to 512 [ 449.906121][ T9504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.918984][ T9504] ext4 filesystem being mounted at /314/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 450.078151][ T9509] futex_wake_op: syz.3.1711 tries to shift op by 144; fix this program [ 450.116430][ T9509] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1711'. [ 450.155194][ T28] audit: type=1400 audit(2000000170.030:900): avc: denied { write } for pid=9503 comm="syz.1.1709" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 450.164947][ T9504] EXT4-fs error (device loop1): ext4_get_first_dir_block:3545: inode #12: block 32: comm syz.1.1709: bad entry in directory: inode out of bounds - offset=0, inode=67108867, rec_len=2048, size=2048 fake=0 [ 450.177549][ T28] audit: type=1400 audit(2000000170.050:901): avc: denied { write } for pid=9503 comm="syz.1.1709" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 450.199053][ T9504] EXT4-fs error (device loop1): ext4_get_first_dir_block:3548: inode #12: comm syz.1.1709: directory missing '.' [ 450.221033][ T28] audit: type=1400 audit(2000000170.050:902): avc: denied { write } for pid=9503 comm="syz.1.1709" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 450.342465][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.411983][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1713'. [ 450.436553][ T9516] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.445952][ T9516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.472992][ T9520] loop2: detected capacity change from 0 to 512 [ 450.490380][ T9516] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 450.502756][ T9516] veth1_vlan: left promiscuous mode [ 450.508510][ T9516] veth0_vlan: left promiscuous mode [ 450.514061][ T9516] veth0_vlan: entered promiscuous mode [ 450.521914][ T9516] veth1_vlan: entered promiscuous mode [ 450.534077][ T9516] veth1_macvtap: left promiscuous mode [ 450.540095][ T9516] veth0_macvtap: left promiscuous mode [ 450.546021][ T9516] veth0_macvtap: entered promiscuous mode [ 450.552476][ T9516] veth1_macvtap: entered promiscuous mode [ 450.560574][ T9516] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 450.568787][ T9516] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 450.577386][ T9516] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 450.585605][ T9516] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 450.594450][ T9516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 450.604164][ T9516] 8021q: adding VLAN 0 to HW filter on device bond2 [ 450.612411][ T9516] 8021q: adding VLAN 0 to HW filter on device bond3 [ 450.641051][ T9526] loop1: detected capacity change from 0 to 128 [ 450.656273][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1723'. [ 450.666077][ T9525] loop3: detected capacity change from 0 to 512 [ 450.686405][ T9525] EXT4-fs: Ignoring removed mblk_io_submit option [ 450.788099][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.828478][ T9525] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 450.847317][ T9520] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 450.856507][ T9520] EXT4-fs (loop2): 1 truncate cleaned up [ 450.863208][ T9520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.073388][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.135681][ T9525] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 451.229845][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.252385][ T9525] EXT4-fs (loop3): orphan cleanup on readonly fs [ 451.257123][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 451.257156][ T28] audit: type=1400 audit(2000000170.660:904): avc: denied { accept } for pid=9514 comm="syz.0.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 451.275973][ T9525] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1714: Invalid block bitmap block 0 in block_group 0 [ 451.325573][ T9525] loop3: lost filesystem error report for type 5 error -117 [ 451.330959][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.343585][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 451.353534][ C0] EXT4-fs (loop3): last error at time 2000000171: ext4_read_block_bitmap_nowait:483 [ 451.365735][ T3451] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 451.374127][ T9525] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1714: Invalid block bitmap block 0 in block_group 0 [ 451.387259][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.387766][ T9525] loop3: lost filesystem error report for type 5 error -117 [ 451.401448][ T9525] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1714: Invalid block bitmap block 0 in block_group 0 [ 451.424246][ T9525] loop3: lost filesystem error report for type 5 error -117 [ 451.436426][ T9525] Quota error (device loop3): write_blk: dquota write failed [ 451.485132][ T9525] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 451.498839][ T9540] loop4: detected capacity change from 0 to 4096 [ 451.520705][ T9544] xt_hashlimit: size too large, truncated to 1048576 [ 451.527866][ T9525] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1714: Failed to acquire dquot type 1 [ 451.527953][ T9525] loop3: lost filesystem error report for type 5 error -28 [ 451.528360][ T9525] EXT4-fs (loop3): 1 orphan inode deleted [ 451.557237][ T4258] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 451.575782][ T4258] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 1 [ 451.609661][ T9540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.624682][ T4258] loop3: lost filesystem error report for type 5 error -117 [ 451.639327][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1716'. [ 451.679319][ T9548] loop1: detected capacity change from 0 to 164 [ 451.723646][ T9548] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 451.733338][ T9525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 451.772696][ T9548] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 451.863432][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.873113][ T8386] net_ratelimit: 54 callbacks suppressed [ 451.873127][ T8386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.889956][ T9544] SELinux: syz.0.1718 (9544) wrote to checkreqprot. This is no longer supported. [ 451.898794][ T3433] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 451.937528][ T9559] futex_wake_op: syz.0.1722 tries to shift op by 144; fix this program [ 451.954467][ T8386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.007849][ T9559] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1722'. [ 452.024376][ T3433] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 452.030054][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.071442][ T3433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.622803][ T827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.637983][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 452.677694][ T4258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.689135][ T4258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.236881][ T3615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.569782][ T9616] loop4: detected capacity change from 0 to 512 [ 453.614202][ T9616] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 453.710549][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1729'. [ 453.832493][ T9616] EXT4-fs (loop4): 1 truncate cleaned up [ 453.841095][ T9616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.152359][ T9627] hsr_slave_1 (unregistering): left promiscuous mode [ 454.311373][ T3615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.500491][ T9667] loop4: detected capacity change from 0 to 128 [ 455.263669][ T28] audit: type=1400 audit(2000000175.140:905): avc: denied { write } for pid=9666 comm="syz.3.1731" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 455.266804][ T9668] random: crng reseeded on system resumption [ 455.459241][ T9714] loop4: detected capacity change from 0 to 512 [ 455.466294][ T9714] EXT4-fs: Ignoring removed mblk_io_submit option [ 455.554787][ T9714] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 455.643625][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 455.660477][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1733'. [ 455.670708][ T9714] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 455.679231][ T9714] EXT4-fs (loop4): orphan cleanup on readonly fs [ 455.686549][ T9714] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1734: Invalid block bitmap block 0 in block_group 0 [ 455.713472][ T9714] loop4: lost filesystem error report for type 5 error -117 [ 455.716744][ T9714] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1734: Invalid block bitmap block 0 in block_group 0 [ 455.724238][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 455.724269][ C0] EXT4-fs (loop4): last error at time 2000000175: ext4_read_block_bitmap_nowait:483 [ 455.756944][ T9714] loop4: lost filesystem error report for type 5 error -117 [ 455.757272][ T9714] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1734: Invalid block bitmap block 0 in block_group 0 [ 455.784264][ T9722] futex_wake_op: syz.1.1737 tries to shift op by 144; fix this program [ 455.785209][ T9714] loop4: lost filesystem error report for type 5 error -117 [ 455.794146][ T9714] Quota error (device loop4): write_blk: dquota write failed [ 455.813399][ T9714] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 455.829746][ T9714] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.1734: Failed to acquire dquot type 1 [ 455.866921][ T9714] loop4: lost filesystem error report for type 5 error -28 [ 455.867227][ T9714] EXT4-fs (loop4): 1 orphan inode deleted [ 455.903836][ T12] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 455.913897][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 1 [ 455.930012][ T9722] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1737'. [ 455.945990][ T12] loop4: lost filesystem error report for type 5 error -117 [ 455.946721][ T9714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 456.018334][ T3615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.184697][ T9728] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2570 sclass=netlink_xfrm_socket pid=9728 comm=syz.1.1740 [ 456.923770][ C0] net_ratelimit: 55 callbacks suppressed [ 456.923792][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.965309][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 457.073832][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 457.185470][ T30] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 457.293715][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 457.325609][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.440210][ T105] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 457.448534][ T9748] loop1: detected capacity change from 0 to 128 [ 457.483636][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.049394][ T3433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.057698][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 458.271535][ T9747] sctp: [Deprecated]: syz.1.1743 (pid 9747) Use of struct sctp_assoc_value in delayed_ack socket option. [ 458.271535][ T9747] Use struct sctp_sack_info instead [ 458.760853][ T9755] loop3: detected capacity change from 0 to 8192 [ 460.884444][ T9755] loop3: p1 < > p2 p4 < p5 > [ 460.900118][ T9755] loop3: partition table partially beyond EOD, truncated [ 460.913834][ T28] audit: type=1400 audit(2000000180.810:906): avc: denied { mount } for pid=9776 comm="syz.0.1751" name="/" dev="configfs" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 461.492808][ T9755] loop3: p1 start 134217728 is beyond EOD, truncated [ 461.528998][ T28] audit: type=1400 audit(2000000181.370:907): avc: denied { search } for pid=9776 comm="syz.0.1751" name="/" dev="configfs" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 461.673646][ T9755] loop3: p2 size 591360 extends beyond EOD, truncated [ 461.687016][ T9755] loop3: p5 size 591360 extends beyond EOD, truncated [ 461.700598][ T2980] loop3: p1 < > p2 p4 < p5 > [ 461.881777][ T28] audit: type=1400 audit(2000000181.370:908): avc: denied { search } for pid=9776 comm="syz.0.1751" name="/" dev="configfs" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 462.443705][ C1] net_ratelimit: 28 callbacks suppressed [ 462.443722][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.530457][ T2980] loop3: partition table partially beyond EOD, truncated [ 462.537665][ T2980] loop3: p1 start 134217728 is beyond EOD, truncated [ 462.544425][ T2980] loop3: p2 size 591360 extends beyond EOD, truncated [ 462.552308][ T2980] loop3: p5 size 591360 extends beyond EOD, truncated [ 462.968470][ T28] audit: type=1400 audit(2000000182.850:909): avc: denied { write } for pid=9776 comm="syz.0.1751" name="/" dev="configfs" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 462.997977][ T9786] loop1: detected capacity change from 0 to 128 [ 463.479804][ T28] audit: type=1400 audit(2000000182.860:910): avc: denied { add_name } for pid=9776 comm="syz.0.1751" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 463.539222][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.547466][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.549864][ T3433] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 463.587160][ T9790] loop1: detected capacity change from 0 to 512 [ 463.596906][ T28] audit: type=1400 audit(2000000182.890:911): avc: denied { create } for pid=9776 comm="syz.0.1751" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 463.694603][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 463.723603][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 463.736723][ T9793] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2570 sclass=netlink_xfrm_socket pid=9793 comm=syz.0.1755 [ 463.815571][ T3433] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 463.823082][ T9790] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.1754: Unrecognised inode hash code 255 [ 463.841186][ T9790] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1754: Corrupt directory, running e2fsck is recommended [ 463.905865][ T9790] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 463.927664][ T28] audit: type=1400 audit(2000000183.810:912): avc: denied { sys_module } for pid=9796 comm="syz.3.1757" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 463.951889][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 463.961810][ T9790] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.1754: corrupted in-inode xattr: e_name out of bounds [ 463.975700][ T9790] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 463.975833][ T28] audit: type=1400 audit(2000000183.810:913): avc: denied { module_load } for pid=9796 comm="syz.3.1757" path="/sys/kernel/uevent_seqnum" dev="sysfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 463.984982][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 463.985005][ C1] EXT4-fs (loop1): initial error at time 2000000183: ext4_iget_extra_inode:5180: inode 15 [ 463.985031][ C1] EXT4-fs (loop1): last error at time 2000000183: ext4_iget_extra_inode:5180: inode 15 [ 464.167313][ T9790] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1754: couldn't read orphan inode 15 (err -117) [ 464.203672][ T9790] loop1: lost filesystem error report for type 5 error -117 [ 464.204327][ T9790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.465152][ T3433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.537067][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 464.550578][ T3433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.563851][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 464.689936][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 464.913925][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.955307][ T9792] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 142: padding at end of block bitmap is not set [ 465.414259][ T9799] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 465.423797][ T9799] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 465.559984][ T28] audit: type=1400 audit(2000000185.310:914): avc: denied { firmware_load } for pid=9796 comm="syz.3.1757" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 465.605305][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 465.945105][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 466.444538][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 466.460347][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 466.481238][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 466.503821][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 466.561700][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.830801][ T9808] loop2: detected capacity change from 0 to 512 [ 466.881834][ T9808] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 466.896899][ T9808] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1760: corrupted in-inode xattr: e_value size too large [ 467.011577][ T9808] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 467.013592][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 467.029241][ C1] EXT4-fs (loop2): initial error at time 2000000186: ext4_iget_extra_inode:5180: inode 15 [ 467.039250][ C1] EXT4-fs (loop2): last error at time 2000000186: ext4_iget_extra_inode:5180: inode 15 [ 467.054377][ T9812] loop1: detected capacity change from 0 to 512 [ 467.062369][ T9808] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1760: couldn't read orphan inode 15 (err -117) [ 467.106654][ T9812] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 467.114827][ T9812] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 467.125381][ T9812] EXT4-fs (loop1): 1 truncate cleaned up [ 467.131559][ T9812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.155097][ T9808] loop2: lost filesystem error report for type 5 error -117 [ 467.188714][ T9808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.382222][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.454318][ T3433] net_ratelimit: 21 callbacks suppressed [ 467.454338][ T3433] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 467.570173][ T105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.578850][ T105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.608201][ T9822] loop3: detected capacity change from 0 to 512 [ 467.620864][ T3433] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 467.642956][ T9822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.815226][ T30] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 467.826974][ T9822] ext4 filesystem being mounted at /358/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 467.945848][ T3433] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 467.975580][ T8233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.215531][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.233594][ T30] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 468.362353][ T105] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 468.428031][ T9836] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 468.445956][ T9836] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 468.570093][ T9838] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2570 sclass=netlink_xfrm_socket pid=9838 comm=syz.2.1766 [ 468.636404][ T28] audit: type=1400 audit(2000000188.530:915): avc: denied { write } for pid=9821 comm="syz.3.1763" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 468.679963][ T9822] EXT4-fs error (device loop3): ext4_get_first_dir_block:3545: inode #12: block 32: comm syz.3.1763: bad entry in directory: inode out of bounds - offset=0, inode=67108867, rec_len=2048, size=2048 fake=0 [ 468.716459][ T28] audit: type=1400 audit(2000000188.560:916): avc: denied { write } for pid=9821 comm="syz.3.1763" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 468.754501][ T9834] netlink: 'syz.0.1765': attribute type 5 has an invalid length. [ 468.764469][ T9822] EXT4-fs error (device loop3): ext4_get_first_dir_block:3548: inode #12: comm syz.3.1763: directory missing '.' [ 468.781693][ T28] audit: type=1400 audit(2000000188.570:917): avc: denied { write } for pid=9821 comm="syz.3.1763" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 468.827483][ T9841] netlink: 'syz.2.1767': attribute type 1 has an invalid length. [ 468.834462][ T28] audit: type=1400 audit(2000000188.570:918): avc: denied { write } for pid=9821 comm="syz.3.1763" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 468.835309][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1767'. [ 468.857482][ T9841] loop2: detected capacity change from 0 to 1024 [ 468.880122][ T9841] EXT4-fs: Ignoring removed nomblk_io_submit option [ 468.952030][ T9844] infiniband syz0: set down [ 468.964962][ T9844] infiniband syz0: added ipvlan0 [ 468.996529][ T9847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1769'. [ 469.001321][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.016039][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.020715][ T9841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 469.041763][ T9841] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.055593][ T9844] RDS/IB: syz0: added [ 469.062679][ T9844] smc: adding ib device syz0 with port count 1 [ 469.070252][ T9844] smc: ib device syz0 port 1 has no pnetid [ 469.087340][ T9841] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 469.087340][ T9841] program syz.2.1767 not setting count and/or reply_len properly [ 469.276269][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 469.349422][ T9856] syzkaller0: entered promiscuous mode [ 469.356577][ T9856] syzkaller0: entered allmulticast mode [ 469.418308][ T28] audit: type=1400 audit(2000000189.300:919): avc: denied { relabelfrom } for pid=9855 comm="syz.3.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 469.438291][ T28] audit: type=1400 audit(2000000189.300:920): avc: denied { relabelto } for pid=9855 comm="syz.3.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 469.634907][ T9865] loop2: detected capacity change from 0 to 512 [ 469.709385][ T9865] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 469.721747][ T9865] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 469.732468][ T9865] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1771: Corrupt directory, running e2fsck is recommended [ 469.757604][ T9865] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 469.770001][ T9865] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1771: corrupted in-inode xattr: e_name out of bounds [ 469.785359][ T9865] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 469.787924][ T9865] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1771: couldn't read orphan inode 15 (err -117) [ 469.797462][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 469.797639][ C1] EXT4-fs (loop2): initial error at time 2000000189: ext4_iget_extra_inode:5180: inode 15 [ 469.797979][ C1] EXT4-fs (loop2): last error at time 2000000189: ext4_iget_extra_inode:5180: inode 15 [ 469.838265][ T9865] loop2: lost filesystem error report for type 5 error -117 [ 469.847390][ T9865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.491324][ T9871] loop4: detected capacity change from 0 to 128 [ 470.557696][ T9871] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 470.626037][ T9871] ext4 filesystem being mounted at /335/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 470.769855][ T28] audit: type=1400 audit(2000000190.650:921): avc: denied { write } for pid=9870 comm="syz.4.1775" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 470.835641][ T9876] loop3: detected capacity change from 0 to 1024 [ 470.921884][ T3615] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 470.943152][ T9876] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 470.993153][ T9876] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 471.036665][ T28] audit: type=1400 audit(2000000190.920:922): avc: denied { mounton } for pid=9881 comm="syz.4.1777" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 471.069480][ T9876] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1776: Failed to acquire dquot type 0 [ 471.118827][ T9876] loop3: lost filesystem error report for type 5 error -117 [ 471.123576][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 471.137863][ C1] EXT4-fs (loop3): initial error at time 2000000191: ext4_acquire_dquot:7041 [ 471.146953][ C1] EXT4-fs (loop3): last error at time 2000000191: ext4_acquire_dquot:7041 [ 471.203676][ T9882] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1777'. [ 471.246999][ T9876] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 471.296827][ T9876] EXT4-fs (loop3): 1 truncate cleaned up [ 471.314769][ T9882] devpts: Bad value for 'gid' [ 471.319949][ T9882] devpts: Bad value for 'gid' [ 471.327947][ T9876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.359668][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.421970][ T9885] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2570 sclass=netlink_xfrm_socket pid=9885 comm=syz.2.1778 [ 471.473268][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.586364][ T9891] loop4: detected capacity change from 0 to 512 [ 471.599025][ T9887] loop3: detected capacity change from 0 to 1024 [ 471.618613][ T9887] EXT4-fs: inline encryption not supported [ 471.640188][ T9891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.654198][ T9891] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 471.693378][ T9887] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 471.719115][ T9887] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.1779: lblock 2 mapped to illegal pblock 2 (length 1) [ 471.784453][ T9887] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 471.786070][ T9887] EXT4-fs (loop3): Remounting filesystem read-only [ 471.795404][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 471.795473][ C1] EXT4-fs (loop3): initial error at time 2000000191: ext4_map_blocks:791: inode 3: block 2 [ 471.795742][ C1] EXT4-fs (loop3): last error at time 2000000191: ext4_map_blocks:791: inode 3: block 2 [ 471.930398][ T9896] syz_tun: entered allmulticast mode [ 471.993923][ T9887] EXT4-fs (loop3): 1 orphan inode deleted [ 472.064247][ T9887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.182282][ T9901] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1782'. [ 472.285810][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.358908][ T9903] loop1: detected capacity change from 0 to 4096 [ 472.402755][ T9903] EXT4-fs: dax option not supported [ 472.474391][ T9905] loop2: detected capacity change from 0 to 1024 [ 472.483244][ T9905] EXT4-fs: Ignoring removed orlov option [ 472.492296][ T9905] EXT4-fs: Ignoring removed orlov option [ 472.502697][ T9905] EXT4-fs: inline encryption not supported [ 472.544983][ T105] net_ratelimit: 56 callbacks suppressed [ 472.545004][ T105] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 472.573834][ T9905] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 472.633432][ T9905] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 472.689659][ T4258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.703207][ T9905] siw: device registration error -23 [ 472.708827][ T4258] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 472.719027][ T3433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.727852][ T9905] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1784'. [ 472.781879][ T9905] bond0 (unregistering): Released all slaves [ 472.804721][ T9914] loop3: detected capacity change from 0 to 512 [ 472.814197][ T9914] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 472.822247][ T9914] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 472.830895][ T9914] EXT4-fs (loop3): 1 truncate cleaned up [ 472.837104][ T9914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.891321][ T9913] loop2: detected capacity change from 0 to 8192 [ 472.900877][ T9891] EXT4-fs error (device loop4): ext4_get_first_dir_block:3545: inode #12: block 32: comm syz.4.1781: bad entry in directory: inode out of bounds - offset=0, inode=67108867, rec_len=2048, size=2048 fake=0 [ 472.921305][ T9891] EXT4-fs error (device loop4): ext4_get_first_dir_block:3548: inode #12: comm syz.4.1781: directory missing '.' [ 472.934004][ T105] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 473.044706][ T3433] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 473.138308][ T3615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.165341][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 473.204949][ T4258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.213662][ T4258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.274053][ T3433] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 473.476386][ T9921] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 473.506131][ T9921] ext4 filesystem being mounted at /329/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 473.757257][ T3294] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 473.914156][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.127343][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 474.127360][ T28] audit: type=1400 audit(2000000194.020:950): avc: denied { connect } for pid=9937 comm="syz.4.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 474.208340][ T9934] set_capacity_and_notify: 1 callbacks suppressed [ 474.208359][ T9934] loop3: detected capacity change from 0 to 512 [ 474.216089][ T9941] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1792'. [ 474.245534][ T9941] devpts: Bad value for 'gid' [ 474.250285][ T9941] devpts: Bad value for 'gid' [ 474.321985][ T9944] loop1: detected capacity change from 0 to 512 [ 474.374678][ T9934] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 474.585098][ T9944] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 474.597542][ T9944] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 474.612080][ T9944] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1789: Corrupt directory, running e2fsck is recommended [ 475.201957][ T9934] EXT4-fs (loop3): 1 truncate cleaned up [ 475.216750][ T9934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.354473][ T9944] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 475.363917][ T9944] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.1789: corrupted in-inode xattr: e_name out of bounds [ 475.378725][ T9944] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 475.383522][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 475.399095][ C1] EXT4-fs (loop1): initial error at time 2000000195: ext4_iget_extra_inode:5180: inode 15 [ 475.409070][ C1] EXT4-fs (loop1): last error at time 2000000195: ext4_iget_extra_inode:5180: inode 15 [ 475.537578][ T9944] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1789: couldn't read orphan inode 15 (err -117) [ 475.550238][ T9944] loop1: lost filesystem error report for type 5 error -117 [ 475.696325][ T9951] usb usb8: usbfs: process 9951 (syz.2.1796) did not claim interface 0 before use [ 476.367844][ T9951] loop2: detected capacity change from 0 to 512 [ 476.386799][ T9944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.585587][ T105] net_ratelimit: 28 callbacks suppressed [ 477.585604][ T105] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 477.704841][ T3433] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 477.720291][ T9951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.829478][ T28] audit: type=1400 audit(2000000197.670:951): avc: denied { write } for pid=9947 comm="syz.2.1796" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 477.858145][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.876521][ T8233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.932516][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.944712][ T4258] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 478.075636][ T105] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 478.083430][ T105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.091807][ T105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.169313][ T9965] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1798'. [ 478.186010][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 478.264877][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.322326][ T9969] loop3: detected capacity change from 0 to 512 [ 478.331597][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.375591][ T9965] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1798'. [ 478.398124][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.454065][ T9969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.505017][ T9969] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.564342][ T9969] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1799: iget: bad i_size value: 2533274857506816 [ 478.622229][ T9973] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1799: iget: bad i_size value: 2533274857506816 [ 478.643387][ T9969] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1799: iget: bad i_size value: 2533274857506816 [ 478.682127][ T9969] netlink: 6760 bytes leftover after parsing attributes in process `syz.3.1799'. [ 478.700446][ T9969] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.1799: iget: bad i_size value: 2533274857506816 [ 478.734465][ T28] audit: type=1400 audit(2000000198.630:952): avc: denied { create } for pid=9968 comm="syz.3.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 478.950644][ T9979] loop2: detected capacity change from 0 to 512 [ 478.961362][ T9980] loop1: detected capacity change from 0 to 512 [ 478.970366][ T9980] EXT4-fs: Ignoring removed mblk_io_submit option [ 478.995638][ T9979] EXT4-fs (loop2): 1 orphan inode deleted [ 479.007295][ T9980] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 479.019878][ T9979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.033177][ T9979] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.045521][ T4258] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 479.057216][ T4258] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 1 [ 479.068939][ T9980] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 479.077007][ T9980] EXT4-fs (loop1): orphan cleanup on readonly fs [ 479.085875][ T9980] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1800: Invalid block bitmap block 0 in block_group 0 [ 479.102452][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.111791][ T9980] loop1: lost filesystem error report for type 5 error -117 [ 479.112038][ T9980] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1800: Invalid block bitmap block 0 in block_group 0 [ 479.119452][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 479.119467][ C0] EXT4-fs (loop1): last error at time 2000000199: ext4_read_block_bitmap_nowait:483 [ 479.150889][ T9980] loop1: lost filesystem error report for type 5 error -117 [ 479.151326][ T9980] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1800: Invalid block bitmap block 0 in block_group 0 [ 479.179873][ T9980] loop1: lost filesystem error report for type 5 error -117 [ 479.181098][ T9980] Quota error (device loop1): write_blk: dquota write failed [ 479.197231][ T9980] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 479.208453][ T9980] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.1800: Failed to acquire dquot type 1 [ 479.221679][ T9980] loop1: lost filesystem error report for type 5 error -28 [ 479.239802][ T9986] loop3: detected capacity change from 0 to 128 [ 479.255293][ T28] audit: type=1400 audit(2000000199.150:953): avc: denied { write } for pid=9976 comm="syz.4.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 479.314537][ T9980] EXT4-fs (loop1): 1 orphan inode deleted [ 479.358762][ T30] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 479.384144][ T9986] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 479.396602][ T9986] ext4 filesystem being mounted at /365/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 479.431103][ T30] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:1: Failed to release dquot type 1 [ 479.442541][ T30] loop1: lost filesystem error report for type 5 error -117 [ 479.444904][ T9980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 479.468271][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.521922][ T28] audit: type=1400 audit(2000000199.410:954): avc: denied { write } for pid=9985 comm="syz.3.1801" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 479.708123][ T28] audit: type=1326 audit(2000000199.590:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9994 comm="syz.0.1803" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35abb8ce59 code=0x7ffc0000 [ 479.733935][ T28] audit: type=1326 audit(2000000199.600:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9994 comm="syz.0.1803" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35abb8ce59 code=0x7ffc0000 [ 479.759998][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.782777][ T28] audit: type=1326 audit(2000000199.600:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9994 comm="syz.0.1803" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35abb8ce59 code=0x7ffc0000 [ 479.885216][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 479.891934][ T28] audit: type=1326 audit(2000000199.600:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9994 comm="syz.0.1803" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35abb8ce59 code=0x7ffc0000 [ 479.921539][ T28] audit: type=1326 audit(2000000199.600:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9994 comm="syz.0.1803" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f35abb8ce59 code=0x7ffc0000 [ 480.363658][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 480.655455][T10002] loop2: detected capacity change from 0 to 128 [ 482.699793][T10061] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 482.744941][ T4258] net_ratelimit: 40 callbacks suppressed [ 482.744955][ T4258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.815188][T10073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10073 comm=syz.4.1813 [ 482.851870][ T4258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.872142][T10073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10073 comm=syz.4.1813 [ 482.924216][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 483.044444][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 483.163648][ T9533] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 483.457768][ T30] bond3: (slave ip6gretap1): link status up again after 0 ms [ 483.473135][T10094] loop2: detected capacity change from 0 to 256 [ 483.497464][ T30] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 483.659412][ T8233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.698344][ T361] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 483.855983][ T9533] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 484.197247][T10109] loop1: detected capacity change from 0 to 512 [ 484.239623][T10109] FAT-fs (loop1): bogus number of FAT sectors [ 484.245847][T10109] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 484.255023][T10109] FAT-fs (loop1): Can't find a valid FAT filesystem [ 484.667839][T10110] loop1: detected capacity change from 0 to 4096 [ 485.596238][T10110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.647030][T10106] bond4: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 485.656847][T10106] 8021q: adding VLAN 0 to HW filter on device bond4 [ 485.713851][T10105] loop3: detected capacity change from 0 to 512 [ 485.787355][T10105] EXT4-fs error (device loop3): ext4_get_journal_inode:5900: comm syz.3.1820: inode #1792: comm syz.3.1820: iget: illegal inode # [ 485.837172][T10105] loop3: lost filesystem error report for type 5 error -117 [ 485.838030][T10105] EXT4-fs (loop3): Remounting filesystem read-only [ 485.854794][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 485.854841][ C0] EXT4-fs (loop3): initial error at time 2000000205: ext4_get_journal_inode:5900 [ 485.854981][ C0] EXT4-fs (loop3): last error at time 2000000205: ext4_get_journal_inode:5900 [ 485.903618][T10105] EXT4-fs (loop3): no journal found [ 485.908853][T10105] EXT4-fs (loop3): can't get journal size [ 485.916892][T10105] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 485.927902][T10105] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 485.938982][T10105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.964190][T10105] IPVS: length: 24 != 185957657016 [ 485.981348][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.012862][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.740212][T10141] loop4: detected capacity change from 0 to 512 [ 487.957455][ T361] net_ratelimit: 165 callbacks suppressed [ 487.957473][ T361] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 488.083970][ T361] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 488.129612][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.194258][ T361] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 488.826061][ T9690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.837643][ T4258] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 488.845367][ T8233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.853680][ T9690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.876843][T10195] netlink: 'syz.4.1832': attribute type 1 has an invalid length. [ 488.884862][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1832'. [ 488.899249][T10195] loop4: detected capacity change from 0 to 1024 [ 488.906196][T10195] EXT4-fs: Ignoring removed nomblk_io_submit option [ 488.932996][T10201] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1834'. [ 488.968265][ T9533] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 488.982168][T10195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 488.994431][T10195] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.007175][T10195] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 489.007175][T10195] program syz.4.1832 not setting count and/or reply_len properly [ 489.052287][ T3615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 489.168053][ T9533] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 491.916032][T10250] syzkaller0: entered promiscuous mode [ 491.921674][T10250] syzkaller0: entered allmulticast mode [ 491.984140][T10256] syzkaller0: entered promiscuous mode [ 491.989709][T10256] syzkaller0: entered allmulticast mode [ 492.008020][T10257] loop2: detected capacity change from 0 to 512 [ 492.015997][T10257] FAT-fs (loop2): bogus number of FAT sectors [ 492.022115][T10257] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 492.031309][T10257] FAT-fs (loop2): Can't find a valid FAT filesystem [ 492.076686][T10257] loop2: detected capacity change from 0 to 4096 [ 492.182634][T10257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.350588][T10257] bond0: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 492.363389][T10257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.561077][T10256] tipc: Started in network mode [ 492.569622][T10256] tipc: Node identity 9abe7de211e4, cluster identity 4711 [ 492.576887][T10256] tipc: Enabled bearer , priority 0 [ 492.608183][T10255] tipc: Resetting bearer [ 492.616366][T10273] siw: device registration error -23 [ 492.626316][T10255] tipc: Disabling bearer [ 492.776323][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.943126][T10271] netlink: 'syz.4.1839': attribute type 5 has an invalid length. [ 492.967527][T10270] loop4: detected capacity change from 0 to 8192 [ 493.093747][ T3451] net_ratelimit: 24 callbacks suppressed [ 493.093764][ T3451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.150646][ T3451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.179283][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1841'. [ 493.188988][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 493.423618][ T3451] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 493.553641][ T3451] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 493.590668][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 493.590681][ T28] audit: type=1400 audit(2000000213.030:1001): avc: denied { setopt } for pid=10277 comm="syz.2.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 493.618552][ T28] audit: type=1400 audit(2000000213.260:1002): avc: denied { append } for pid=10283 comm="syz.1.1842" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 493.748603][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 493.771077][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.780005][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.959129][ T9690] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 493.977860][ T28] audit: type=1400 audit(2000000213.840:1003): avc: denied { write } for pid=10290 comm="syz.3.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 494.043759][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.105460][T10299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1845'. [ 494.120592][T10298] loop3: detected capacity change from 0 to 4096 [ 494.228325][T10298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.385471][ T28] audit: type=1400 audit(2000000214.140:1004): avc: denied { write } for pid=10290 comm="syz.3.1844" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 494.618037][T10305] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1847'. [ 494.678937][T10305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1847'. [ 494.688979][T10305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1847'. [ 494.826457][T10311] syz.1.1849 (10311) used obsolete PPPIOCDETACH ioctl [ 495.077656][T10316] loop1: detected capacity change from 0 to 1024 [ 495.126024][T10316] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 495.144292][T10316] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 495.175073][T10316] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.1851: Failed to acquire dquot type 0 [ 495.210186][T10316] loop1: lost filesystem error report for type 5 error -117 [ 495.213414][T10316] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, [ 495.213554][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 495.213603][ C1] EXT4-fs (loop1): initial error at time 2000000215: ext4_acquire_dquot:7041 [ 495.213684][ C1] EXT4-fs (loop1): last error at time 2000000215: ext4_acquire_dquot:7041 [ 495.253983][T10316] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 495.344724][T10316] EXT4-fs (loop1): 1 truncate cleaned up [ 495.363008][T10316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.447532][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.495699][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.536983][T10324] loop1: detected capacity change from 0 to 512 [ 495.541951][T10323] loop4: detected capacity change from 0 to 1024 [ 495.549920][T10323] EXT4-fs: inline encryption not supported [ 495.557083][T10324] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 495.557910][T10323] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 495.565325][T10324] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 495.598445][T10323] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.1854: lblock 2 mapped to illegal pblock 2 (length 1) [ 495.601447][T10324] EXT4-fs (loop1): failed to open journal device unknown-block(0,3) -ENXIO [ 495.612530][T10323] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 495.613417][T10323] EXT4-fs (loop4): Remounting filesystem read-only [ 495.636735][T10323] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 495.662024][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 495.662074][ C0] EXT4-fs (loop4): initial error at time 2000000215: ext4_map_blocks:791: inode 3: block 2 [ 495.662175][ C0] EXT4-fs (loop4): last error at time 2000000215: ext4_map_blocks:791: inode 3: block 2 [ 495.694200][ T28] audit: type=1400 audit(2000000215.580:1005): avc: denied { listen } for pid=10319 comm="syz.3.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 495.730439][T10323] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 495.743171][T10323] EXT4-fs (loop4): 1 orphan inode deleted [ 495.752453][T10323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.795946][ T3615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.823200][T10343] tmpfs: Bad value for 'mpol' [ 496.847502][T10343] netlink: 'syz.2.1858': attribute type 10 has an invalid length. [ 496.987229][T10343] team0 (unregistering): Port device wg2 removed [ 497.816520][ T28] audit: type=1400 audit(2000000217.710:1006): avc: denied { write } for pid=10344 comm="syz.3.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 497.843931][T10346] loop2: detected capacity change from 0 to 512 [ 497.873549][T10346] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #11: block 992: comm syz.2.1858: lblock 6 mapped to illegal pblock 992 (length 1) [ 498.163728][T10346] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 498.164090][T10346] ------------[ cut here ]------------ [ 498.178749][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 498.178767][ C1] EXT4-fs (loop2): initial error at time 2000000218: ext4_map_blocks:791: inode 11: block 992 [ 498.178807][ C1] EXT4-fs (loop2): last error at time 2000000218: ext4_map_blocks:791: inode 11: block 992 [ 498.205809][T10346] EA inode 11 i_nlink=2 [ 498.205837][T10346] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#1: syz.2.1858/10346 [ 498.220969][T10346] Modules linked in: [ 498.224997][T10346] CPU: 1 UID: 0 PID: 10346 Comm: syz.2.1858 Not tainted syzkaller #0 PREEMPT(lazy) [ 498.234409][T10346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 498.244551][T10346] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 498.251224][T10346] Code: 16 dc 96 ff 49 8d 7e 40 4c 8d 2d 4b 9f 5a 05 e8 f6 b5 b5 ff 49 8b 6e 40 4c 89 e7 e8 2a b1 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 51 a0 d8 03 90 90 90 90 90 90 90 [ 498.270906][T10346] RSP: 0018:ffffc900098277f8 EFLAGS: 00010246 [ 498.277033][T10346] RAX: ffff888101c91c30 RBX: ffff888106f4af38 RCX: ffffffff81c28f96 [ 498.285151][T10346] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d2ed0 [ 498.293162][T10346] RBP: 000000000000000b R08: 0001888106f4aeeb R09: 0000000000000000 [ 498.301208][T10346] R10: ffffc90009827728 R11: 0001c90009827728 R12: ffff888106f4aee8 [ 498.309247][T10346] R13: ffffffff871d2ed0 R14: ffff888106f4aea0 R15: 0000000000000001 [ 498.317282][T10346] FS: 00007f9bcf9ce6c0(0000) GS:ffff8882ae9d7000(0000) knlGS:0000000000000000 [ 498.321597][ T3396] net_ratelimit: 29 callbacks suppressed [ 498.321709][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.326255][T10346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 498.334742][ T8233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.340004][T10346] CR2: 00002000001b6030 CR3: 000000011d712000 CR4: 00000000003506f0 [ 498.362740][T10346] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 498.370888][T10346] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 498.378956][T10346] Call Trace: [ 498.382277][T10346] [ 498.385267][T10346] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 498.391207][T10346] ext4_xattr_delete_inode+0x6b5/0x790 [ 498.396722][T10346] ext4_evict_inode+0xb18/0xdf0 [ 498.401629][T10346] ? __pfx_ext4_evict_inode+0x10/0x10 [ 498.407110][T10346] evict+0x2a5/0x510 [ 498.411071][T10346] iput+0x430/0x5a0 [ 498.415025][T10346] ext4_process_orphan+0x1a4/0x1c0 [ 498.420254][T10346] ext4_orphan_cleanup+0x6a6/0xa10 [ 498.425531][T10346] ? ext4_register_li_request+0x403/0x440 [ 498.431477][T10346] ext4_fill_super+0x33d5/0x3780 [ 498.436478][T10346] ? set_blocksize+0x14c/0x270 [ 498.441307][T10346] ? __pfx_ext4_fill_super+0x10/0x10 [ 498.446743][T10346] get_tree_bdev_flags+0x291/0x300 [ 498.451886][T10346] ? __pfx_ext4_fill_super+0x10/0x10 [ 498.457332][T10346] get_tree_bdev+0x1f/0x30 [ 498.461778][T10346] ext4_get_tree+0x1c/0x30 [ 498.466276][T10346] vfs_get_tree+0x57/0x1d0 [ 498.470722][T10346] do_new_mount+0x288/0x8d0 [ 498.475300][T10346] path_mount+0x4ad/0xb90 [ 498.479667][T10346] __se_sys_mount+0x28c/0x2e0 [ 498.484411][T10346] ? __se_sys_mkdirat+0xa2/0xf0 [ 498.489272][T10346] ? kmem_cache_free+0xca/0x380 [ 498.494198][T10346] __x64_sys_mount+0x67/0x80 [ 498.498806][T10346] x64_sys_call+0x2d61/0x3020 [ 498.503485][T10346] do_syscall_64+0x136/0x3c0 [ 498.508159][T10346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.514107][T10346] RIP: 0033:0x7f9bd0f9e0ca [ 498.518536][T10346] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.538287][T10346] RSP: 002b:00007f9bcf9cde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 498.546827][T10346] RAX: ffffffffffffffda RBX: 00007f9bcf9cdee0 RCX: 00007f9bd0f9e0ca [ 498.554859][T10346] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f9bcf9cdea0 [ 498.562851][T10346] RBP: 00002000000009c0 R08: 00007f9bcf9cdee0 R09: 0000000000800718 [ 498.570958][T10346] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 498.579044][T10346] R13: 00007f9bcf9cdea0 R14: 000000000000048d R15: 0000200000000200 [ 498.587135][T10346] [ 498.590167][T10346] ---[ end trace 0000000000000000 ]--- [ 498.606497][T10346] EXT4-fs (loop2): 1 orphan inode deleted [ 498.613129][T10346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.698848][T10354] bridge0: port 4(gretap0) entered blocking state [ 498.705495][T10354] bridge0: port 4(gretap0) entered disabled state [ 498.715668][T10354] gretap0: entered allmulticast mode [ 498.722044][T10354] gretap0: entered promiscuous mode [ 498.728068][T10354] bridge0: port 4(gretap0) entered blocking state [ 498.734613][T10354] bridge0: port 4(gretap0) entered forwarding state [ 498.926181][ T8233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.934519][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.022200][ T9533] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 499.033958][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.042462][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.074660][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.156335][ T9533] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 499.706582][ T9533] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 499.724435][T10375] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1862'. [ 499.755417][ T28] audit: type=1400 audit(2000000219.650:1007): avc: denied { ioctl } for pid=10362 comm="syz.2.1862" path="socket:[27498]" dev="sockfs" ino=27498 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 500.340954][T10365] bridge1: entered promiscuous mode [ 500.349962][ T8233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.442359][T10383] loop2: detected capacity change from 0 to 128 [ 501.848364][T10378] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1867'. [ 502.008016][T10387] loop2: detected capacity change from 0 to 512 [ 502.034489][T10387] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1868: Unrecognised inode hash code 255 [ 502.118900][T10391] usb usb8: usbfs: process 10391 (syz.1.1869) did not claim interface 0 before use [ 502.325814][T10391] loop1: detected capacity change from 0 to 512 [ 502.403396][T10387] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1868: Corrupt directory, running e2fsck is recommended [ 502.452559][T10391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.475649][ T28] audit: type=1400 audit(2000000222.370:1008): avc: denied { write } for pid=10385 comm="syz.1.1869" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 502.618233][T10387] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 502.643140][T10387] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1868: corrupted in-inode xattr: e_name out of bounds [ 502.830016][T10387] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 502.830259][T10387] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1868: couldn't read orphan inode 15 (err -117) [ 502.839473][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 502.839501][ C1] EXT4-fs (loop2): initial error at time 2000000222: ext4_iget_extra_inode:5180: inode 15 [ 502.839537][ C1] EXT4-fs (loop2): last error at time 2000000222: ext4_iget_extra_inode:5180: inode 15 [ 503.011618][T10387] loop2: lost filesystem error report for type 5 error -117 [ 503.023105][T10387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.200957][T10398] loop4: detected capacity change from 0 to 128 [ 503.202302][T10396] loop3: detected capacity change from 0 to 512 [ 503.249492][T10383] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1868: Unrecognised inode hash code 255 [ 503.286933][T10396] EXT4-fs: Ignoring removed nomblk_io_submit option [ 503.295537][T10383] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1868: Corrupt directory, running e2fsck is recommended [ 503.318546][T10396] EXT4-fs: Mount option(s) incompatible with ext2 [ 503.335355][T10383] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 4: comm syz.2.1868: path /376/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 503.364078][ T30] net_ratelimit: 25 callbacks suppressed [ 503.364093][ T30] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 503.457639][T10383] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 8: comm syz.2.1868: path /376/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 503.523612][ T30] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 503.540955][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.633570][ T30] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 503.693984][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.705565][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.846343][ T28] audit: type=1400 audit(2000000223.740:1009): avc: denied { write } for pid=10412 comm="syz.3.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 503.867528][ T4258] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 503.876468][T10414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.884811][T10414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.005290][T10416] loop3: detected capacity change from 0 to 512 [ 504.011944][T10416] EXT4-fs: dax option not supported [ 504.019821][T10414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.036120][T10418] loop4: detected capacity change from 0 to 512 [ 504.091803][ T3451] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 504.104435][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.165540][T10418] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 504.185039][T10418] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 504.230390][T10418] EXT4-fs (loop4): failed to open journal device unknown-block(0,3) -ENXIO [ 505.511588][T10432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1882'. [ 505.524657][ T28] audit: type=1326 audit(2000000225.420:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10429 comm="syz.4.1882" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f652a41ce59 code=0x0 [ 505.717460][ T28] audit: type=1400 audit(2000000225.610:1011): avc: denied { load_policy } for pid=10425 comm="syz.1.1878" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 505.740873][T10426] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 505.749277][T10426] SELinux: failed to load policy [ 505.908178][T10438] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 508.027517][T10455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.050010][T10455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.419249][ T3396] net_ratelimit: 33 callbacks suppressed [ 508.419280][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.433276][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.444626][ T4258] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 508.533635][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.942304][T10458] netlink: 'syz.2.1896': attribute type 4 has an invalid length. [ 508.964942][ T28] audit: type=1400 audit(2000000228.650:1012): avc: denied { write } for pid=10450 comm="syz.2.1896" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 508.996211][ T361] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 509.137946][ T4258] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 509.255284][ T9690] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 510.184888][T10469] usb usb8: usbfs: process 10469 (syz.4.1889) did not claim interface 0 before use [ 510.364010][T10469] loop4: detected capacity change from 0 to 512 [ 510.394404][ T361] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 510.442704][T10464] loop2: detected capacity change from 0 to 512 [ 510.451344][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.478962][T10464] EXT4-fs: Ignoring removed nomblk_io_submit option [ 510.599811][ T9690] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 510.628256][T10464] EXT4-fs: Mount option(s) incompatible with ext2 [ 510.736293][T10460] loop3: detected capacity change from 0 to 128 [ 511.124347][T10469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.216070][ T28] audit: type=1400 audit(2000000231.040:1013): avc: denied { write } for pid=10461 comm="syz.4.1889" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 511.935997][T10486] bond2: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 511.949048][T10486] 8021q: adding VLAN 0 to HW filter on device bond2 [ 512.056124][ T3615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.357269][T10494] loop1: detected capacity change from 0 to 256 [ 513.525268][ T30] net_ratelimit: 17 callbacks suppressed [ 513.525364][ T30] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 513.747119][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 514.111981][T10510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1902'. [ 514.128858][T10510] IPv6: NLM_F_CREATE should be specified when creating new route [ 514.153113][ T30] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 514.234947][T10514] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 514.242525][T10514] SELinux: failed to load policy [ 514.248427][T10514] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 514.264095][T10508] loop3: detected capacity change from 0 to 128 [ 514.307304][T10508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.315598][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.332053][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.365866][T10508] loop3: detected capacity change from 0 to 512 [ 514.386043][T10508] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.1900: Unrecognised inode hash code 255 [ 514.397541][T10508] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1900: Corrupt directory, running e2fsck is recommended [ 514.412208][T10508] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 514.420514][T10508] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.1900: corrupted in-inode xattr: e_name out of bounds [ 514.434373][T10508] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 514.434614][T10508] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1900: couldn't read orphan inode 15 (err -117) [ 514.458097][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 514.458127][ C0] EXT4-fs (loop3): initial error at time 2000000234: ext4_iget_extra_inode:5180: inode 15 [ 514.458276][ C0] EXT4-fs (loop3): last error at time 2000000234: ext4_iget_extra_inode:5180: inode 15 [ 514.516343][ T30] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 514.525051][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.536175][T10508] loop3: lost filesystem error report for type 5 error -117 [ 514.560426][T10520] loop2: detected capacity change from 0 to 512 [ 514.625387][T10508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.642137][T10520] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 514.680557][T10520] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1904: corrupted in-inode xattr: bad e_name length [ 514.698398][ T30] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 514.706122][T10520] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 514.706639][T10520] EXT4-fs (loop2): get orphan inode failed [ 514.715926][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 514.715962][ C0] EXT4-fs (loop2): initial error at time 2000000234: ext4_iget_extra_inode:5180: inode 15 [ 514.716018][ C0] EXT4-fs (loop2): last error at time 2000000234: ext4_iget_extra_inode:5180: inode 15 [ 514.753022][T10520] EXT4-fs (loop2): mount failed [ 514.774585][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.807992][T10520] loop2: detected capacity change from 0 to 128 [ 514.834437][T10520] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 514.852503][T10520] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 514.923607][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 515.107429][T10528] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1907'. [ 515.236213][T10528] xt_CT: You must specify a L4 protocol and not use inversions on it [ 515.251067][T10518] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 142: padding at end of block bitmap is not set [ 515.358207][T10508] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.1900: Unrecognised inode hash code 255 [ 515.375129][T10508] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1900: Corrupt directory, running e2fsck is recommended [ 515.388825][T10508] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 4: comm syz.3.1900: path /384/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 515.426223][T10508] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 8: comm syz.3.1900: path /384/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 515.471692][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.679749][T10545] loop3: detected capacity change from 0 to 512 [ 515.689658][T10545] FAT-fs (loop3): bogus number of FAT sectors [ 515.695847][T10545] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 516.551652][T10553] bond0: (slave bridge_slave_0): Error: Device is in use and cannot be enslaved [ 517.662561][T10545] FAT-fs (loop3): Can't find a valid FAT filesystem [ 517.863332][T10545] loop3: detected capacity change from 0 to 4096 [ 518.804300][ T49] net_ratelimit: 17 callbacks suppressed [ 518.804316][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 518.918000][T10545] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 518.918348][T10545] EXT4-fs: failed to create workqueue [ 518.937496][T10545] EXT4-fs (loop3): mount failed [ 518.997275][T10566] loop4: detected capacity change from 0 to 512 [ 519.032933][ T30] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 519.042345][T10566] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.1915: bad orphan inode 15 [ 519.052444][T10566] loop4: lost filesystem error report for type 5 error -117 [ 519.053249][T10566] ext4_test_bit(bit=14, block=18) = 1 [ 519.060579][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 519.060609][ C1] EXT4-fs (loop4): initial error at time 2000000238: ext4_orphan_get:1425 [ 519.060633][ C1] EXT4-fs (loop4): last error at time 2000000238: ext4_orphan_get:1425 [ 519.089445][T10566] is_bad_inode(inode)=0 [ 519.093642][T10566] NEXT_ORPHAN(inode)=1023 [ 519.097985][T10566] max_ino=32 [ 519.101236][T10566] i_nlink=0 [ 519.106459][T10566] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #15: comm syz.4.1915: corrupted xattr block 19: invalid header [ 519.120189][T10566] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 519.121483][T10566] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 519.140348][T10566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 519.156203][T10566] ext4 filesystem being mounted at /362/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 519.315300][ T9533] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 519.521442][ T28] audit: type=1400 audit(2000000239.300:1014): avc: denied { write } for pid=10565 comm="syz.4.1915" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 519.623821][T10574] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1915: bg 0: block 449: padding at end of block bitmap is not set [ 520.525515][ T4258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.535414][ T9533] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 520.928916][ T9533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.939229][ T361] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 520.948414][ T9533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.532524][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.579302][ T4258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.587584][ T28] audit: type=1400 audit(2000000241.310:1015): avc: denied { name_bind } for pid=10578 comm="syz.2.1916" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 521.751128][ T3615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 521.934660][T10594] loop4: detected capacity change from 0 to 128 [ 522.765157][T10598] netlink: 'syz.1.1922': attribute type 4 has an invalid length. [ 522.921789][T10594] loop4: detected capacity change from 0 to 512 [ 522.954319][T10594] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.1919: Unrecognised inode hash code 255 [ 522.965890][T10594] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1919: Corrupt directory, running e2fsck is recommended [ 522.981060][T10594] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 522.989320][T10594] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.1919: corrupted in-inode xattr: e_name out of bounds [ 523.003244][T10594] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 523.003652][T10594] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1919: couldn't read orphan inode 15 (err -117) [ 523.038045][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 523.038094][ C0] EXT4-fs (loop4): initial error at time 2000000242: ext4_iget_extra_inode:5180: inode 15 [ 523.038185][ C0] EXT4-fs (loop4): last error at time 2000000242: ext4_iget_extra_inode:5180: inode 15 [ 523.198693][T10594] loop4: lost filesystem error report for type 5 error -117 [ 523.199984][T10594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.243736][T10594] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.1919: Unrecognised inode hash code 255 [ 523.255376][T10594] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1919: Corrupt directory, running e2fsck is recommended [ 523.303100][T10594] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 4: comm syz.4.1919: path /363/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 523.323874][T10594] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 8: comm syz.4.1919: path /363/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 523.372521][ T3615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.816948][ T4258] net_ratelimit: 8 callbacks suppressed [ 523.816962][ T4258] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 523.898600][ T28] audit: type=1400 audit(2000000243.790:1016): avc: denied { mount } for pid=10617 comm="syz.2.1928" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 523.936052][ T4258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.945946][ T361] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 523.971424][T10624] loop2: detected capacity change from 0 to 512 [ 523.991133][ T4258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.021098][T10624] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 524.060619][T10627] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 524.060619][T10627] The task syz.0.1927 (10627) triggered the difference, watch for misbehavior. [ 524.082385][T10624] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1928: corrupted in-inode xattr: e_value size too large [ 524.096670][ T4258] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 524.110143][ T28] audit: type=1400 audit(2000000243.860:1017): avc: denied { unmount } for pid=10617 comm="syz.2.1928" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 524.123072][T10624] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 524.130215][T10624] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1928: couldn't read orphan inode 15 (err -117) [ 524.139481][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 524.139496][ C1] EXT4-fs (loop2): initial error at time 2000000244: ext4_iget_extra_inode:5180: inode 15 [ 524.139519][ C1] EXT4-fs (loop2): last error at time 2000000244: ext4_iget_extra_inode:5180: inode 15 [ 524.203271][T10624] loop2: lost filesystem error report for type 5 error -117 [ 524.203851][T10624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.233693][ T361] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 524.256280][ T28] audit: type=1400 audit(2000000244.150:1018): avc: denied { write } for pid=10617 comm="syz.2.1928" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 524.373623][ T9533] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 524.463270][T10633] loop3: detected capacity change from 0 to 128 [ 524.577478][ T4258] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 524.611535][T10633] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 524.624032][T10633] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.836665][ T9533] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 525.348957][ T9533] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 525.936669][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.089893][T10641] loop2: detected capacity change from 0 to 256 [ 526.117288][ T28] audit: type=1400 audit(2000000246.010:1019): avc: denied { connect } for pid=10642 comm="syz.4.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 526.352617][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 526.362795][T10643] loop4: detected capacity change from 0 to 512 [ 526.461415][T10643] EXT4-fs (loop4): fragment/cluster size (4096) != block size (1024) [ 526.839569][T10649] loop3: detected capacity change from 0 to 1024 [ 526.852334][T10649] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 526.881742][T10653] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1936'. [ 526.891296][T10653] netlink: 'syz.4.1936': attribute type 1 has an invalid length. [ 527.028058][T10649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.061920][T10653] loop4: detected capacity change from 0 to 512 [ 527.085923][T10653] EXT4-fs error (device loop4): __ext4_iget:5533: inode #11: block 1: comm syz.4.1936: invalid block [ 527.096822][T10653] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 527.102663][T10653] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1936: couldn't read orphan inode 11 (err -117) [ 527.165053][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 527.171519][ C0] EXT4-fs (loop4): initial error at time 2000000246: __ext4_iget:5533: inode 11: block 1 [ 527.181434][ C0] EXT4-fs (loop4): last error at time 2000000246: __ext4_iget:5533: inode 11: block 1 [ 527.209750][T10667] netlink: 'syz.0.1937': attribute type 4 has an invalid length. [ 527.257412][T10653] loop4: lost filesystem error report for type 5 error -117 [ 527.270830][T10653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.819905][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.872976][ T3615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.139541][T10678] loop3: detected capacity change from 0 to 512 [ 528.203969][T10682] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1942'. [ 528.252781][T10676] loop4: detected capacity change from 0 to 8192 [ 528.269657][T10681] loop2: detected capacity change from 0 to 128 [ 528.279165][T10682] bridge2: entered promiscuous mode [ 528.315871][T10676] loop4: p1 < > p2 p4 < p5 > [ 528.330691][T10676] loop4: partition table partially beyond EOD, truncated [ 528.351919][T10676] loop4: p1 start 134217728 is beyond EOD, truncated [ 528.364579][T10676] loop4: p2 size 591360 extends beyond EOD, truncated [ 528.376778][T10676] loop4: p5 size 591360 extends beyond EOD, truncated [ 528.602721][ T2980] loop4: p1 < > p2 p4 < p5 > [ 528.607932][ T2980] loop4: partition table partially beyond EOD, truncated [ 528.621865][ T2980] loop4: p1 start 134217728 is beyond EOD, truncated [ 529.587417][ T2980] loop4: p2 size 591360 extends beyond EOD, truncated [ 529.668530][ T3396] net_ratelimit: 32 callbacks suppressed [ 529.668547][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.684995][ T9690] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 529.721488][ T2980] loop4: p5 size 591360 extends beyond EOD, truncated [ 530.645367][ T4258] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 530.757243][ T4258] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 530.766401][ T4258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.774614][ T4258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.805123][T10708] loop3: detected capacity change from 0 to 512 [ 530.812482][T10708] FAT-fs (loop3): bogus number of FAT sectors [ 530.818623][T10708] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 530.829437][T10708] FAT-fs (loop3): Can't find a valid FAT filesystem [ 530.926578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.007578][T10708] loop3: detected capacity change from 0 to 4096 [ 531.020026][ T9690] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 531.072873][T10708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.117397][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 531.130289][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 531.195201][T10707] bond5: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 531.204930][T10707] 8021q: adding VLAN 0 to HW filter on device bond5 [ 531.221316][T10714] loop4: detected capacity change from 0 to 512 [ 531.267357][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 531.274164][T10714] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 531.278184][ T3451] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 531.788454][ T9690] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 531.837053][T10714] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.1948: bad orphan inode 131083 [ 531.849270][T10714] loop4: lost filesystem error report for type 5 error -117 [ 531.850094][T10714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.880077][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.943169][ T3615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.315821][T10736] loop2: detected capacity change from 0 to 512 [ 533.971345][ T28] audit: type=1400 audit(2000000253.830:1020): avc: denied { ioctl } for pid=10738 comm="syz.0.1957" path="socket:[29751]" dev="sockfs" ino=29751 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 534.023621][T10731] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1953'. [ 534.939826][T10740] netlink: 'syz.4.1954': attribute type 4 has an invalid length. [ 534.965596][ T8233] net_ratelimit: 14 callbacks suppressed [ 534.965611][ T8233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.143906][ T9690] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 535.154304][T10749] netlink: 'syz.3.1969': attribute type 3 has an invalid length. [ 535.267146][ T9533] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 535.391577][T10757] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 535.577400][ T9690] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 535.783545][ T9690] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 536.021838][ T4258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.239714][ T4258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.319274][ T4258] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 536.485244][ T9690] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 536.785369][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 537.103437][T10777] loop3: detected capacity change from 0 to 512 [ 537.112036][T10777] FAT-fs (loop3): bogus number of FAT sectors [ 537.118236][T10777] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 537.127419][T10777] FAT-fs (loop3): Can't find a valid FAT filesystem [ 537.284196][T10777] loop3: detected capacity change from 0 to 4096 [ 537.352450][T10777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.425153][T10777] bond6: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 537.435629][T10777] 8021q: adding VLAN 0 to HW filter on device bond6 [ 537.888800][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.969674][T10762] ALSA: seq fatal error: cannot create timer (-22) [ 538.051475][T10794] netlink: 4116 bytes leftover after parsing attributes in process `syz.0.1971'. [ 538.130800][T10792] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 538.142932][T10792] pim6reg: entered allmulticast mode [ 538.388725][T10801] bond0: (slave bridge_slave_0): Error: Device can not be enslaved while up [ 538.405691][T10799] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1972'. [ 538.424870][T10799] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1972'. [ 538.650805][T10809] xt_hashlimit: max too large, truncated to 1048576 [ 538.697926][T10809] ipt_REJECT: TCP_RESET invalid for non-tcp [ 539.222046][ T28] audit: type=1400 audit(2000000259.110:1021): avc: denied { bind } for pid=10821 comm="syz.3.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 539.591301][T10835] loop4: detected capacity change from 0 to 512 [ 539.604629][T10835] FAT-fs (loop4): bogus number of FAT sectors [ 539.610762][T10835] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 539.619968][T10835] FAT-fs (loop4): Can't find a valid FAT filesystem [ 540.466469][ T28] audit: type=1400 audit(2000000259.490:1022): avc: denied { read } for pid=10825 comm="syz.3.1978" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 540.489353][ T28] audit: type=1400 audit(2000000259.490:1023): avc: denied { open } for pid=10825 comm="syz.3.1978" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 540.640163][T10835] loop4: detected capacity change from 0 to 4096 [ 541.437120][ T3396] net_ratelimit: 24 callbacks suppressed [ 541.437132][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.543629][ T4258] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 541.653536][ T4258] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 541.954879][T10835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.071722][ T28] audit: type=1400 audit(2000000261.960:1024): avc: denied { ioctl } for pid=10845 comm="syz.2.1984" path="socket:[29374]" dev="sockfs" ino=29374 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 542.135899][T10833] bond4: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 542.145716][T10833] 8021q: adding VLAN 0 to HW filter on device bond4 [ 542.163575][ T9533] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 542.238876][ T9690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.250763][ T9690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.285052][T10853] loop2: detected capacity change from 0 to 512 [ 542.302510][T10853] EXT4-fs: test_dummy_encryption option not supported [ 542.305929][ T3615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.375883][ T9690] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 542.503608][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 542.603607][ T28] audit: type=1400 audit(2000000262.480:1025): avc: denied { write } for pid=10866 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.627806][ T3451] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 542.645430][ T28] audit: type=1400 audit(2000000262.540:1026): avc: denied { write } for pid=10886 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.696337][T10887] bond0: (slave bridge_slave_0): Error: Device is in use and cannot be enslaved [ 542.832794][ T28] audit: type=1400 audit(2000000262.720:1027): avc: denied { write } for pid=10890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.857212][ T3451] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 542.872275][ T28] audit: type=1400 audit(2000000262.760:1028): avc: denied { write } for pid=10904 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.500788][T10912] loop3: detected capacity change from 0 to 512 [ 543.519481][T10917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1992'. [ 543.574703][T10911] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1992'. [ 543.580025][T10912] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1994: bad orphan inode 13 [ 543.594219][T10912] loop3: lost filesystem error report for type 5 error -117 [ 543.594382][T10912] ext4_test_bit(bit=12, block=4) = 1 [ 543.606981][T10912] is_bad_inode(inode)=0 [ 543.611156][T10912] NEXT_ORPHAN(inode)=0 [ 543.615229][T10912] max_ino=32 [ 543.618431][T10912] i_nlink=1 [ 543.621999][T10912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.660708][T10912] EXT4-fs warning (device loop3): dx_probe:813: inode #2: comm syz.3.1994: Hash code is SIPHASH, but hash not in dirent [ 543.673768][T10912] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1994: Corrupt directory, running e2fsck is recommended [ 543.676716][ T28] audit: type=1400 audit(2000000263.530:1029): avc: denied { write } for pid=10907 comm="syz.3.1994" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 543.722062][T10912] EXT4-fs warning (device loop3): dx_probe:813: inode #2: comm syz.3.1994: Hash code is SIPHASH, but hash not in dirent [ 543.746925][T10912] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1994: Corrupt directory, running e2fsck is recommended [ 543.866836][T10912] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.1994: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=131076, size=1024 fake=0 [ 543.966928][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.896684][ T9690] net_ratelimit: 24 callbacks suppressed [ 546.896704][ T9690] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 546.925122][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.984746][ T28] audit: type=1400 audit(2000000266.880:1030): avc: denied { create } for pid=10931 comm="syz.0.2003" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 547.797559][T10944] xt_hashlimit: size too large, truncated to 1048576 [ 547.966680][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 547.976964][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.041011][T10951] tmpfs: Bad value for 'mpol' [ 548.083858][T10951] netlink: 'syz.4.2006': attribute type 10 has an invalid length. [ 548.097336][T10951] team0 (unregistering): Port device team_slave_1 removed [ 548.108191][T10951] team0 (unregistering): Port device netdevsim2 removed [ 548.174122][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 548.186534][T10959] loop4: detected capacity change from 0 to 512 [ 548.247699][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.282994][T10959] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #11: block 992: comm syz.4.2006: lblock 6 mapped to illegal pblock 992 (length 1) [ 548.297400][T10959] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 548.297990][T10959] EXT4-fs (loop4): 1 orphan inode deleted [ 548.313347][T10959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.353800][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 548.377108][ T3615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.459178][T10973] bridge0: port 3(gretap0) entered blocking state [ 548.465706][T10973] bridge0: port 3(gretap0) entered disabled state [ 548.472207][T10973] gretap0: entered allmulticast mode [ 548.478078][T10973] gretap0: entered promiscuous mode [ 548.560678][ T9690] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 548.561999][ T4258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.581475][ T4258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.610366][T10980] loop4: detected capacity change from 0 to 256 [ 548.619414][T10980] FAT-fs (loop4): Directory bread(block 1285) failed [ 548.626601][T10980] FAT-fs (loop4): Directory bread(block 1286) failed [ 548.633977][T10980] FAT-fs (loop4): Directory bread(block 1287) failed [ 548.640874][T10980] FAT-fs (loop4): Directory bread(block 1288) failed [ 548.649216][T10983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2014'. [ 548.661723][T10980] FAT-fs (loop4): Directory bread(block 1285) failed [ 548.669143][T10980] FAT-fs (loop4): Directory bread(block 1286) failed [ 548.676277][T10980] FAT-fs (loop4): Directory bread(block 1287) failed [ 548.683298][T10980] FAT-fs (loop4): Directory bread(block 1288) failed [ 548.693333][ T28] audit: type=1326 audit(2000000268.580:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.0.2014" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35abb8ce59 code=0x7ffc0000 [ 548.719393][T10980] FAT-fs (loop4): Directory bread(block 1285) failed [ 548.719418][T10980] FAT-fs (loop4): Directory bread(block 1286) failed [ 548.738931][ T28] audit: type=1326 audit(2000000268.580:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.0.2014" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35abb8ce59 code=0x7ffc0000 [ 548.767763][ T28] audit: type=1326 audit(2000000268.580:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.0.2014" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35abb8ce59 code=0x7ffc0000 [ 548.802136][ T28] audit: type=1326 audit(2000000268.580:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.0.2014" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f35abb8ce59 code=0x7ffc0000 [ 548.828540][ T28] audit: type=1326 audit(2000000268.580:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.0.2014" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35abb8ce59 code=0x7ffc0000 [ 548.878537][ T28] audit: type=1326 audit(2000000268.580:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.0.2014" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35abb8ce59 code=0x7ffc0000 [ 548.916901][T10986] netlink: 'syz.3.2015': attribute type 1 has an invalid length. [ 548.933722][T10986] netlink: 'syz.3.2015': attribute type 4 has an invalid length. [ 549.027856][ T28] audit: type=1326 audit(2000000268.580:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.0.2014" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35abb8ce59 code=0x7ffc0000 [ 549.056476][ T28] audit: type=1326 audit(2000000268.580:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.0.2014" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f35abb8ce59 code=0x7ffc0000 [ 549.110819][ T28] audit: type=1326 audit(2000000268.580:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.0.2014" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35abb8ce59 code=0x7ffc0000 [ 549.139670][T10986] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2015'. [ 549.354104][T10998] loop4: detected capacity change from 0 to 1024 [ 549.383268][T10998] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 549.419572][T11004] loop3: detected capacity change from 0 to 512 [ 549.440752][T10998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.482509][T11004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.496680][T11004] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.613256][ T3615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.677576][T11012] xt_hashlimit: max too large, truncated to 1048576 [ 549.685421][T11012] ipt_REJECT: TCP_RESET invalid for non-tcp [ 549.917743][T11018] tmpfs: Bad value for 'mpol' [ 550.619697][T11018] netlink: 'syz.0.2021': attribute type 10 has an invalid length. [ 552.247103][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.259956][T11018] team0 (unregistering): Port device team_slave_1 removed [ 552.274950][T11018] team0 (unregistering): Port device netdevsim2 removed [ 552.300071][T11033] loop3: detected capacity change from 0 to 128 [ 552.325731][ T3451] net_ratelimit: 15 callbacks suppressed [ 552.325743][ T3451] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 552.773423][T11033] loop3: detected capacity change from 0 to 512 [ 553.019248][ T30] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 553.045076][T11033] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.2024: Unrecognised inode hash code 255 [ 553.058215][T11033] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2024: Corrupt directory, running e2fsck is recommended [ 553.075444][T11033] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 553.084015][T11033] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.2024: corrupted in-inode xattr: e_name out of bounds [ 553.103778][ T4258] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 553.112962][T11033] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 553.123827][T11033] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2024: couldn't read orphan inode 15 (err -117) [ 553.145021][T11033] loop3: lost filesystem error report for type 5 error -117 [ 553.147622][T11033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.219979][T11033] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.2024: Unrecognised inode hash code 255 [ 553.231933][T11033] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2024: Corrupt directory, running e2fsck is recommended [ 553.296586][ T9690] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 553.310847][T11033] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.2024: Unrecognised inode hash code 255 [ 553.325052][T11033] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2024: Corrupt directory, running e2fsck is recommended [ 553.329488][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.363021][T11033] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 4: comm syz.3.2024: path /408/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 553.387963][T11033] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 8: comm syz.3.2024: path /408/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 553.425991][ T9690] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 553.456687][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 553.456712][ T28] audit: type=1400 audit(2000000273.350:1096): avc: denied { read } for pid=11050 comm="syz.2.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 553.491821][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.633616][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.641112][ T30] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 553.642193][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.669346][T11056] netlink: 'syz.4.2033': attribute type 1 has an invalid length. [ 553.677107][T11056] netlink: 'syz.4.2033': attribute type 4 has an invalid length. [ 553.684868][T11056] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2033'. [ 553.842823][ T4258] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 554.894305][T11078] netlink: 'syz.4.2038': attribute type 10 has an invalid length. [ 554.903005][T11078] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2038'. [ 554.947078][T11080] loop4: detected capacity change from 0 to 512 [ 555.103574][T11080] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 555.127701][T11080] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 555.147054][T11080] System zones: 1-12 [ 555.520276][T11080] EXT4-fs (loop4): 1 truncate cleaned up [ 555.549701][T11080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.701436][T11078] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2038'. [ 555.807073][T11094] rdma_rxe: rxe_newlink: failed to add gre0 [ 555.854882][T11094] vti0: left promiscuous mode [ 555.861494][T11094] bridge1: left promiscuous mode [ 555.887517][ T3615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.917937][ T28] audit: type=1400 audit(2000000275.780:1097): avc: denied { map } for pid=11093 comm="syz.2.2043" path="socket:[30279]" dev="sockfs" ino=30279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 557.028774][T11123] loop4: detected capacity change from 0 to 512 [ 557.084846][T11123] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2052'. [ 557.105576][T11123] xt_CT: You must specify a L4 protocol and not use inversions on it [ 557.183015][ T9690] smc: removing ib device syz0 [ 557.355743][ T49] net_ratelimit: 18 callbacks suppressed [ 557.355760][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 557.463905][ T9690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.472974][ T9690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.483585][ T9690] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 557.603791][ T9690] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 557.619405][T11132] loop3: detected capacity change from 0 to 764 [ 557.804004][ T28] audit: type=1400 audit(2000000277.560:1098): avc: denied { mounton } for pid=11131 comm="syz.3.2056" path="/414/file1" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 557.826946][T11133] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2057'. [ 557.863599][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 557.898952][ T28] audit: type=1400 audit(2000000277.760:1099): avc: denied { read } for pid=11130 comm="syz.4.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 558.012646][T11148] loop3: detected capacity change from 0 to 256 [ 558.079107][ T3451] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 558.122148][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.213639][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 558.323608][ T9690] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 558.711148][T11153] loop4: detected capacity change from 0 to 1024 [ 558.758571][T11153] EXT4-fs: Ignoring removed bh option [ 558.932939][T11153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.951342][ T28] audit: type=1400 audit(2000000278.840:1100): avc: denied { write } for pid=11152 comm="syz.4.2062" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 559.518744][ T3615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.551910][T11163] loop3: detected capacity change from 0 to 512 [ 559.699305][T11163] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2065'. [ 559.755480][T11163] xt_CT: You must specify a L4 protocol and not use inversions on it [ 560.671668][T11179] ALSA: seq fatal error: cannot create timer (-22) [ 561.617545][T11204] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2076'. [ 561.642231][T11206] loop4: detected capacity change from 0 to 256 [ 561.648798][T11206] vfat: Unknown parameter 'check.relaxed' [ 561.697526][ T28] audit: type=1400 audit(2000000281.510:1101): avc: denied { write } for pid=11205 comm="syz.4.2077" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 562.717462][ T28] audit: type=1400 audit(2000000281.660:1102): avc: denied { ioctl } for pid=11210 comm="syz.4.2079" path="socket:[31137]" dev="sockfs" ino=31137 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 562.736813][ T30] net_ratelimit: 33 callbacks suppressed [ 562.736849][ T30] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 562.812625][T11213] loop4: detected capacity change from 0 to 2048 [ 562.855863][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 562.894459][T11228] netlink: 'syz.3.2081': attribute type 21 has an invalid length. [ 562.911891][T11213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.923944][T11213] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 563.019055][T11210] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.094929][ T30] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 563.225364][T11244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.244805][T11244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.255977][T11244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.265794][T11244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.274171][T11244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.282450][T11244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.291619][T11244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.039481][T11249] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2086'. [ 564.213077][T11253] loop3: detected capacity change from 0 to 512 [ 564.219736][T11253] EXT4-fs: Ignoring removed i_version option [ 564.323374][T11253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.343989][T11253] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.431914][T11240] ================================================================== [ 564.440119][T11240] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 564.447937][T11240] [ 564.450252][T11240] write to 0xffffea0004319798 of 8 bytes by task 11237 on cpu 0: [ 564.457956][T11240] __filemap_remove_folio+0x201/0x2e0 [ 564.463326][T11240] filemap_remove_folio+0x6d/0x1d0 [ 564.468435][T11240] truncate_inode_folio+0x42/0x50 [ 564.473481][T11240] shmem_undo_range+0x27f/0xb60 [ 564.478353][T11240] shmem_fallocate+0x84e/0x8f0 [ 564.483115][T11240] vfs_fallocate+0x3ac/0x400 [ 564.487695][T11240] __x64_sys_fallocate+0x7a/0xd0 [ 564.492624][T11240] x64_sys_call+0x298e/0x3020 [ 564.497304][T11240] do_syscall_64+0x136/0x3c0 [ 564.501885][T11240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.507769][T11240] [ 564.510078][T11240] read to 0xffffea0004319798 of 8 bytes by task 11240 on cpu 1: [ 564.517694][T11240] folio_mapping+0xa1/0xe0 [ 564.522108][T11240] move_folios_to_lru+0x1f6/0x810 [ 564.527130][T11240] evict_folios+0x29ce/0x2d80 [ 564.531804][T11240] try_to_shrink_lruvec+0x7c5/0xb10 [ 564.537000][T11240] shrink_lruvec+0x25e/0x1b60 [ 564.541668][T11240] shrink_node+0x69d/0x20f0 [ 564.546173][T11240] do_try_to_free_pages+0x408/0xc90 [ 564.551367][T11240] try_to_free_mem_cgroup_pages+0x201/0x420 [ 564.557264][T11240] try_charge_memcg+0x375/0xa00 [ 564.562124][T11240] __memcg_kmem_charge_page+0x199/0x3a0 [ 564.567678][T11240] __alloc_frozen_pages_noprof+0x18a/0x350 [ 564.573488][T11240] alloc_pages_mpol+0xa9/0x1d0 [ 564.578255][T11240] alloc_pages_noprof+0x8f/0x140 [ 564.583190][T11240] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 564.589078][T11240] __kvmalloc_node_noprof+0x3d4/0x640 [ 564.594442][T11240] futex_hash_allocate+0x192/0x920 [ 564.599545][T11240] futex_hash_prctl+0xd8/0xf0 [ 564.604215][T11240] __se_sys_prctl+0x4f4/0x13c0 [ 564.608970][T11240] __x64_sys_prctl+0x67/0x80 [ 564.613553][T11240] x64_sys_call+0x2533/0x3020 [ 564.618221][T11240] do_syscall_64+0x136/0x3c0 [ 564.622803][T11240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.628710][T11240] [ 564.631075][T11240] value changed: 0xffff888135cdad68 -> 0x0000000000000000 [ 564.638170][T11240] [ 564.640483][T11240] Reported by Kernel Concurrency Sanitizer on: [ 564.646634][T11240] CPU: 1 UID: 0 PID: 11240 Comm: syz.1.2083 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 564.657564][T11240] Tainted: [W]=WARN [ 564.661367][T11240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 564.671427][T11240] ================================================================== [ 564.800671][ T28] audit: type=1400 audit(2000000284.640:1103): avc: denied { write } for pid=11252 comm="syz.3.2087" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 564.833211][ T28] audit: type=1400 audit(2000000284.670:1104): avc: denied { write } for pid=11252 comm="syz.3.2087" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 564.835386][T11253] loop9: detected capacity change from 0 to 7 [ 564.861267][T11253] Buffer I/O error on dev loop9, logical block 0, async page read [ 564.869183][T11253] Buffer I/O error on dev loop9, logical block 0, async page read [ 564.877190][ T28] audit: type=1400 audit(2000000284.670:1105): avc: denied { create } for pid=11252 comm="syz.3.2087" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 564.877255][ T28] audit: type=1400 audit(2000000284.670:1106): avc: denied { write } for pid=11252 comm="syz.3.2087" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 564.971436][T11256] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2089'. [ 564.993217][T11253] loop9: unable to read partition table [ 564.999853][T11253] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 565.009111][T10952] Buffer I/O error on dev loop9, logical block 0, async page read [ 565.017083][T10952] Buffer I/O error on dev loop9, logical block 0, async page read [ 565.025074][T10952] Buffer I/O error on dev loop9, logical block 0, async page read [ 565.033094][T10952] Buffer I/O error on dev loop9, logical block 0, async page read [ 565.041042][T10952] Buffer I/O error on dev loop9, logical block 0, async page read [ 565.072352][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.765441][ T30] net_ratelimit: 197 callbacks suppressed [ 567.765498][ T30] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 567.803597][ T3411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.883620][ T9533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.888820][ T30] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 567.892171][ T9533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.005231][ T30] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 568.113538][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 568.223538][ T9533] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 568.335192][ T9533] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 568.443565][ T30] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 572.873590][ T9533] net_ratelimit: 50 callbacks suppressed [ 572.873631][ T9533] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 572.993549][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 573.105222][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 573.213528][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 573.323589][ T9533] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 573.423732][ T9533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.431932][ T9533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.441840][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 573.555373][ T30] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 573.663548][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex