last executing test programs: 1m0.38992591s ago: executing program 3 (id=220): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x1c, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r0, 0x1) 1m0.264013624s ago: executing program 3 (id=225): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x4000000001, 0xffffffffffffffff, 0x8) r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x100000000000000, 0x80, 0x0, 0x106) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x400008, 0x0) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) 1m0.165722038s ago: executing program 3 (id=226): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x403}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000001c40), 0x2}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 59.066567693s ago: executing program 3 (id=237): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f00000000c0), 0xf7, 0x579, &(0x7f0000001200)="$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") r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x20000000002, &(0x7f0000000700)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x10) ptrace$cont(0x21, r1, 0x80000001, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@noblock_validity}, {@delalloc}, {@quota}, {@errors_remount}, {@nomblk_io_submit}, {@dioread_nolock}, {@mb_optimize_scan}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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") 58.596341298s ago: executing program 3 (id=245): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x40) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x4440, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 58.22573344s ago: executing program 3 (id=249): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) unshare(0x600) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/profiling', 0x2, 0x184) copy_file_range(r0, &(0x7f0000000000)=0x800, r0, 0x0, 0x40000007, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000808) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') ftruncate(r2, 0x7fffffbfffffffff) 58.151480902s ago: executing program 32 (id=249): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) unshare(0x600) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/profiling', 0x2, 0x184) copy_file_range(r0, &(0x7f0000000000)=0x800, r0, 0x0, 0x40000007, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000808) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') ftruncate(r2, 0x7fffffbfffffffff) 4.734911516s ago: executing program 5 (id=628): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) truncate(0x0, 0x8007fffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r0, 0x0, 0x4000000) 4.427745077s ago: executing program 5 (id=635): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r0, 0x0, 0x0, 0x100008) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004050}, 0x810) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000009c0)={0x18, 0x2, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x8080) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000600)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe, 0x9}, 0x14185, 0x20032, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x4}, 0x1400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee01, 0xee01, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) faccessat2(r1, &(0x7f0000001400)='\x00', 0x0, 0x1100) 4.29487309s ago: executing program 2 (id=637): socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x9, 0x80000, 0x47) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) epoll_create1(0x80000) socket$inet6_mptcp(0xa, 0x1, 0x106) io_uring_setup(0x6001, &(0x7f0000000080)={0x0, 0x100361c, 0x1, 0x2, 0x1bf}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES16=r0], 0x18}}, 0x2080) 3.827654076s ago: executing program 2 (id=648): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000010c0)={0xb, {"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", 0x1000}}, 0x1006) 3.824340856s ago: executing program 5 (id=649): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000004c0)={r0, 0xd, {0x0, 0x0, 0x0, 0x788f, 0x6, 0x0, 0x9, 0x16, 0x0, "9cbf205751b0bb6212751efc0719c33d62dfadbb77c3ab7e8da00a42c65cea4e8523d1320b51e40c4a646f1435392c55dffe8414aa7a1045828a5c2a115d7243", "774cb5c59257fe9dbf9db750ef49a7cde43ca32d0ac3d2ce484baa686f8bbeb97a1c66984d4eed7df905040f759f6b21f13ec734afaeb432c29fa6cebdf7e188", "7197aafbbcb9306c8eb03153bd121dbba84a64e513071b19686bb7dbeb58819b", [0x7e9d]}}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x200) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x800080, &(0x7f00000000c0), 0x1, 0x473, &(0x7f0000002fc0)="$eJzs3MtvG8UfAPDvbh59/5JfKY8+gEBBRDySpi3QAwdAIHEoEhIc4BglaVXqNqgJUltV0CJUTgghcUcc+Rc4wQUhTkhc4Y4qVaiXtpyM1rvbOI7tJqkdp/jzkbad2ZnNzDe7Y8/u2Amgb41l/yQROyPij4gYybPLK4zl/926cWnm9o1LM0lUL7z7d1Krd/PGpZmyanncjiIznkaknyexv0m7Cxcunp6uVObOFfnJxTMfTS5cuPjCqTPTJ+dOzp09fOzY0SNTL790+MWOxJn16ea+T+YP7H3rg6/fPv5ltm+4jL8hjg4Za1f4dLXa4eZ6a1ddOhlsLN2zsZ1h1QYiIjtdQ7XxPxIDsXTyRuLNz3raOaCrqtVqdUfr4stV4D9se90rQcaQh35RvtFn97/l1jgJeLU7U49N4fpr+Q1QFvetYstLBiMt6gw13N920lhEvH/5n2+zLbrzHAIAYJkfs/nP883mf2k8VFfvf8Xa0GhE/D8idkfEA8WT/QcjanUfjohH1th+4yLJyvlPem1dga1SNv97pVjbWj7/K2d/MTpQ5HbV4h9KTpyqzB0qfifjMbQly0+1aeOnN37/qlVZ/fwv27L2y7lg0Y9rg1uWHzM7vTh9LzHXu34lYt9gs/iTOysBSUTsjYh99QeuWONp7dSz3x9oVXb3+NtYQx9aqX4X8Ux+/i9HQ/ylpP365OTWqMwdmiyvipV+/e3qO63av6f4OyA7/9ubXv934h9N6tdrF9bextU/v2h5T7PK63+0/pjs+h9O3qulh4t956cXF89NRQwnx/NO1+8/vHRsmS/rZ/GPH2w+/nfH0m9if0RkF/GjEfFYRDxe9P2JiHgyIg62if+X15/6cP3xd1cW/+yazv9SYjga9zRPDJz++YdljY6uiP92+/N/tJYaL/as5vVvNf1a39UMAAAA9580InZGkk7cSafpxET+efk9EWllfmHxuRPzH5+dzb8jMBpDafmka6TueehUcVuf569ERP7RgrL8SPHc+JuBbbX8xMx8ZbbXwUOf29Fi/Gf+Guh174Cu68A6GnCfMv6hfxn/0L+aj/9tG94PYOM1Gf8GP/SJZu//n/agH8DGaxj/lv2gj3j+B/3L+If+ZfxDX1rYFnf/knzbRPmTmtYp/7Tw+poYPJ8ffY897E0ihjZFN/LE1s7/5Eg3QVzdTGyJTdGNXiV69IIEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQYf8GAAD//2ub0u0=") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x771, &(0x7f0000001280)="$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") syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f00000001c0)={[{@dioread_nolock}, {@noblock_validity}, {@noquota}, {@journal_checksum}, {@norecovery}, {@abort}, {@minixdf}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x527, &(0x7f0000001380)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x224061, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 3.259920614s ago: executing program 4 (id=642): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000f00000000000000000a20000000000a05000000000000000000070000000900010073797a3000000000c8000000090a010400000000000000000700000108000a40000000000900020073797a31000000000900010073797a300000000008000540000000041c000980100002800c0001800800014000000002080001400000ff"], 0x110}, 0x1, 0x0, 0x0, 0x8840}, 0x0) 3.233119115s ago: executing program 1 (id=643): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800840, &(0x7f0000000540), 0xfd, 0x236, &(0x7f0000000300)="$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") symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x484c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x5, 0xfffffffffffffbff}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x80003, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff}}, @TCA_CHOKE_STAB={0x13f, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x3a8}}, 0x0) 2.7603093s ago: executing program 0 (id=644): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000100001042dbd7000000000f43b6fe900", @ANYRES32=0x0, @ANYBLOB="4b02060000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x4081}, 0x4044000) 2.76008429s ago: executing program 2 (id=645): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) truncate(0x0, 0x8007fffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r0, 0x0, 0x4000000) 2.75994662s ago: executing program 5 (id=646): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000480)={[{@nobarrier}, {@dioread_lock}, {@noquota}, {@nolazytime}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@nodioread_nolock}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfa, 0x56f, &(0x7f0000003780)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x12) r1 = open(0x0, 0x66842, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) chdir(&(0x7f0000000180)='./file0\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x6, 0x5}) getdents64(r2, &(0x7f0000000280)=""/213, 0xd5) 2.7597517s ago: executing program 4 (id=647): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) 2.75827233s ago: executing program 1 (id=656): perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x4090, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x100000001, 0x2, 0x3, 0x0, 0x3}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x701, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x1000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, @perf_bp={0x0}, 0x800, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, 0x0, 0x8880) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000040)) 2.606752125s ago: executing program 1 (id=650): r0 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(0xffffffffffffffff) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x2) flock(r4, 0x1) 1.910198548s ago: executing program 4 (id=651): r0 = socket$kcm(0x23, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x1a4, 0x10, 0x1, 0x70bd2d, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@private=0xa010101, 0xffffffff, 0x32}, @in=@broadcast, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x9}, {0x5, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x68, 0x2, {{'cbc(camellia)\x00'}, 0x100, "3ae0bd000b000000366a6a849a739045000500000000e80000000001006ea6b3"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x1a4}}, 0x44050) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0xeaff}, 0x0) 1.908620608s ago: executing program 0 (id=662): socket$netlink(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x11}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000019000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.907539608s ago: executing program 2 (id=652): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) ppoll(&(0x7f00000005c0)=[{r0, 0x60}], 0x1, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) readv(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 1.907415818s ago: executing program 5 (id=653): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 1.85266418s ago: executing program 0 (id=654): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4028800) dup(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x0, 0x2, 0x2, 0xfffe, 0x5}, {0x8, 0x0, 0x5, 0x3, 0x1fe, 0x9}, 0x0, 0x2, 0x20a4}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1.753957273s ago: executing program 0 (id=655): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xfff3}, {0x5, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x200001d4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[], 0x6) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, 0xffffffffffffffff, &(0x7f0000000080)) 1.746391013s ago: executing program 4 (id=657): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000010c0)={0xb, {"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", 0x1000}}, 0x1006) 1.729398444s ago: executing program 1 (id=658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg(0xffffffffffffffff, 0x0, 0x8040) unshare(0x2c020400) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x1, 0xf}, 0x10c0e8, 0x2, 0x7, 0x4, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x2) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_EMATCHES={0x31, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1e7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 847.211812ms ago: executing program 2 (id=659): io_setup(0x3ff, &(0x7f0000000500)) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x138, 0x238, 0x98, 0x2d8, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x89}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @dev={0xac, 0x14, 0x14, 0xd}, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x44}, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000b80)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./bus\x00', 0x0, 0x3810c0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) pwritev2(r1, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) 845.820682ms ago: executing program 1 (id=660): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffff6, @private0, 0x4}]}, &(0x7f0000000080)=0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0) socket$phonet(0x23, 0x2, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000200)={r4, 0x5, 0x20}, &(0x7f00000001c0)=0x18) 812.196883ms ago: executing program 0 (id=661): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x4, 0xb, 0x4e, 0x9, 0x0, 0x2, 0x2d084, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffffc}, 0x20, 0x9, 0xfff, 0x0, 0xfb4, 0x8, 0x3, 0x0, 0x8, 0x0, 0x9}, 0xffffffffffffffff, 0x804, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCGMASK(r4, 0x80104592, 0x0) fcntl$notify(r3, 0x402, 0x5) syz_clone3(&(0x7f0000002040)={0x120040100, 0x0, 0x0, 0x0, {0x3f}, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0xffffffffffffffff], 0x1}, 0x58) 631.181269ms ago: executing program 0 (id=663): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)='7', 0x1}], 0x1) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x35, 0xffffffb9, 0x1a}, 0x9c) 514.542512ms ago: executing program 4 (id=664): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0}, 0x106061, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000200000000000000008500"], 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) 197.866473ms ago: executing program 2 (id=665): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) 197.653063ms ago: executing program 4 (id=666): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f00000002c0)='./cgroup/../file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000240)={0x200a04000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x14, 0x13, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) prctl$PR_SET_IO_FLUSHER(0x50, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x71}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x7, 0x0, r3, 0x0, 0x0, 0x4}]) 171.609783ms ago: executing program 5 (id=667): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf89, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x8}, 0x8300, 0x10001, 0xfffffffd, 0x3, 0xabce, 0x85, 0x101, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) move_mount(r3, 0x0, r3, &(0x7f00000000c0)='./file0\x00', 0x22) 0s ago: executing program 1 (id=668): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x3, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): T3296] Cannot create hsr debugfs directory [ 28.017859][ T3301] hsr_slave_0: entered promiscuous mode [ 28.023960][ T3301] hsr_slave_1: entered promiscuous mode [ 28.029841][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 28.035618][ T3301] Cannot create hsr debugfs directory [ 28.194651][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.202918][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 28.210547][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.219128][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 28.227011][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.235816][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 28.245619][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.254261][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 28.273702][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.282205][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 28.290667][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.298926][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 28.311212][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.319762][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 28.327512][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.335931][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 28.364819][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.373509][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 28.381448][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.390050][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 28.406070][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.414458][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 28.422834][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.431399][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 28.443990][ T3295] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.452204][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 28.465725][ T3295] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.474306][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 28.489639][ T3295] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.498253][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 28.505746][ T3295] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.514111][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 28.539775][ T3296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.548215][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 28.555942][ T3296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.564389][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 28.572252][ T3296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.581153][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 28.589480][ T3296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.598159][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 28.632829][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.642206][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.659189][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.672059][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.686468][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.693699][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.709391][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.716495][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.727624][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.734712][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.759406][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.766494][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.798972][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.816757][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.831812][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.843605][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.858703][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.865840][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.879095][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.886195][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.902666][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.913224][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.933715][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.951657][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.958823][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.967597][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.974670][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.983459][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.990511][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.011081][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.018259][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.067326][ T3295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.100476][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.172106][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.258570][ T3301] veth0_vlan: entered promiscuous mode [ 29.275048][ T3301] veth1_vlan: entered promiscuous mode [ 29.299053][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.335663][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.343942][ T3301] veth0_macvtap: entered promiscuous mode [ 29.351743][ T3301] veth1_macvtap: entered promiscuous mode [ 29.360881][ T3302] veth0_vlan: entered promiscuous mode [ 29.367699][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.391139][ T3302] veth1_vlan: entered promiscuous mode [ 29.398319][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.421854][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.442373][ T3302] veth0_macvtap: entered promiscuous mode [ 29.453025][ T360] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.463394][ T360] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.483254][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.492197][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.505052][ T3302] veth1_macvtap: entered promiscuous mode [ 29.539605][ T28] audit: type=1400 audit(1781005870.470:146): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.aJoUGP/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.565642][ T3296] veth0_vlan: entered promiscuous mode [ 29.569366][ T28] audit: type=1400 audit(1781005870.470:147): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.578056][ T3296] veth1_vlan: entered promiscuous mode [ 29.600376][ T28] audit: type=1400 audit(1781005870.470:148): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.aJoUGP/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.612603][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.633028][ T28] audit: type=1400 audit(1781005870.500:149): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.661076][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.667985][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.695820][ T3295] veth0_vlan: entered promiscuous mode [ 29.712458][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.732297][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.741292][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.752450][ T3296] veth0_macvtap: entered promiscuous mode [ 29.764385][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.778621][ T3295] veth1_vlan: entered promiscuous mode [ 29.786535][ T3296] veth1_macvtap: entered promiscuous mode [ 29.795669][ T3299] veth0_vlan: entered promiscuous mode [ 29.828644][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.838926][ T3299] veth1_vlan: entered promiscuous mode [ 29.862396][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.872163][ T3502] loop2: detected capacity change from 0 to 512 [ 29.883503][ T3299] veth0_macvtap: entered promiscuous mode [ 29.895016][ T3502] EXT4-fs: Ignoring removed bh option [ 29.901151][ T3299] veth1_macvtap: entered promiscuous mode [ 29.909073][ T3295] veth0_macvtap: entered promiscuous mode [ 29.921756][ T3295] veth1_macvtap: entered promiscuous mode [ 29.932757][ T3502] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 29.948089][ T3502] EXT4-fs (loop2): 1 truncate cleaned up [ 29.957911][ T3502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.973490][ T360] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.982836][ T360] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.997829][ T3502] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.2.3: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 29.999169][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.039085][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.048870][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.059722][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.084677][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.093772][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.110418][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.127091][ T360] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.136648][ T3513] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7'. [ 30.156606][ T360] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.182242][ T3513] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.189560][ T3513] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.219175][ T3513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 30.228324][ T3513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 30.258638][ T360] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.271377][ T360] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.303562][ T360] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.314211][ T360] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.336126][ T360] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.345239][ T360] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.374616][ T360] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.410959][ T360] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.421639][ T360] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.442936][ T360] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.567231][ T3532] syzkaller0: entered promiscuous mode [ 30.582597][ T3532] syzkaller0: entered allmulticast mode [ 30.890645][ T3540] Illegal XDP return value 4294967294 on prog (id 3) dev syz_tun, expect packet loss! [ 31.066409][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 31.066426][ T28] audit: type=1400 audit(1781005872.000:189): avc: denied { bind } for pid=3552 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.101033][ T28] audit: type=1400 audit(1781005872.030:190): avc: denied { setopt } for pid=3552 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.154327][ T3550] syz.0.17 (3550) used greatest stack depth: 10720 bytes left [ 31.219514][ T3561] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.21'. [ 31.237663][ T28] audit: type=1400 audit(1781005872.160:191): avc: denied { setopt } for pid=3556 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 31.259677][ T28] audit: type=1400 audit(1781005872.170:192): avc: denied { connect } for pid=3556 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 31.294895][ T3557] x_tables: duplicate underflow at hook 1 [ 31.329053][ T28] audit: type=1400 audit(1781005872.260:193): avc: denied { create } for pid=3564 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 31.329877][ T3565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'. [ 31.373359][ T28] audit: type=1400 audit(1781005872.260:194): avc: denied { write } for pid=3564 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 31.394100][ T28] audit: type=1400 audit(1781005872.300:195): avc: denied { allowed } for pid=3562 comm="syz.3.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 31.409359][ T3565] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3565 comm=syz.0.23 [ 31.413710][ T28] audit: type=1400 audit(1781005872.300:196): avc: denied { create } for pid=3562 comm="syz.3.22" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.449297][ T28] audit: type=1400 audit(1781005872.380:197): avc: denied { getopt } for pid=3562 comm="syz.3.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.449388][ T3565] veth3: entered allmulticast mode [ 31.504921][ T28] audit: type=1400 audit(1781005872.440:198): avc: denied { read write } for pid=3567 comm="syz.3.24" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.868646][ T3577] syzkaller0: entered promiscuous mode [ 31.874574][ T3577] syzkaller0: entered allmulticast mode [ 31.968170][ T3583] syzkaller0: entered promiscuous mode [ 31.973872][ T3583] syzkaller0: entered allmulticast mode [ 32.154883][ T3592] netlink: 'syz.1.33': attribute type 83 has an invalid length. [ 32.389112][ T3594] loop1: detected capacity change from 0 to 8192 [ 32.435009][ T3597] loop4: detected capacity change from 0 to 1024 [ 32.452171][ T3594] loop1: p1 < > p2 p4 < p5 > [ 32.457173][ T3594] loop1: partition table partially beyond EOD, truncated [ 32.470983][ T3594] loop1: p1 start 134217728 is beyond EOD, truncated [ 32.483622][ T3597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.497146][ T3594] loop1: p2 size 591360 extends beyond EOD, truncated [ 32.506703][ T3594] loop1: p5 size 591360 extends beyond EOD, truncated [ 32.553332][ T2980] loop1: p1 < > p2 p4 < p5 > [ 32.563718][ T2980] loop1: partition table partially beyond EOD, truncated [ 32.574814][ T2980] loop1: p1 start 134217728 is beyond EOD, truncated [ 32.604490][ T2980] loop1: p2 size 591360 extends beyond EOD, truncated [ 32.613457][ T2980] loop1: p5 size 591360 extends beyond EOD, truncated [ 32.640257][ T3284] udevd[3284]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 32.652696][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 32.739907][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 32.807605][ T3284] udevd[3284]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 32.823606][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 32.836536][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 32.848834][ T3623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.35'. [ 33.112149][ T3618] syz.2.42 (3618) used greatest stack depth: 10240 bytes left [ 33.261341][ T3597] syz.4.35 (3597) used greatest stack depth: 10112 bytes left [ 33.294068][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.368588][ T3632] loop0: detected capacity change from 0 to 128 [ 33.426897][ T3632] FAT-fs (loop0): bogus number of FAT structure [ 33.436110][ T3632] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 33.446721][ T3632] FAT-fs (loop0): Can't find a valid FAT filesystem [ 33.489499][ T3632] netlink: 220 bytes leftover after parsing attributes in process `syz.0.45'. [ 33.510630][ T3632] tc_dump_action: action bad kind [ 33.606454][ T3642] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 33.620347][ T3642] infiniband syz!: RDMA CMA: cma_listen_on_dev, error -98 [ 33.835126][ T3646] loop0: detected capacity change from 0 to 128 [ 34.148125][ T3663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'. [ 34.417866][ T3663] team0: Port device team_slave_0 removed [ 34.561263][ T3674] loop3: detected capacity change from 0 to 2048 [ 35.041941][ T3672] loop1: detected capacity change from 0 to 2048 [ 35.120039][ T3694] loop0: detected capacity change from 0 to 256 [ 35.167864][ T3672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.222659][ T3672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.59'. [ 35.273930][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.346295][ T3701] loop2: detected capacity change from 0 to 256 [ 35.366946][ T3701] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.636997][ T3705] loop1: detected capacity change from 0 to 1024 [ 35.659528][ T3705] EXT4-fs: Ignoring removed orlov option [ 35.666874][ T3705] EXT4-fs: inline encryption not supported [ 35.730224][ T3705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.006379][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.097654][ T3723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'. [ 36.114075][ T3733] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: 1 [ 36.124928][ T28] kauditd_printk_skb: 318 callbacks suppressed [ 36.124943][ T28] audit: type=1400 audit(1781005877.050:517): avc: denied { execute } for pid=3732 comm="syz.0.80" path="/18/file0" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 36.167366][ T3733] ref_ctr increment failed for inode: 0x70 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888104d08000 [ 36.189867][ T28] audit: type=1326 audit(1781005877.120:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.79" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb408e9ce59 code=0x7ffc0000 [ 36.225514][ T3736] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: -1 [ 36.238778][ T28] audit: type=1326 audit(1781005877.120:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.79" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb408e9ce59 code=0x7ffc0000 [ 36.258154][ T3736] ref_ctr decrement failed for inode: 0x70 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888104d08000 [ 36.280791][ T3736] uprobe: syz.0.80:3736 failed to unregister, leaking uprobe [ 36.311304][ T28] audit: type=1326 audit(1781005877.120:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.79" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb408e9ce59 code=0x7ffc0000 [ 36.358748][ T28] audit: type=1326 audit(1781005877.120:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.79" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb408e9ce59 code=0x7ffc0000 [ 36.414087][ T3742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.83'. [ 36.425797][ T28] audit: type=1326 audit(1781005877.120:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.79" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb408e9ce59 code=0x7ffc0000 [ 36.474141][ T3743] loop2: detected capacity change from 0 to 512 [ 36.481999][ T28] audit: type=1326 audit(1781005877.120:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.79" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb408e9ce59 code=0x7ffc0000 [ 36.521246][ T3740] macsec1: entered promiscuous mode [ 36.522879][ T3746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 36.533906][ T3746] IPv6: NLM_F_CREATE should be set when creating new route [ 36.541116][ T3746] IPv6: NLM_F_CREATE should be set when creating new route [ 36.560050][ T28] audit: type=1326 audit(1781005877.170:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.79" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb408e9ce59 code=0x7ffc0000 [ 36.591496][ T3743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.592374][ T3746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 36.611471][ T3743] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.636162][ T3743] audit: audit_backlog=65 > audit_backlog_limit=64 [ 36.647066][ T28] audit: type=1326 audit(1781005877.180:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.79" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb408e5d68e code=0x7ffc0000 [ 36.742504][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.823721][ T3752] loop2: detected capacity change from 0 to 512 [ 36.839133][ T3752] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 36.851833][ T3746] Zero length message leads to an empty skb [ 36.893343][ T3752] loop2: detected capacity change from 0 to 164 [ 36.931797][ T3752] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 36.958133][ T3752] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 36.989194][ T3752] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 37.021762][ T3752] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 37.180296][ T3757] loop2: detected capacity change from 0 to 8192 [ 37.242199][ T3757] loop2: p1 < > p2 p4 < p5 > [ 37.250275][ T3757] loop2: partition table partially beyond EOD, truncated [ 37.270447][ T3757] loop2: p1 start 134217728 is beyond EOD, truncated [ 37.292364][ T3757] loop2: p2 size 67072 extends beyond EOD, truncated [ 37.311726][ T3757] loop2: p5 size 67072 extends beyond EOD, truncated [ 37.537427][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 37.823066][ T3761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.846447][ T3761] bond0: (slave bond1): Enslaving as an active interface with an up link [ 38.106450][ T3771] loop0: detected capacity change from 0 to 512 [ 38.142371][ T3771] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.192475][ T3771] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 38.211737][ T3771] EXT4-fs (loop0): orphan cleanup on readonly fs [ 38.223552][ T3771] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 38.290225][ T3771] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 38.298653][ T3771] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.91: bg 0: block 64: padding at end of block bitmap is not set [ 38.343097][ T3771] loop0: lost filesystem error report for type 5 error -117 [ 38.343307][ T3771] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 38.350654][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 38.350674][ C0] EXT4-fs (loop0): initial error at time 1781005879: ext4_validate_block_bitmap:441 [ 38.350696][ C0] EXT4-fs (loop0): last error at time 1781005879: ext4_validate_block_bitmap:441 [ 38.401787][ T3771] loop0: lost filesystem error report for type 5 error -117 [ 38.402144][ T3771] EXT4-fs (loop0): 1 truncate cleaned up [ 38.427176][ T3771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.553226][ T3771] xt_connbytes: Forcing CT accounting to be enabled [ 38.618177][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.770722][ T3781] loop0: detected capacity change from 0 to 8192 [ 38.792212][ T3781] ======================================================= [ 38.792212][ T3781] WARNING: The mand mount option has been deprecated and [ 38.792212][ T3781] and is ignored by this kernel. Remove the mand [ 38.792212][ T3781] option from the mount to silence this warning. [ 38.792212][ T3781] ======================================================= [ 39.839686][ T3799] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.869631][ T3799] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.896715][ T3810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.945510][ T3810] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.964996][ T3799] netlink: 100 bytes leftover after parsing attributes in process `syz.3.100'. [ 39.990760][ T3810] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 49 (only 1 groups) [ 40.029352][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.087798][ T3813] set_capacity_and_notify: 2 callbacks suppressed [ 40.087879][ T3813] loop3: detected capacity change from 0 to 512 [ 40.145751][ T3813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.171298][ T3813] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.216320][ T3813] EXT4-fs (loop3): resizing filesystem from 128 to 2 blocks [ 40.227033][ T3813] EXT4-fs warning (device loop3): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 40.281929][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.296104][ T3817] netlink: 'syz.1.104': attribute type 12 has an invalid length. [ 40.304682][ T3817] netlink: 'syz.1.104': attribute type 29 has an invalid length. [ 40.312976][ T3817] netlink: 148 bytes leftover after parsing attributes in process `syz.1.104'. [ 40.323244][ T3817] netlink: 'syz.1.104': attribute type 1 has an invalid length. [ 40.332478][ T3817] netlink: 'syz.1.104': attribute type 2 has an invalid length. [ 40.340847][ T3817] netlink: 11 bytes leftover after parsing attributes in process `syz.1.104'. [ 40.613688][ T3832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.108'. [ 40.785061][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.134762][ T3847] netlink: 20 bytes leftover after parsing attributes in process `syz.2.115'. [ 41.360650][ T3855] loop4: detected capacity change from 0 to 512 [ 41.372317][ T3855] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 41.403009][ T3855] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.119: bad orphan inode 15 [ 41.423309][ T28] kauditd_printk_skb: 195 callbacks suppressed [ 41.423325][ T28] audit: type=1400 audit(1781005882.360:718): avc: denied { listen } for pid=3862 comm="syz.1.122" lport=59579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.461365][ T3855] loop4: lost filesystem error report for type 5 error -117 [ 41.462947][ T3855] ext4_test_bit(bit=14, block=18) = 1 [ 41.470434][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 41.470462][ C1] EXT4-fs (loop4): initial error at time 1781005882: ext4_orphan_get:1423 [ 41.470493][ C1] EXT4-fs (loop4): last error at time 1781005882: ext4_orphan_get:1423 [ 41.527713][ T3856] syz.2.118 (3856): /proc/3854/oom_adj is deprecated, please use /proc/3854/oom_score_adj instead. [ 41.550065][ T28] audit: type=1400 audit(1781005882.440:719): avc: denied { accept } for pid=3862 comm="syz.1.122" lport=59579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.555340][ T3855] is_bad_inode(inode)=0 [ 41.586957][ T3855] NEXT_ORPHAN(inode)=1023 [ 41.590151][ T28] audit: type=1400 audit(1781005882.490:720): avc: denied { read } for pid=3862 comm="syz.1.122" lport=59579 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 41.598500][ T3855] max_ino=32 [ 41.633328][ T28] audit: type=1400 audit(1781005882.510:721): avc: denied { mounton } for pid=3867 comm="syz.3.123" path="/24/file0" dev="tmpfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.655670][ T3855] i_nlink=0 [ 41.656319][ T28] audit: type=1400 audit(1781005882.550:722): avc: denied { setopt } for pid=3862 comm="syz.1.122" lport=59579 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 41.665479][ T3855] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.119: bg 0: block 161: padding at end of block bitmap is not set [ 41.706965][ T3855] loop4: lost filesystem error report for type 5 error -117 [ 41.707455][ T3855] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 41.724893][ T3855] loop4: lost filesystem error report for type 5 error -117 [ 41.726795][ T3855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.746802][ T3855] ext2 filesystem being mounted at /18/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 41.852253][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.880899][ T3877] loop4: detected capacity change from 0 to 512 [ 41.892290][ T3877] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.909039][ T3877] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 41.924029][ T3877] System zones: 1-12 [ 41.930400][ T3877] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.943742][ T3877] EXT4-fs (loop4): 1 truncate cleaned up [ 41.949858][ T3877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.966893][ T28] audit: type=1400 audit(1781005882.900:723): avc: denied { write } for pid=3876 comm="syz.4.125" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.027828][ T28] audit: type=1400 audit(1781005882.900:724): avc: denied { read append open } for pid=3876 comm="syz.4.125" path="/19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.075511][ T28] audit: type=1400 audit(1781005882.960:725): avc: denied { ioctl } for pid=3876 comm="syz.4.125" path="/19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop4" ino=18 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.261677][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.336614][ T28] audit: type=1400 audit(1781005883.270:726): avc: denied { create } for pid=3891 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 42.362300][ T3892] netlink: 112 bytes leftover after parsing attributes in process `syz.2.131'. [ 42.445941][ T3860] Set syz1 is full, maxelem 65536 reached [ 42.459162][ T28] audit: type=1400 audit(1781005883.390:727): avc: denied { ioctl } for pid=3894 comm="syz.2.132" path="socket:[5848]" dev="sockfs" ino=5848 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.596395][ T3895] loop2: detected capacity change from 0 to 512 [ 42.667628][ T3895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.701069][ T3895] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.767443][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.279791][ T3913] loop2: detected capacity change from 0 to 1024 [ 43.291891][ T3913] EXT4-fs: Ignoring removed bh option [ 43.311252][ T3913] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (3163!=35945) [ 43.321348][ T3913] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.339521][ T3913] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.139: Invalid inode table block 0 in block_group 0 [ 43.360431][ T3913] loop2: lost filesystem error report for type 5 error -117 [ 43.360858][ T3913] EXT4-fs (loop2): Remounting filesystem read-only [ 43.374846][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 43.374879][ C1] EXT4-fs (loop2): initial error at time 1781005884: __ext4_get_inode_loc:4885 [ 43.374947][ C1] EXT4-fs (loop2): last error at time 1781005884: __ext4_get_inode_loc:4885 [ 43.418430][ T3913] EXT4-fs (loop2): get root inode failed [ 43.429104][ T3913] EXT4-fs (loop2): mount failed [ 43.616400][ T3917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 43.625839][ T3917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 43.692357][ T3919] loop1: detected capacity change from 0 to 512 [ 43.715268][ T3919] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.141: corrupted in-inode xattr: e_name out of bounds [ 43.781522][ T3919] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 43.781899][ T3919] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.141: couldn't read orphan inode 15 (err -117) [ 43.791370][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 43.791402][ C0] EXT4-fs (loop1): initial error at time 1781005884: ext4_iget_extra_inode:5128: inode 15 [ 43.791500][ C0] EXT4-fs (loop1): last error at time 1781005884: ext4_iget_extra_inode:5128: inode 15 [ 43.839229][ T3919] loop1: lost filesystem error report for type 5 error -117 [ 43.872296][ T3919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.906641][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.387800][ T3935] syzkaller0: entered promiscuous mode [ 44.393478][ T3935] syzkaller0: entered allmulticast mode [ 44.402347][ T3935] tipc: Started in network mode [ 44.407285][ T3935] tipc: Node identity 4271ebd3901f, cluster identity 4711 [ 44.415048][ T3935] tipc: Enabled bearer , priority 0 [ 44.422946][ T3934] tipc: Resetting bearer [ 44.431096][ T3934] tipc: Disabling bearer [ 44.453598][ T3939] loop4: detected capacity change from 0 to 2048 [ 44.482478][ T3939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.503899][ T3943] loop1: detected capacity change from 0 to 512 [ 44.510785][ T3943] EXT4-fs: dax option not supported [ 44.553732][ T3944] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 44.804473][ T3946] loop0: detected capacity change from 0 to 512 [ 44.831037][ T3946] EXT4-fs: Ignoring removed oldalloc option [ 44.845666][ T3946] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.878175][ T3946] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.150: invalid indirect mapped block 83886080 (level 1) [ 44.892752][ T3946] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 44.895797][ T3946] EXT4-fs (loop0): Remounting filesystem read-only [ 44.905578][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 44.905658][ C1] EXT4-fs (loop0): initial error at time 1781005885: ext4_free_branches:1023: inode 16 [ 44.905807][ C1] EXT4-fs (loop0): last error at time 1781005885: ext4_free_branches:1023: inode 16 [ 44.941972][ T3946] EXT4-fs (loop0): 1 orphan inode deleted [ 44.948019][ T3946] EXT4-fs (loop0): 1 truncate cleaned up [ 44.960522][ T3946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.983794][ T3946] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.047875][ T68] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 578 with error 28 [ 45.063642][ T68] EXT4-fs (loop4): This should not happen!! Data will be lost [ 45.063642][ T68] [ 45.073669][ T68] EXT4-fs (loop4): Total free blocks count 0 [ 45.079711][ T68] EXT4-fs (loop4): Free/Dirty block details [ 45.086023][ T68] EXT4-fs (loop4): free_blocks=4096 [ 45.091632][ T68] EXT4-fs (loop4): dirty_blocks=608 [ 45.097176][ T68] EXT4-fs (loop4): Block reservation details [ 45.103584][ T68] EXT4-fs (loop4): i_reserved_data_blocks=38 [ 45.112992][ T68] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 45.125829][ T3295] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 45.459671][ T3961] loop0: detected capacity change from 0 to 256 [ 45.511832][ T3915] Bluetooth: hci0: command 0x1003 tx timeout [ 45.514465][ T3533] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.531206][ T3961] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 45.544091][ T3961] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 45.555157][ T3961] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 45.561694][ T3963] loop2: detected capacity change from 0 to 512 [ 45.566839][ T3961] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 45.595273][ T3961] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 45.605848][ T3960] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 45.622262][ T3963] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.156: bg 0: block 169: padding at end of block bitmap is not set [ 45.642604][ T3963] loop2: lost filesystem error report for type 5 error -117 [ 45.642694][ T3960] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 45.649290][ T3963] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.156: Failed to acquire dquot type 0 [ 45.650125][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 45.675513][ T3963] loop2: lost filesystem error report for type 5 error -117 [ 45.677686][ C0] EXT4-fs (loop2): initial error at time 1781005886: ext4_validate_block_bitmap:441 [ 45.694395][ C0] EXT4-fs (loop2): last error at time 1781005886: ext4_validate_block_bitmap:441 [ 45.703740][ T3960] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 45.705395][ T3963] EXT4-fs (loop2): 1 truncate cleaned up [ 45.719403][ T3960] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 45.723497][ T3963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.730504][ T3960] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 45.742734][ T3963] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.796512][ T3971] netlink: 'syz.3.159': attribute type 3 has an invalid length. [ 45.823695][ T3971] netlink: 132 bytes leftover after parsing attributes in process `syz.3.159'. [ 45.976077][ T3963] syz.2.156 (3963) used greatest stack depth: 9432 bytes left [ 45.986103][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.417928][ T3977] loop3: detected capacity change from 0 to 512 [ 46.509615][ T3977] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 46.583167][ T3977] EXT4-fs (loop3): orphan cleanup on readonly fs [ 46.631280][ T3977] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 46.666733][ T3977] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 46.674461][ T3977] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.161: bad orphan inode 768 [ 46.685221][ T3977] loop3: lost filesystem error report for type 5 error -117 [ 46.701207][ T3977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.740579][ T3977] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 46.783774][ T3977] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 46.814952][ T3990] loop0: detected capacity change from 0 to 512 [ 46.859504][ T3990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.898455][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 46.898470][ T28] audit: type=1400 audit(1781005887.830:744): avc: denied { setattr } for pid=3988 comm="syz.0.165" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 47.028301][ T3996] netlink: 32 bytes leftover after parsing attributes in process `syz.4.166'. [ 47.075416][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.134428][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.149783][ T28] audit: type=1400 audit(1781005888.080:745): avc: denied { unmount } for pid=4003 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 47.224257][ T28] audit: type=1326 audit(1781005888.160:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3999 comm="syz.4.169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631713ce59 code=0x7ffc0000 [ 47.249988][ T28] audit: type=1326 audit(1781005888.160:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3999 comm="syz.4.169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631713ce59 code=0x7ffc0000 [ 47.298832][ T28] audit: type=1326 audit(1781005888.160:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3999 comm="syz.4.169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631713ce59 code=0x7ffc0000 [ 47.340902][ T28] audit: type=1326 audit(1781005888.160:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3999 comm="syz.4.169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631713ce59 code=0x7ffc0000 [ 47.367312][ T28] audit: type=1326 audit(1781005888.160:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3999 comm="syz.4.169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631713ce59 code=0x7ffc0000 [ 47.411444][ T28] audit: type=1326 audit(1781005888.160:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3999 comm="syz.4.169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f631713ce59 code=0x7ffc0000 [ 47.440427][ T28] audit: type=1326 audit(1781005888.210:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3999 comm="syz.4.169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f63170fd68e code=0x7ffc0000 [ 47.467264][ T28] audit: type=1326 audit(1781005888.220:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3999 comm="syz.4.169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f63170fd68e code=0x7ffc0000 [ 47.542365][ T4014] loop4: detected capacity change from 0 to 512 [ 47.574884][ T4014] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #3: comm syz.4.174: pblk 0 bad header/extent: invalid magic - magic 90a, entries 0, max 0(0), depth 0(0) [ 47.603642][ T4014] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 47.603922][ T4014] EXT4-fs error (device loop4): ext4_quota_enable:7228: comm syz.4.174: Bad quota inode: 3, type: 0 [ 47.613010][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 47.613031][ C0] EXT4-fs (loop4): initial error at time 1781005888: ext4_ext_check_inode:521: inode 3 [ 47.613079][ C0] EXT4-fs (loop4): last error at time 1781005888: ext4_ext_check_inode:521: inode 3 [ 47.661421][ T4014] loop4: lost filesystem error report for type 5 error -117 [ 47.662099][ T4014] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 47.694464][ T4014] EXT4-fs (loop4): mount failed [ 48.096530][ T4019] loop3: detected capacity change from 0 to 256 [ 48.112003][ T4019] vfat: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿ' [ 48.419537][ T4038] SET target dimension over the limit! [ 49.410724][ T4021] loop4: detected capacity change from 0 to 4096 [ 49.504508][ T4021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.611640][ T4051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.186'. [ 49.657227][ T4051] netlink: 28 bytes leftover after parsing attributes in process `syz.2.186'. [ 49.681760][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.710947][ T4051] syz_tun: entered promiscuous mode [ 49.750398][ T4051] syz_tun: left promiscuous mode [ 49.848727][ T4058] loop4: detected capacity change from 0 to 2048 [ 49.956160][ T4067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 50.022295][ T4058] loop4: unable to read partition table [ 50.023481][ T4069] loop1: detected capacity change from 0 to 512 [ 50.036064][ T4058] loop4: partition table beyond EOD, truncated [ 50.049616][ T4058] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 50.051193][ T4069] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.118355][ T4069] EXT4-fs (loop1): 1 truncate cleaned up [ 50.130623][ T2980] loop4: unable to read partition table [ 50.152178][ T2980] loop4: partition table beyond EOD, truncated [ 50.160878][ T4069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.194454][ T3383] IPVS: starting estimator thread 0... [ 50.257428][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.300508][ T4073] IPVS: using max 2352 ests per chain, 117600 per kthread [ 50.394792][ T4085] loop1: detected capacity change from 0 to 512 [ 50.403191][ T4085] EXT4-fs: Ignoring removed oldalloc option [ 50.415843][ T4085] EXT4-fs: Ignoring removed nobh option [ 50.433067][ T4085] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.200: iget: bad extra_isize 90 (inode size 256) [ 50.450918][ T4085] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 50.451807][ T4085] EXT4-fs (loop1): Remounting filesystem read-only [ 50.460968][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 50.460992][ C1] EXT4-fs (loop1): initial error at time 1781005891: ext4_xattr_inode_iget:441: inode 11 [ 50.461045][ C1] EXT4-fs (loop1): last error at time 1781005891: ext4_xattr_inode_iget:441: inode 11 [ 50.506574][ T4085] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 50.516888][ T4085] EXT4-fs (loop1): 1 orphan inode deleted [ 50.524297][ T4085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.650938][ T4094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.203'. [ 50.918457][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.971727][ T4099] veth1_to_bond: invalid flags given to default FDB implementation [ 52.053329][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 52.053345][ T28] audit: type=1400 audit(1781005892.990:786): avc: denied { map } for pid=4130 comm="syz.0.216" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 52.137142][ T28] audit: type=1400 audit(1781005892.990:787): avc: denied { read write } for pid=4130 comm="syz.0.216" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 52.335341][ T28] audit: type=1400 audit(1781005893.270:788): avc: denied { setopt } for pid=4146 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 52.375073][ T28] audit: type=1400 audit(1781005893.270:789): avc: denied { read } for pid=4140 comm="syz.3.220" path="socket:[7053]" dev="sockfs" ino=7053 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.446180][ T28] audit: type=1400 audit(1781005893.370:790): avc: denied { create } for pid=4153 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.503859][ T28] audit: type=1400 audit(1781005893.380:791): avc: denied { write } for pid=4153 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.706380][ T4177] loop4: detected capacity change from 0 to 4096 [ 52.717920][ T4177] EXT4-fs: Ignoring removed oldalloc option [ 52.734354][ T4177] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 52.747752][ T4177] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a04ec018, mo2=0002] [ 52.756231][ T4177] System zones: 0-5 [ 52.760601][ T4177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.778390][ T28] audit: type=1400 audit(1781005893.710:792): avc: denied { bind } for pid=4176 comm="syz.4.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.798397][ T28] audit: type=1400 audit(1781005893.710:793): avc: denied { name_bind } for pid=4176 comm="syz.4.229" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 52.820453][ T28] audit: type=1400 audit(1781005893.710:794): avc: denied { node_bind } for pid=4176 comm="syz.4.229" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 53.002192][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.337228][ T28] audit: type=1400 audit(1781005894.260:795): avc: denied { audit_write } for pid=4189 comm="syz.4.233" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.588779][ T4201] loop3: detected capacity change from 0 to 512 [ 53.599597][ T4201] EXT4-fs (loop3): orphan cleanup on readonly fs [ 53.608840][ T4201] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.237: bad orphan inode 15 [ 53.620991][ T4201] loop3: lost filesystem error report for type 5 error -117 [ 53.621208][ T4201] ext4_test_bit(bit=14, block=18) = 1 [ 53.633937][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 53.633960][ C1] EXT4-fs (loop3): initial error at time 1781005894: ext4_orphan_get:1423 [ 53.634007][ C1] EXT4-fs (loop3): last error at time 1781005894: ext4_orphan_get:1423 [ 53.674914][ T4201] is_bad_inode(inode)=0 [ 53.679225][ T4201] NEXT_ORPHAN(inode)=1023 [ 53.683706][ T4201] max_ino=32 [ 53.686973][ T4201] i_nlink=0 [ 53.691247][ T4201] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #15: comm syz.3.237: corrupted xattr block 19: e_value size too large [ 53.714904][ T4201] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.715146][ T4201] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 53.801180][ T4201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-2400-000000000000 ro without journal. Quota mode: none. [ 53.956757][ T4216] : port 1(ip6gretap0) entered blocking state [ 53.976075][ T4216] : port 1(ip6gretap0) entered disabled state [ 54.010473][ T4216] ip6gretap0: entered allmulticast mode [ 54.019153][ T4216] ip6gretap0: entered promiscuous mode [ 54.026903][ T3302] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /41/éq‰Y’3aK: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=4096, size=4096 fake=0 [ 54.057678][ T3302] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 54.077108][ T3302] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 54.080258][ T4220] ip6gretap0: left allmulticast mode [ 54.114587][ T4220] ip6gretap0: left promiscuous mode [ 54.125175][ T4220] : port 1(ip6gretap0) entered disabled state [ 54.351042][ T4208] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-2400-000000000000. [ 54.689465][ T30] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.824590][ T30] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.975522][ T30] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.261706][ T30] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.503145][ T30] bridge_slave_1: left allmulticast mode [ 55.530292][ T30] bridge_slave_1: left promiscuous mode [ 55.557106][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.597562][ T30] bridge_slave_0: left allmulticast mode [ 55.621389][ T30] bridge_slave_0: left promiscuous mode [ 55.651794][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.033061][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.043901][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.054208][ T30] bond0 (unregistering): Released all slaves [ 56.070274][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 56.103479][ T30] hsr_slave_0: left promiscuous mode [ 56.109529][ T30] hsr_slave_1: left promiscuous mode [ 56.115272][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.122976][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.130710][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.139107][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.150648][ T30] veth1_macvtap: left promiscuous mode [ 56.156393][ T30] veth0_macvtap: left promiscuous mode [ 56.162189][ T30] veth1_vlan: left promiscuous mode [ 56.167724][ T30] veth0_vlan: left promiscuous mode [ 56.250478][ T30] team0 (unregistering): Port device team_slave_1 removed [ 56.263530][ T30] team0 (unregistering): Port device team_slave_0 removed [ 56.678118][ T4232] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.689006][ T4232] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.699081][ T4232] bridge_slave_0: entered allmulticast mode [ 56.726452][ T4232] bridge_slave_0: entered promiscuous mode [ 56.771916][ T4232] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.798982][ T4232] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.809906][ T4232] bridge_slave_1: entered allmulticast mode [ 56.845451][ T4232] bridge_slave_1: entered promiscuous mode [ 57.150128][ T4232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.180301][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 57.180327][ T28] audit: type=1400 audit(1781005898.110:825): avc: denied { mount } for pid=4292 comm="syz.4.260" name="/" dev="ramfs" ino=8237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 57.235835][ T4232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.319885][ T28] audit: type=1400 audit(1781005898.240:826): avc: denied { getattr } for pid=4285 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.375455][ T4232] team0: Port device team_slave_0 added [ 57.402506][ T4232] team0: Port device team_slave_1 added [ 57.435604][ T28] audit: type=1400 audit(1781005898.250:827): avc: denied { execute } for pid=4292 comm="syz.4.260" path="/memory.swap.current" dev="ramfs" ino=8238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 57.472353][ T4232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.487687][ T4232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.523949][ T28] audit: type=1400 audit(1781005898.250:828): avc: denied { read } for pid=4296 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.556357][ T4232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.573740][ T28] audit: type=1400 audit(1781005898.250:829): avc: denied { open } for pid=4296 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.606643][ T4232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.627378][ T4232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.780841][ T28] audit: type=1400 audit(1781005898.340:830): avc: denied { write } for pid=4283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.804231][ T4232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.815045][ T28] audit: type=1400 audit(1781005898.340:831): avc: denied { create } for pid=4283 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.092205][ T3915] Bluetooth: hci0: command 0x1003 tx timeout [ 58.121360][ T3533] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 58.210122][ T28] audit: type=1400 audit(1781005898.340:832): avc: denied { write } for pid=4283 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2134 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.236174][ T28] audit: type=1400 audit(1781005898.340:833): avc: denied { append } for pid=4283 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2134 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.260272][ T28] audit: type=1400 audit(1781005899.080:834): avc: denied { write } for pid=4311 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.269149][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 58.292224][ T4232] hsr_slave_0: entered promiscuous mode [ 58.298595][ T4232] hsr_slave_1: entered promiscuous mode [ 58.304850][ T4232] debugfs: 'hsr0' already exists in 'hsr' [ 58.313446][ T4232] Cannot create hsr debugfs directory [ 58.431844][ T4232] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.452216][ T4232] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.460321][ T4232] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.531149][ T4232] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.538993][ T4232] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 58.547928][ T4232] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.556904][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 58.604784][ T4331] batadv0: entered promiscuous mode [ 58.610908][ T4331] macvlan2: entered allmulticast mode [ 58.617127][ T4331] batadv0: entered allmulticast mode [ 58.633764][ T4331] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 58.677810][ T4331] batadv0: left allmulticast mode [ 58.685210][ T4331] batadv0: left promiscuous mode [ 58.734804][ T4232] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 58.743886][ T4232] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.747539][ T4334] openvswitch: netlink: Message has 4 unknown bytes. [ 58.754622][ T4333] tipc: Enabled bearer , priority 10 [ 58.887127][ T4232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.913417][ T4232] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.931958][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.939068][ T360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.951598][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.958700][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.011841][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 59.084610][ T4368] loop4: detected capacity change from 0 to 128 [ 59.126736][ T4368] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.153091][ T4368] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.147847][ T9] tipc: Node number set to 3530484691 [ 61.176413][ T4232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.297180][ T4388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.272'. [ 61.329375][ T4399] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 61.369092][ T4232] veth0_vlan: entered promiscuous mode [ 61.387642][ T4232] veth1_vlan: entered promiscuous mode [ 61.438319][ T4232] veth0_macvtap: entered promiscuous mode [ 61.455207][ T4232] veth1_macvtap: entered promiscuous mode [ 61.480622][ T4232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.502855][ T4232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.526666][ T4378] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.540970][ T4378] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.562513][ T4378] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.580436][ T4378] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.641795][ T4426] loop1: detected capacity change from 0 to 764 [ 62.411428][ T4458] loop5: detected capacity change from 0 to 128 [ 62.927713][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 62.927727][ T28] audit: type=1400 audit(1781005903.860:862): avc: denied { setopt } for pid=4469 comm="syz.4.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.507893][ T4476] loop4: detected capacity change from 0 to 1024 [ 63.523325][ T4476] EXT4-fs: Ignoring removed orlov option [ 63.529674][ T4476] EXT4-fs: inline encryption not supported [ 63.556730][ T4484] netlink: 'syz.0.296': attribute type 12 has an invalid length. [ 63.565925][ T4484] netlink: 'syz.0.296': attribute type 29 has an invalid length. [ 63.576154][ T4484] netlink: 148 bytes leftover after parsing attributes in process `syz.0.296'. [ 63.585671][ T4484] netlink: 'syz.0.296': attribute type 1 has an invalid length. [ 63.598621][ T4484] netlink: 'syz.0.296': attribute type 2 has an invalid length. [ 63.607563][ T4484] netlink: 11 bytes leftover after parsing attributes in process `syz.0.296'. [ 63.644878][ T4476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.682298][ T28] audit: type=1400 audit(1781005904.620:863): avc: denied { write } for pid=4475 comm="syz.4.294" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.705101][ T28] audit: type=1400 audit(1781005904.620:864): avc: denied { add_name } for pid=4475 comm="syz.4.294" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.804983][ T4494] netlink: 27 bytes leftover after parsing attributes in process `syz.0.308'. [ 63.827032][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.078375][ T4509] tipc: Started in network mode [ 64.095822][ T4509] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 64.116894][ T4509] tipc: Enabled bearer , priority 10 [ 64.130733][ T4510] openvswitch: netlink: Message has 4 unknown bytes. [ 64.580961][ T4520] loop4: detected capacity change from 0 to 512 [ 64.665408][ T4520] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.812200][ T4520] EXT4-fs (loop4): 1 truncate cleaned up [ 64.833105][ T4520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.937493][ T28] audit: type=1400 audit(1781005905.870:865): avc: denied { listen } for pid=4519 comm="syz.4.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.042436][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.094539][ T4539] loop1: detected capacity change from 0 to 512 [ 65.110299][ T805] tipc: Node number set to 8432298 [ 65.124064][ T4539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.176281][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.523493][ T4561] tipc: Started in network mode [ 65.562355][ T4561] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 65.616984][ T4561] tipc: Enabled bearer , priority 10 [ 65.663973][ T4564] openvswitch: netlink: Message has 4 unknown bytes. [ 65.840766][ T28] audit: type=1326 audit(1781005906.720:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.5.320" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153c1fce59 code=0x7ffc0000 [ 65.866043][ T28] audit: type=1326 audit(1781005906.720:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.5.320" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153c1fce59 code=0x7ffc0000 [ 65.922249][ T28] audit: type=1326 audit(1781005906.720:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.5.320" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153c1fce59 code=0x7ffc0000 [ 65.954962][ T4572] : port 1(ip6gretap0) entered blocking state [ 65.967569][ T4572] : port 1(ip6gretap0) entered disabled state [ 65.978485][ T4572] ip6gretap0: entered allmulticast mode [ 65.986184][ T28] audit: type=1326 audit(1781005906.730:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.5.320" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153c1fce59 code=0x7ffc0000 [ 66.016617][ T4572] ip6gretap0: entered promiscuous mode [ 66.033812][ T4569] ip6gretap0: left allmulticast mode [ 66.047194][ T4569] ip6gretap0: left promiscuous mode [ 66.057128][ T28] audit: type=1326 audit(1781005906.730:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.5.320" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f153c1fce59 code=0x7ffc0000 [ 66.142321][ T4569] : port 1(ip6gretap0) entered disabled state [ 66.181679][ T28] audit: type=1326 audit(1781005906.730:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.5.320" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153c1fce59 code=0x7ffc0000 [ 66.730162][ T9] tipc: Node number set to 8432298 [ 67.128709][ T4590] loop5: detected capacity change from 0 to 512 [ 67.137228][ T4594] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 67.164986][ T4593] loop1: detected capacity change from 0 to 8192 [ 67.181889][ T4590] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.360881][ T4232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.427721][ T4608] tipc: Started in network mode [ 67.442228][ T4608] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 67.459725][ T4608] tipc: Enabled bearer , priority 10 [ 67.482758][ T4610] openvswitch: netlink: Message has 4 unknown bytes. [ 68.408617][ T4624] loop1: detected capacity change from 0 to 512 [ 68.464048][ T4624] EXT4-fs: Ignoring removed oldalloc option [ 68.652815][ T4624] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.758426][ T4624] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.339: invalid indirect mapped block 83886080 (level 1) [ 68.907125][ T4624] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 68.910176][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 68.925796][ C0] EXT4-fs (loop1): initial error at time 1781005909: ext4_free_branches:1023: inode 16 [ 68.935498][ C0] EXT4-fs (loop1): last error at time 1781005909: ext4_free_branches:1023: inode 16 [ 68.944479][ T3397] tipc: Node number set to 8432298 [ 68.945452][ T4624] EXT4-fs (loop1): Remounting filesystem read-only [ 68.985523][ T4624] EXT4-fs (loop1): 1 orphan inode deleted [ 68.991564][ T4624] EXT4-fs (loop1): 1 truncate cleaned up [ 69.010392][ T4624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.024805][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 69.024831][ T28] audit: type=1326 audit(1781005909.960:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.4.343" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f631713ce59 code=0x0 [ 69.064174][ T4624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.728798][ T4671] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.824832][ T4671] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.873973][ T4671] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.944587][ T4671] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.964948][ T4684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'. [ 69.983957][ T4684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'. [ 70.026124][ T30] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.041687][ T30] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.066089][ T30] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.083969][ T30] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.173289][ T28] audit: type=1400 audit(1781005911.110:928): avc: denied { create } for pid=4693 comm="syz.5.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 70.274028][ T28] audit: type=1400 audit(1781005911.210:929): avc: denied { write } for pid=4693 comm="syz.5.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 70.770192][ T4723] loop4: detected capacity change from 0 to 512 [ 70.803926][ T4723] EXT4-fs: Ignoring removed bh option [ 70.853786][ T4723] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 70.870064][ T4723] EXT4-fs (loop4): 1 truncate cleaned up [ 70.892875][ T4723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.917687][ T28] audit: type=1400 audit(1781005911.850:930): avc: denied { write } for pid=4720 comm="syz.4.370" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.000654][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.031841][ T28] audit: type=1400 audit(1781005911.890:931): avc: denied { ioctl } for pid=4720 comm="syz.4.370" path="/68/file1/file0/file0" dev="loop4" ino=13 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.118745][ T28] audit: type=1400 audit(1781005912.050:932): avc: denied { ioctl } for pid=4744 comm="syz.4.374" path="socket:[9557]" dev="sockfs" ino=9557 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.123459][ T4746] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 71.210807][ T4749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.383'. [ 71.251707][ T4746] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.260133][ T4746] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.520972][ T28] audit: type=1400 audit(1781005912.460:933): avc: denied { write } for pid=4738 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.655781][ T28] audit: type=1400 audit(1781005912.590:934): avc: denied { write } for pid=4755 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.763725][ T4764] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.837852][ T28] audit: type=1400 audit(1781005912.770:935): avc: denied { watch_reads } for pid=4770 comm="syz.1.379" path="/66" dev="tmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.866870][ T4764] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.919817][ T4764] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.972898][ T28] audit: type=1400 audit(1781005912.910:936): avc: denied { write } for pid=4772 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.057086][ T4764] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.117941][ T68] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.149221][ T30] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.185891][ T30] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.217180][ T30] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.699358][ T4823] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 72.770521][ T4825] loop4: detected capacity change from 0 to 512 [ 72.810739][ T4827] netlink: 'syz.0.389': attribute type 12 has an invalid length. [ 72.818733][ T4827] netlink: 132 bytes leftover after parsing attributes in process `syz.0.389'. [ 72.843832][ T4825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.971428][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.274070][ T4851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.391'. [ 74.037790][ T4870] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.097451][ T4870] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.177283][ T4870] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.236837][ T4870] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.302597][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.315687][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.327625][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.342331][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.489229][ T4876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.401'. [ 74.954680][ T4876] hsr_slave_1 (unregistering): left promiscuous mode [ 75.013609][ T4898] loop1: detected capacity change from 0 to 512 [ 75.036511][ T4900] syzkaller0: entered promiscuous mode [ 75.045103][ T4900] syzkaller0: entered allmulticast mode [ 75.080589][ T4898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.136299][ T4898] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.491784][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.568256][ T4917] infiniband syz2: set down [ 76.582173][ T4917] infiniband syz2: added ipvlan0 [ 76.633408][ T4917] RDS/IB: syz2: added [ 76.649181][ T4917] smc: adding ib device syz2 with port count 1 [ 76.672755][ T4917] smc: ib device syz2 port 1 has no pnetid [ 77.153540][ T4929] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.181039][ T4931] netlink: 56 bytes leftover after parsing attributes in process `syz.0.417'. [ 77.216056][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 77.216069][ T28] audit: type=1400 audit(1781005918.150:943): avc: denied { bind } for pid=4934 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.244104][ T4935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 77.370328][ T4929] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.384450][ T4935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.418'. [ 77.432838][ T28] audit: type=1400 audit(1781005918.360:944): avc: denied { setopt } for pid=4925 comm="syz.4.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.459756][ T4939] ip6t_rpfilter: unknown options [ 77.487755][ T4929] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.543206][ T4929] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.583730][ T4948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'. [ 77.604645][ T4946] bridge1: entered allmulticast mode [ 77.606809][ T4948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'. [ 77.637384][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.653133][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.670432][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.687641][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.765018][ T28] audit: type=1400 audit(1781005918.700:945): avc: denied { name_connect } for pid=4956 comm="syz.5.428" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 77.891353][ T4960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 77.907955][ T28] audit: type=1400 audit(1781005918.840:946): avc: denied { connect } for pid=4961 comm="syz.2.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.931203][ T4960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 77.991580][ T28] audit: type=1400 audit(1781005918.930:947): avc: denied { lock } for pid=4966 comm="syz.1.431" path="socket:[10122]" dev="sockfs" ino=10122 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 78.045742][ T4971] netlink: 'syz.2.433': attribute type 10 has an invalid length. [ 78.067374][ T4971] team0 (unregistering): Port device team_slave_0 removed [ 78.076170][ T4971] team0 (unregistering): Port device team_slave_1 removed [ 78.163484][ T4975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.434'. [ 78.184072][ T4977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'. [ 78.200324][ T28] audit: type=1400 audit(1781005919.120:948): avc: denied { write } for pid=4976 comm="syz.0.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.857269][ T4994] loop5: detected capacity change from 0 to 512 [ 78.898897][ T4994] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.993626][ T4994] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 79.056564][ T4994] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.441: bg 0: block 248: padding at end of block bitmap is not set [ 79.134749][ T4994] loop5: lost filesystem error report for type 5 error -117 [ 79.135597][ T4994] Quota error (device loop5): write_blk: dquota write failed [ 79.142961][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 79.142985][ C0] EXT4-fs (loop5): last error at time 1781005920: ext4_validate_block_bitmap:441 [ 79.355355][ T4972] syz.1.434 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 79.410160][ T28] audit: type=1400 audit(1781005920.340:949): avc: denied { mount } for pid=4998 comm="syz.0.442" name="/" dev="configfs" ino=2067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 79.440884][ T4994] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 79.453501][ T4972] CPU: 0 UID: 0 PID: 4972 Comm: syz.1.434 Not tainted syzkaller #0 PREEMPT(lazy) [ 79.453606][ T4972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 79.453621][ T4972] Call Trace: [ 79.453631][ T4972] [ 79.453639][ T4972] __dump_stack+0x1d/0x30 [ 79.453666][ T4972] dump_stack_lvl+0x95/0xd0 [ 79.453729][ T4972] dump_stack+0x15/0x1b [ 79.453747][ T4972] dump_header+0x80/0x240 [ 79.453824][ T4972] oom_kill_process+0x295/0x350 [ 79.453861][ T4972] out_of_memory+0x97d/0xb80 [ 79.453896][ T4972] try_charge_memcg+0x62f/0xa10 [ 79.453937][ T4972] charge_memcg+0x6d/0x120 [ 79.453961][ T4972] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 79.454043][ T4972] __swap_cache_prepare_and_add+0x69/0x4a0 [ 79.454104][ T4972] ? alloc_pages_mpol+0x217/0x260 [ 79.454145][ T4972] swap_cache_alloc_folio+0xa2/0x120 [ 79.454174][ T4972] swap_cluster_readahead+0x25f/0x3c0 [ 79.454203][ T4972] swapin_readahead+0xde/0x840 [ 79.454243][ T4972] ? __rcu_read_unlock+0x4e/0x70 [ 79.454268][ T4972] ? swap_cache_get_folio+0x1e0/0x1f0 [ 79.454297][ T4972] do_swap_page+0x31e/0x2180 [ 79.454365][ T4972] ? __rcu_read_lock+0x36/0x50 [ 79.454384][ T4972] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 79.454411][ T4972] handle_mm_fault+0xb30/0x2e70 [ 79.454441][ T4972] ? irqentry_exit+0x7d/0x5d0 [ 79.454506][ T4972] ? rcu_read_unlock_special+0x9f/0x200 [ 79.454538][ T4972] do_user_addr_fault+0x62f/0x1050 [ 79.454574][ T4972] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 79.454639][ T4972] ? trace_page_fault_user+0x1f/0xa0 [ 79.454667][ T4972] exc_page_fault+0x62/0xa0 [ 79.454696][ T4972] asm_exc_page_fault+0x26/0x30 [ 79.454720][ T4972] RIP: 0033:0x7fb408d6559e [ 79.454737][ T4972] Code: e9 27 6a 13 00 0f 1f 80 00 00 00 00 48 83 c4 28 48 c7 c0 ff ff ff ff 5b 5d c3 66 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 38 <80> 3d 5b ca 3a 00 00 89 7c 24 18 48 89 74 24 28 0f 85 cd 09 00 00 [ 79.454824][ T4972] RSP: 002b:00007fff49e09c30 EFLAGS: 00010206 [ 79.454842][ T4972] RAX: 00007fb409115fa0 RBX: 00007fb409115fa0 RCX: 0000000000000026 [ 79.454856][ T4972] RDX: 0000000000000001 RSI: 00007fb409116038 RDI: 0000000000000003 [ 79.454868][ T4972] RBP: 00007fb409117da0 R08: 0000000000000000 R09: 0000000000000001 [ 79.454880][ T4972] R10: 0000000000000026 R11: 0000000000000246 R12: 000000000001341e [ 79.454941][ T4972] R13: 00007fb40911609c R14: 0000000000013171 R15: 00007fff49e09da0 [ 79.454959][ T4972] [ 79.459420][ T4972] memory: usage 307200kB, limit 307200kB, failcnt 276 [ 79.726752][ T28] audit: type=1400 audit(1781005920.340:950): avc: denied { search } for pid=4998 comm="syz.0.442" name="/" dev="configfs" ino=2067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 79.762747][ T4994] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.441: Failed to acquire dquot type 1 [ 79.797804][ T4994] loop5: lost filesystem error report for type 5 error -28 [ 79.923041][ T4994] EXT4-fs (loop5): 1 truncate cleaned up [ 80.131799][ T4994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 80.192081][ T4972] memory+swap: usage 216208kB, limit 9007199254740988kB, failcnt 0 [ 80.207379][ T4972] kmem: usage 215780kB, limit 9007199254740988kB, failcnt 0 [ 80.223291][ T4972] Memory cgroup stats for /syz1: [ 80.223522][ T4972] cache 0 [ 80.236643][ T5003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'. [ 80.248439][ T4972] rss 0 [ 80.261540][ T4972] shmem 0 [ 80.268825][ T4972] mapped_file 0 [ 80.272572][ T4972] dirty 0 [ 80.274015][ T4994] syz.5.441 (4994) used greatest stack depth: 9128 bytes left [ 80.276842][ T4972] writeback 0 [ 80.284127][ T4232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 80.286455][ T4972] workingset_refault_anon 3095 [ 80.300365][ T4972] workingset_refault_file 258 [ 80.305149][ T4972] swap 184320 [ 80.308729][ T4972] swapcached 12877824 [ 80.318973][ T4972] pgpgin 45276 [ 80.322909][ T4972] pgpgout 45273 [ 80.326388][ T4972] pgfault 53826 [ 80.329899][ T4972] pgmajfault 405 [ 80.333619][ T4972] inactive_anon 12288 [ 80.337633][ T4972] active_anon 0 [ 80.347629][ T4972] inactive_file 0 [ 80.353506][ T4972] active_file 0 [ 80.357157][ T4972] unevictable 0 [ 80.360849][ T4972] hierarchical_memory_limit 314572800 [ 80.366341][ T4972] hierarchical_memsw_limit 9223372036854771712 [ 80.386112][ T4972] total_cache 0 [ 80.392882][ T4972] total_rss 0 [ 80.410130][ T4972] total_shmem 0 [ 80.412953][ T5020] loop4: detected capacity change from 0 to 128 [ 80.417885][ T4972] total_mapped_file 0 [ 80.433638][ T4972] total_dirty 0 [ 80.441625][ T4972] total_writeback 0 [ 80.448870][ T4972] total_workingset_refault_anon 3095 [ 80.460227][ T4972] total_workingset_refault_file 258 [ 80.470372][ T4972] total_swap 184320 [ 80.480301][ T4972] total_swapcached 12877824 [ 80.487929][ T4972] total_pgpgin 46301 [ 80.496414][ T4972] total_pgpgout 46298 [ 80.507906][ T4972] total_pgfault 54855 [ 80.515173][ T4972] total_pgmajfault 405 [ 80.523234][ T4972] total_inactive_anon 12288 [ 80.534915][ T4972] total_active_anon 0 [ 80.542450][ T4972] total_inactive_file 0 [ 80.552137][ T4972] total_active_file 0 [ 80.561118][ T4972] total_unevictable 0 [ 80.569129][ T4972] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.434,pid=4972,uid=0 [ 80.584897][ T4972] Memory cgroup out of memory: Killed process 4972 (syz.1.434) total-vm:94168kB, anon-rss:1236kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 81.228646][ T5035] loop1: detected capacity change from 0 to 512 [ 81.263184][ T5035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.275728][ T5035] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.429507][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.585005][ T5053] loop4: detected capacity change from 0 to 512 [ 81.609673][ T5053] EXT4-fs: Ignoring removed bh option [ 81.627588][ T5053] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 81.642725][ T5053] EXT4-fs (loop4): 1 truncate cleaned up [ 81.659159][ T5053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.697385][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.230595][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 82.230608][ T28] audit: type=1400 audit(1781005923.170:956): avc: denied { mounton } for pid=5070 comm="syz.4.465" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 82.256027][ T5069] __nla_validate_parse: 1 callbacks suppressed [ 82.256065][ T5069] netlink: 8 bytes leftover after parsing attributes in process `syz.5.460'. [ 82.261110][ T5071] netlink: 16 bytes leftover after parsing attributes in process `syz.4.465'. [ 82.269153][ T5067] netlink: 104 bytes leftover after parsing attributes in process `syz.2.463'. [ 82.286442][ T5071] ip6erspan0: entered allmulticast mode [ 82.295471][ T5069] netlink: 8 bytes leftover after parsing attributes in process `syz.5.460'. [ 82.389953][ T5074] loop5: detected capacity change from 0 to 1024 [ 82.396667][ T28] audit: type=1400 audit(1781005923.320:957): avc: denied { setopt } for pid=5078 comm="syz.4.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.406033][ T5074] EXT4-fs: inline encryption not supported [ 82.441413][ T5074] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.465531][ T5081] sg_write: data in/out 37854/658 bytes for SCSI command 0x0-- guessing data in; [ 82.465531][ T5081] program syz.4.469 not setting count and/or reply_len properly [ 82.487196][ T5074] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.466: lblock 2 mapped to illegal pblock 2 (length 1) [ 82.502855][ T5074] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 82.508184][ T5074] EXT4-fs (loop5): Remounting filesystem read-only [ 82.511133][ T28] audit: type=1400 audit(1781005923.440:958): avc: denied { ioctl } for pid=5080 comm="syz.4.469" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.517665][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 82.555889][ C1] EXT4-fs (loop5): initial error at time 1781005923: ext4_map_blocks:791: inode 3: block 2 [ 82.566136][ C1] EXT4-fs (loop5): last error at time 1781005923: ext4_map_blocks:791: inode 3: block 2 [ 82.576738][ T5074] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 82.585804][ T5074] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 82.595386][ T5074] EXT4-fs (loop5): 1 orphan inode deleted [ 82.603154][ T5074] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.630889][ T5093] loop4: detected capacity change from 0 to 512 [ 82.657754][ T5093] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.476: attempt to clear invalid blocks 2 len 1 [ 82.671721][ T4232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.672035][ T5093] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 82.681636][ T5093] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, [ 82.690806][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 82.690827][ C0] EXT4-fs (loop4): initial error at time 1781005923: ext4_clear_blocks:876: inode 13 [ 82.690858][ C0] EXT4-fs (loop4): last error at time 1781005923: ext4_clear_blocks:876: inode 13 [ 82.724470][ T5093] block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 82.734242][ T5093] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.476: invalid indirect mapped block 1819239214 (level 0) [ 82.748389][ T5093] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 82.748671][ T5093] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.476: invalid indirect mapped block 1819239214 (level 1) [ 82.772184][ T5093] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 82.772575][ T5093] EXT4-fs (loop4): 1 truncate cleaned up [ 82.788148][ T5093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.820833][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.889573][ T28] audit: type=1326 audit(1781005923.820:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5103 comm="syz.2.479" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f32c956ce59 code=0x0 [ 82.932088][ T5106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.480'. [ 82.942847][ T5106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.480'. [ 82.983025][ T28] audit: type=1400 audit(1781005923.920:960): avc: denied { read } for pid=5108 comm="syz.4.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.032785][ T28] audit: type=1400 audit(1781005923.970:961): avc: denied { name_bind } for pid=5108 comm="syz.4.481" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 83.071261][ T5112] syz_tun: entered allmulticast mode [ 83.083933][ T5112] bond0: entered promiscuous mode [ 83.089102][ T5112] bond_slave_0: entered promiscuous mode [ 83.094970][ T5112] bond_slave_1: entered promiscuous mode [ 83.129241][ T28] audit: type=1400 audit(1781005924.060:962): avc: denied { name_bind } for pid=5113 comm="syz.1.483" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 83.734049][ T5124] netlink: 'syz.2.488': attribute type 4 has an invalid length. [ 83.748481][ T5126] netlink: 'syz.5.487': attribute type 1 has an invalid length. [ 83.763400][ T5124] netlink: 'syz.2.488': attribute type 4 has an invalid length. [ 83.784391][ T5126] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.830650][ T5128] vlan2: entered allmulticast mode [ 83.844810][ T5128] bond1: entered allmulticast mode [ 83.887571][ T5126] bond1: (slave geneve2): making interface the new active one [ 83.915794][ T5126] geneve2: entered allmulticast mode [ 83.934837][ T5126] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 84.016768][ T28] audit: type=1400 audit(1781005924.950:963): avc: denied { write } for pid=5136 comm="syz.1.492" laddr=::1 lport=41198 faddr=::1 fport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.070741][ T5141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.493'. [ 84.189251][ T5145] netlink: 'syz.1.494': attribute type 1 has an invalid length. [ 84.238251][ T5147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.495'. [ 84.271466][ T5147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.495'. [ 84.330075][ T5150] vlan2: entered promiscuous mode [ 84.335358][ T5150] bridge1: entered promiscuous mode [ 84.341515][ T5150] vlan2: entered allmulticast mode [ 84.345034][ T5149] vcan0: tx drop: invalid sa for name 0x0000000000010000 [ 84.355895][ T5150] bridge1: entered allmulticast mode [ 86.051816][ T5173] loop1: detected capacity change from 0 to 512 [ 86.140073][ T5173] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.504: bg 0: block 127: padding at end of block bitmap is not set [ 86.195271][ T5173] loop1: lost filesystem error report for type 5 error -117 [ 86.195908][ T5173] ------------[ cut here ]------------ [ 86.203257][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 86.203274][ C0] EXT4-fs (loop1): initial error at time 1781005927: ext4_validate_block_bitmap:441 [ 86.203311][ C0] EXT4-fs (loop1): last error at time 1781005927: ext4_validate_block_bitmap:441 [ 86.233824][ T5173] EA inode 11 i_nlink=0 [ 86.233853][ T5173] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.1.504/5173 [ 86.248688][ T5173] Modules linked in: [ 86.252644][ T5173] CPU: 0 UID: 0 PID: 5173 Comm: syz.1.504 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.261905][ T5173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 86.271998][ T5173] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 86.278668][ T5173] Code: 24 52 98 ff 4c 8d 2d 4d 5f 5c 05 49 8d 7e 40 e8 e4 14 b6 ff 49 8b 6e 40 4c 89 e7 e8 18 10 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 8f 94 d8 03 66 66 66 66 66 66 2e [ 86.298382][ T5173] RSP: 0018:ffffc90000fb3778 EFLAGS: 00010246 [ 86.304497][ T5173] RAX: ffff8881021c0b00 RBX: ffff8881006cde58 RCX: ffffffff81c0e2b8 [ 86.312503][ T5173] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871d41f0 [ 86.320527][ T5173] RBP: 000000000000000b R08: 00018881006cde0b R09: 0000000000000000 [ 86.328502][ T5173] R10: ffffc90000fb36a8 R11: 0001c90000fb36a8 R12: ffff8881006cde08 [ 86.336502][ T5173] R13: ffffffff871d41f0 R14: ffff8881006cddc0 R15: 0000000000000001 [ 86.344501][ T5173] FS: 00007fb4078ef6c0(0000) GS:ffff8882ae8f6000(0000) knlGS:0000000000000000 [ 86.353504][ T5173] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.360109][ T5173] CR2: 0000200000001000 CR3: 000000011f6ec000 CR4: 00000000003506f0 [ 86.368094][ T5173] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.376165][ T5173] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 86.384175][ T5173] Call Trace: [ 86.387448][ T5173] [ 86.390436][ T5173] ext4_xattr_inode_dec_ref_all+0x57c/0x8b0 [ 86.396365][ T5173] ? errseq_check+0x2c/0x50 [ 86.400952][ T5173] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 86.406433][ T5173] ext4_evict_inode+0xb16/0xe30 [ 86.411323][ T5173] ? __pfx_ext4_evict_inode+0x10/0x10 [ 86.416717][ T5173] evict+0x2af/0x510 [ 86.420801][ T5173] ? __dquot_initialize+0x146/0x7c0 [ 86.426039][ T5173] iput+0x41a/0x580 [ 86.429857][ T5173] ext4_process_orphan+0x1a9/0x1c0 [ 86.435059][ T5173] ext4_orphan_cleanup+0x69c/0x9f0 [ 86.440234][ T5173] ext4_fill_super+0x3408/0x37c0 [ 86.445180][ T5173] ? set_blocksize+0x14c/0x270 [ 86.449960][ T5173] ? setup_bdev_super+0x30e/0x370 [ 86.455069][ T5173] ? __pfx_ext4_fill_super+0x10/0x10 [ 86.460440][ T5173] get_tree_bdev_flags+0x291/0x300 [ 86.465570][ T5173] ? __pfx_ext4_fill_super+0x10/0x10 [ 86.470905][ T5173] get_tree_bdev+0x1f/0x30 [ 86.475327][ T5173] ext4_get_tree+0x1c/0x30 [ 86.479821][ T5173] vfs_get_tree+0x57/0x1d0 [ 86.484379][ T5173] do_new_mount+0x288/0x8d0 [ 86.488958][ T5173] path_mount+0x4d0/0xbc0 [ 86.493322][ T5173] __se_sys_mount+0x28c/0x2e0 [ 86.498024][ T5173] __x64_sys_mount+0x67/0x80 [ 86.502696][ T5173] x64_sys_call+0x2d61/0x3020 [ 86.507383][ T5173] do_syscall_64+0x12c/0x3b0 [ 86.512032][ T5173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.518017][ T5173] RIP: 0033:0x7fb408e9e0ca [ 86.522451][ T5173] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.542094][ T5173] RSP: 002b:00007fb4078eee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 86.550546][ T5173] RAX: ffffffffffffffda RBX: 00007fb4078eeee0 RCX: 00007fb408e9e0ca [ 86.558522][ T5173] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fb4078eeea0 [ 86.566586][ T5173] RBP: 0000200000000180 R08: 00007fb4078eeee0 R09: 0000000000000000 [ 86.574596][ T5173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 86.582602][ T5173] R13: 00007fb4078eeea0 R14: 000000000000047a R15: 00002000000001c0 [ 86.590665][ T5173] [ 86.593682][ T5173] ---[ end trace 0000000000000000 ]--- [ 86.627539][ T5173] EXT4-fs error (device loop1): ext4_free_inode:354: comm syz.1.504: bit already cleared for inode 11 [ 86.638556][ T5173] loop1: lost filesystem error report for type 5 error -117 [ 86.639511][ T5173] EXT4-fs (loop1): 1 orphan inode deleted [ 86.650055][ T5179] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 86.653088][ T5173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.857741][ T5186] netlink: 'syz.4.509': attribute type 1 has an invalid length. [ 86.866395][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.007330][ T5191] bond1: entered promiscuous mode [ 87.023898][ T5191] bond1: entered allmulticast mode [ 87.029196][ T5191] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.112587][ T5197] netlink: 12 bytes leftover after parsing attributes in process `syz.5.508'. [ 87.227203][ T5186] bridge1: entered promiscuous mode [ 87.233120][ T5186] bridge1: entered allmulticast mode [ 87.239621][ T5186] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 87.250053][ T39] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 87.400767][ T5186] bridge2: entered promiscuous mode [ 87.412035][ T30] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 87.424861][ T5186] bridge2: entered allmulticast mode [ 87.438040][ T5186] bond1: (slave bridge2): Enslaving as a backup interface with a down link [ 87.521559][ T5186] bridge3: entered promiscuous mode [ 87.529185][ T5186] bridge3: entered allmulticast mode [ 87.546067][ T5186] bond1: (slave bridge3): Enslaving as a backup interface with a down link [ 88.154532][ T5205] syzkaller0: entered promiscuous mode [ 88.197864][ T5205] syzkaller0: entered allmulticast mode [ 91.131879][ T5234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.522'. [ 91.300361][ T5236] netlink: 'syz.1.523': attribute type 4 has an invalid length. [ 91.975709][ T5238] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 92.027677][ T5260] netlink: 'syz.1.529': attribute type 4 has an invalid length. [ 92.045065][ T5260] netlink: 'syz.1.529': attribute type 4 has an invalid length. [ 92.198222][ T5263] loop1: detected capacity change from 0 to 764 [ 92.244737][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 92.244767][ T28] audit: type=1400 audit(1781005933.180:965): avc: denied { ioctl } for pid=5266 comm="syz.5.533" path="socket:[10799]" dev="sockfs" ino=10799 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 92.640521][ T5273] Cannot find add_set index 0 as target [ 94.587834][ T5286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.538'. [ 96.881658][ T5302] netlink: 'syz.4.543': attribute type 4 has an invalid length. [ 96.923326][ T5302] netlink: 'syz.4.543': attribute type 4 has an invalid length. [ 96.997069][ T5310] syzkaller1: entered promiscuous mode [ 97.011291][ T5310] syzkaller1: entered allmulticast mode [ 97.448255][ T5304] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 97.803573][ T5326] syzkaller0: entered promiscuous mode [ 97.846479][ T5326] syzkaller0: entered allmulticast mode [ 98.371935][ T5335] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 98.671019][ T35] IPVS: starting estimator thread 0... [ 98.760173][ T5340] IPVS: using max 2352 ests per chain, 117600 per kthread [ 98.761204][ T28] audit: type=1400 audit(1781006195.693:966): avc: denied { setopt } for pid=5341 comm="syz.0.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.837175][ T5344] loop5: detected capacity change from 0 to 256 [ 98.923270][ T5344] FAT-fs (loop5): Directory bread(block 64) failed [ 98.938720][ T5346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.561'. [ 98.949675][ T5344] FAT-fs (loop5): Directory bread(block 65) failed [ 98.965422][ T5344] FAT-fs (loop5): Directory bread(block 66) failed [ 98.977911][ T5344] FAT-fs (loop5): Directory bread(block 67) failed [ 98.985245][ T5344] FAT-fs (loop5): Directory bread(block 68) failed [ 98.992878][ T5344] FAT-fs (loop5): Directory bread(block 69) failed [ 99.001080][ T5344] FAT-fs (loop5): Directory bread(block 70) failed [ 99.008420][ T5344] FAT-fs (loop5): Directory bread(block 71) failed [ 99.017221][ T5344] FAT-fs (loop5): Directory bread(block 72) failed [ 99.024241][ T5344] FAT-fs (loop5): Directory bread(block 73) failed [ 99.127717][ T28] audit: type=1326 audit(1781006196.053:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.5.564" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153c1fce59 code=0x7ffc0000 [ 99.166596][ T5355] loop5: detected capacity change from 0 to 512 [ 99.175250][ T5355] msdos: Bad value for 'uid' [ 99.181428][ T28] audit: type=1326 audit(1781006196.083:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.5.564" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153c1fce59 code=0x7ffc0000 [ 99.211816][ T5355] msdos: Bad value for 'uid' [ 99.224043][ T28] audit: type=1326 audit(1781006196.083:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.5.564" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153c1fce59 code=0x7ffc0000 [ 99.250632][ T28] audit: type=1326 audit(1781006196.083:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.5.564" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f153c1fce59 code=0x7ffc0000 [ 99.276836][ T28] audit: type=1326 audit(1781006196.083:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.5.564" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153c1fce59 code=0x7ffc0000 [ 99.302761][ T28] audit: type=1326 audit(1781006196.083:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.5.564" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153c1fce59 code=0x7ffc0000 [ 99.328409][ T28] audit: type=1326 audit(1781006196.083:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.5.564" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153c1fce59 code=0x7ffc0000 [ 99.354496][ T28] audit: type=1326 audit(1781006196.083:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.5.564" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153c1fce59 code=0x7ffc0000 [ 99.380291][ T28] audit: type=1326 audit(1781006196.083:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.5.564" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153c1fce59 code=0x7ffc0000 [ 99.403617][ T5333] loop4: detected capacity change from 0 to 4096 [ 99.484232][ T5333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.536331][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.572432][ T9] IPVS: starting estimator thread 0... [ 99.660228][ T5369] IPVS: using max 2352 ests per chain, 117600 per kthread [ 101.022641][ T5395] loop1: detected capacity change from 0 to 1024 [ 101.031181][ T5395] EXT4-fs: Ignoring removed bh option [ 101.521953][ T5395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.580853][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.941035][ T9] IPVS: starting estimator thread 0... [ 102.052936][ T5414] IPVS: using max 2352 ests per chain, 117600 per kthread [ 102.069412][ T5418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5418 comm=syz.2.585 [ 102.082012][ T5418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5418 comm=syz.2.585 [ 102.094356][ T5418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5418 comm=syz.2.585 [ 102.102620][ T5406] loop1: detected capacity change from 0 to 1024 [ 102.106759][ T5418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5418 comm=syz.2.585 [ 102.109400][ T5418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5418 comm=syz.2.585 [ 102.138232][ T5418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5418 comm=syz.2.585 [ 102.150578][ T5418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5418 comm=syz.2.585 [ 102.163050][ T5418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5418 comm=syz.2.585 [ 102.175538][ T5418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5418 comm=syz.2.585 [ 102.175637][ T5406] EXT4-fs: Ignoring removed orlov option [ 102.187912][ T5418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5418 comm=syz.2.585 [ 102.302145][ T5406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.415593][ T5406] netlink: 'syz.1.578': attribute type 3 has an invalid length. [ 102.433039][ T5406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 102.481269][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.504460][ T5400] loop5: detected capacity change from 0 to 4096 [ 102.539807][ T5427] loop1: detected capacity change from 0 to 512 [ 102.554272][ T5427] msdos: Bad value for 'uid' [ 102.565347][ T5400] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.585438][ T5427] msdos: Bad value for 'uid' [ 102.671072][ T4232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.785010][ T5432] loop1: detected capacity change from 0 to 128 [ 104.699092][ T3367] IPVS: starting estimator thread 0... [ 104.719240][ T28] kauditd_printk_skb: 184 callbacks suppressed [ 104.719258][ T28] audit: type=1326 audit(1781006201.643:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5455 comm="syz.0.606" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27347ece59 code=0x0 [ 104.824932][ T5462] batadv0: entered promiscuous mode [ 104.830875][ T5462] macvlan2: entered allmulticast mode [ 104.836946][ T5462] batadv0: entered allmulticast mode [ 104.844076][ T5458] IPVS: using max 2352 ests per chain, 117600 per kthread [ 104.853627][ T5468] loop4: detected capacity change from 0 to 512 [ 104.864912][ T5468] EXT4-fs: Ignoring removed i_version option [ 104.871882][ T5462] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 104.879332][ T5468] EXT4-fs: Ignoring removed nobh option [ 104.892993][ T5468] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 104.905278][ T5468] EXT4-fs (loop4): 1 truncate cleaned up [ 104.908360][ T5462] batadv0: left allmulticast mode [ 104.914497][ T5468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.930927][ T5462] batadv0: left promiscuous mode [ 105.118850][ T28] audit: type=1400 audit(1781006202.043:1162): avc: denied { create } for pid=5472 comm="syz.5.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 105.127414][ T5475] netlink: 'syz.5.602': attribute type 1 has an invalid length. [ 105.168629][ T28] audit: type=1400 audit(1781006202.043:1161): avc: denied { setopt } for pid=5473 comm="syz.2.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.197898][ T28] audit: type=1400 audit(1781006202.123:1163): avc: denied { write } for pid=5467 comm="syz.4.601" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.291406][ T28] audit: type=1400 audit(1781006202.153:1164): avc: denied { write } for pid=5467 comm="syz.4.601" path="/114/bus/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 105.542402][ T5481] 8021q: adding VLAN 0 to HW filter on device bond3 [ 105.579154][ T5481] bond2: (slave bond3): making interface the new active one [ 105.586853][ T5481] bond2: (slave bond3): Enslaving as an active interface with an up link [ 105.612612][ T5475] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.630888][ T5482] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 105.729498][ T5487] loop5: detected capacity change from 0 to 764 [ 105.766039][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.802280][ T5489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.608'. [ 105.880900][ T5489] bond1: entered promiscuous mode [ 105.889369][ T5497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'. [ 105.907200][ T5489] bond1: entered allmulticast mode [ 106.126421][ T28] audit: type=1400 audit(1781006203.053:1165): avc: denied { write } for pid=5505 comm="syz.4.612" name="cgroup.subtree_control" dev="cgroup2" ino=327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.196487][ T5503] netlink: 'syz.1.610': attribute type 1 has an invalid length. [ 106.444032][ T5512] loop4: detected capacity change from 0 to 1024 [ 106.500563][ T5512] EXT4-fs: Ignoring removed bh option [ 106.612911][ T5512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.728592][ T5514] macvlan2: entered allmulticast mode [ 106.749182][ T5512] EXT4-fs (loop4): shut down requested (0) [ 106.778478][ T5514] batadv0: entered allmulticast mode [ 106.961403][ T5520] EXT4-fs error (device loop4): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.4.613: path /117/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 106.996961][ T5514] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 107.019993][ T5514] batadv0: left allmulticast mode [ 107.034191][ T5520] EXT4-fs (loop4): Remounting filesystem read-only [ 107.072938][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.110775][ T28] audit: type=1400 audit(1781006203.053:1166): avc: denied { open } for pid=5505 comm="syz.4.612" path="" dev="cgroup2" ino=327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.133710][ T28] audit: type=1400 audit(1781006203.713:1167): avc: denied { read } for pid=2962 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 107.782664][ T28] audit: type=1400 audit(1781006203.713:1168): avc: denied { search } for pid=2962 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.804366][ T28] audit: type=1400 audit(1781006203.713:1169): avc: denied { write search } for pid=2962 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.841674][ T5542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.625'. [ 107.878847][ T5542] bond2: entered promiscuous mode [ 107.890325][ T5542] bond2: entered allmulticast mode [ 107.913419][ T5549] loop5: detected capacity change from 0 to 512 [ 107.925523][ T5549] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.628: bg 0: block 127: padding at end of block bitmap is not set [ 107.963085][ T5549] loop5: lost filesystem error report for type 5 error -117 [ 107.963431][ T5549] EXT4-fs error (device loop5): ext4_free_inode:354: comm syz.5.628: bit already cleared for inode 11 [ 107.970794][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 107.970815][ C0] EXT4-fs (loop5): initial error at time 1781006204: ext4_validate_block_bitmap:441 [ 107.970849][ C0] EXT4-fs (loop5): last error at time 1781006204: ext4_validate_block_bitmap:441 [ 108.007039][ T5549] loop5: lost filesystem error report for type 5 error -117 [ 108.007632][ T5549] EXT4-fs (loop5): 1 orphan inode deleted [ 108.021461][ T5549] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.028557][ T5554] batadv0: entered promiscuous mode [ 108.046231][ T5554] macvlan2: entered allmulticast mode [ 108.052190][ T5554] batadv0: entered allmulticast mode [ 108.063566][ T5554] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 108.081068][ T5554] batadv0: left allmulticast mode [ 108.086557][ T5554] batadv0: left promiscuous mode [ 108.217809][ T4232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.278762][ T5566] loop1: detected capacity change from 0 to 512 [ 108.289159][ T5567] loop5: detected capacity change from 0 to 1024 [ 108.297960][ T5566] ext4: Bad value for 'mb_optimize_scan' [ 108.310416][ T5562] loop4: detected capacity change from 0 to 764 [ 108.318545][ T5567] EXT4-fs: Ignoring removed bh option [ 108.342082][ T5567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.458680][ T4232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.972868][ T5580] loop5: detected capacity change from 0 to 512 [ 109.002076][ T5580] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 109.022188][ T5580] EXT4-fs (loop5): SIPHASH is not a valid default hash value [ 109.406297][ T5580] loop5: detected capacity change from 0 to 2048 [ 109.426113][ T5591] loop1: detected capacity change from 0 to 128 [ 109.446460][ T5591] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.478128][ T5591] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.535445][ T5595] netlink: 112 bytes leftover after parsing attributes in process `syz.4.642'. [ 109.545380][ T5580] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.560958][ T5580] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.583715][ T5591] ip6tnl0: Caught tx_queue_len zero misconfig [ 109.599788][ T5591] netlink: 260 bytes leftover after parsing attributes in process `syz.1.643'. [ 109.641658][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.696425][ T5580] EXT4-fs (loop5): changing journal_checksum during remount not supported; ignoring [ 109.712258][ T5580] EXT4-fs error (device loop5): __ext4_remount:6837: comm syz.5.649: Abort forced by user [ 109.727788][ T5580] EXT4-fs (loop5): Remounting filesystem read-only [ 109.735948][ T5580] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 109.758436][ T4232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.892098][ T5599] loop4: detected capacity change from 0 to 128 [ 109.893460][ T5602] loop5: detected capacity change from 0 to 1024 [ 109.905906][ T5602] EXT4-fs: Ignoring removed bh option [ 109.946043][ T5602] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.971632][ T5605] batadv0: entered promiscuous mode [ 109.975703][ T5602] EXT4-fs (loop5): shut down requested (0) [ 109.978278][ T5605] macvlan0: entered allmulticast mode [ 109.990514][ T5605] batadv0: entered allmulticast mode [ 110.001751][ T5605] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 110.025982][ T5605] batadv0: left allmulticast mode [ 110.033132][ T5605] batadv0: left promiscuous mode [ 110.042802][ T4232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.843185][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 111.843201][ T28] audit: type=1400 audit(1781006464.773:1190): avc: denied { mounton } for pid=5640 comm="syz.2.659" path="/143/bus" dev="tmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.648314][ T5665] loop1: detected capacity change from 0 to 128 [ 112.770923][ T360] ================================================================== [ 112.779040][ T360] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 112.788489][ T360] [ 112.790796][ T360] write to 0xffff88810909a1b0 of 3 bytes by task 5667 on cpu 0: [ 112.798402][ T360] copy_folio_from_iter_atomic+0x743/0x10b0 [ 112.804287][ T360] generic_perform_write+0x2c1/0x490 [ 112.809570][ T360] __generic_file_write_iter+0x9e/0x120 [ 112.815134][ T360] generic_file_write_iter+0x8d/0x310 [ 112.820542][ T360] iter_file_splice_write+0x6c4/0xa80 [ 112.825906][ T360] direct_splice_actor+0x156/0x2a0 [ 112.831021][ T360] splice_direct_to_actor+0x311/0x670 [ 112.836385][ T360] do_splice_direct+0x119/0x1a0 [ 112.841224][ T360] do_sendfile+0x382/0x650 [ 112.845626][ T360] __x64_sys_sendfile64+0x105/0x150 [ 112.850806][ T360] x64_sys_call+0x2dc4/0x3020 [ 112.855486][ T360] do_syscall_64+0x12c/0x3b0 [ 112.860069][ T360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.865964][ T360] [ 112.868274][ T360] read to 0xffff88810909a000 of 512 bytes by task 360 on cpu 1: [ 112.875892][ T360] copy_folio_from_iter_atomic+0x743/0x10b0 [ 112.881782][ T360] generic_perform_write+0x2c1/0x490 [ 112.887144][ T360] shmem_file_write_iter+0xc5/0xf0 [ 112.892249][ T360] lo_rw_aio+0x67d/0x730 [ 112.896474][ T360] loop_process_work+0x56c/0xac0 [ 112.901392][ T360] loop_workfn+0x31/0x40 [ 112.905623][ T360] process_scheduled_works+0x4f0/0x9c0 [ 112.911335][ T360] worker_thread+0x58a/0x780 [ 112.915922][ T360] kthread+0x22a/0x280 [ 112.919977][ T360] ret_from_fork+0x146/0x330 [ 112.924555][ T360] ret_from_fork_asm+0x1a/0x30 [ 112.929313][ T360] [ 112.931619][ T360] Reported by Kernel Concurrency Sanitizer on: [ 112.937755][ T360] CPU: 1 UID: 0 PID: 360 Comm: kworker/u8:6 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 112.948682][ T360] Tainted: [W]=WARN [ 112.952465][ T360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 112.962594][ T360] Workqueue: loop1 loop_workfn [ 112.967362][ T360] ================================================================== [ 113.402096][ T5665] ================================================================== [ 113.410212][ T5665] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 113.417451][ T5665] [ 113.419774][ T5665] write to 0xffff88811a5c8224 of 4 bytes by task 5667 on cpu 0: [ 113.427397][ T5665] __xa_set_mark+0x172/0x1a0 [ 113.432019][ T5665] __folio_mark_dirty+0x3b7/0x4b0 [ 113.437069][ T5665] mark_buffer_dirty+0x120/0x1f0 [ 113.442016][ T5665] block_write_end+0x12d/0x210 [ 113.446804][ T5665] generic_write_end+0x56/0x150 [ 113.451764][ T5665] fat_write_end+0x4f/0x160 [ 113.456277][ T5665] generic_perform_write+0x311/0x490 [ 113.461566][ T5665] __generic_file_write_iter+0x9e/0x120 [ 113.467120][ T5665] generic_file_write_iter+0x8d/0x310 [ 113.472504][ T5665] iter_file_splice_write+0x6c4/0xa80 [ 113.478074][ T5665] direct_splice_actor+0x156/0x2a0 [ 113.483211][ T5665] splice_direct_to_actor+0x311/0x670 [ 113.488615][ T5665] do_splice_direct+0x119/0x1a0 [ 113.493504][ T5665] do_sendfile+0x382/0x650 [ 113.497936][ T5665] __x64_sys_sendfile64+0x105/0x150 [ 113.503152][ T5665] x64_sys_call+0x2dc4/0x3020 [ 113.508111][ T5665] do_syscall_64+0x12c/0x3b0 [ 113.512728][ T5665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.518636][ T5665] [ 113.520957][ T5665] read to 0xffff88811a5c8224 of 4 bytes by task 5665 on cpu 1: [ 113.528500][ T5665] xas_find_marked+0x5d7/0x620 [ 113.533281][ T5665] filemap_get_folios_tag+0xfa/0x430 [ 113.538592][ T5665] file_write_and_wait_range+0x20c/0x2f0 [ 113.544256][ T5665] mmb_fsync_noflush+0x48/0x140 [ 113.549111][ T5665] fat_file_fsync+0x98/0x110 [ 113.553715][ T5665] vfs_fsync_range+0xc5/0xe0 [ 113.558321][ T5665] generic_file_write_iter+0x1ba/0x310 [ 113.563790][ T5665] iter_file_splice_write+0x6c4/0xa80 [ 113.569188][ T5665] direct_splice_actor+0x156/0x2a0 [ 113.574330][ T5665] splice_direct_to_actor+0x311/0x670 [ 113.579731][ T5665] do_splice_direct+0x119/0x1a0 [ 113.584607][ T5665] do_sendfile+0x382/0x650 [ 113.589041][ T5665] __x64_sys_sendfile64+0x105/0x150 [ 113.594343][ T5665] x64_sys_call+0x2dc4/0x3020 [ 113.599046][ T5665] do_syscall_64+0x12c/0x3b0 [ 113.603673][ T5665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.609586][ T5665] [ 113.611910][ T5665] value changed: 0x04000021 -> 0x0e000021 [ 113.617625][ T5665] [ 113.619952][ T5665] Reported by Kernel Concurrency Sanitizer on: [ 113.626193][ T5665] CPU: 1 UID: 0 PID: 5665 Comm: syz.1.668 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 113.636974][ T5665] Tainted: [W]=WARN [ 113.640776][ T5665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 113.650844][ T5665] ==================================================================