last executing test programs: 1m34.933123734s ago: executing program 0 (id=35): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x2c008885) 1m34.519463584s ago: executing program 0 (id=37): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2a, '\x00', 0x0, r0, 0x4, 0x2}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x6}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) 1m34.453333115s ago: executing program 0 (id=38): modify_ldt$write2(0x11, &(0x7f0000000100)={0x810, 0x100000, 0x4000, 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100000489696a83cfb4e4646c6c240000000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 1m34.342688597s ago: executing program 0 (id=40): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200400, &(0x7f0000000140)={[{@dioread_nolock}, {@jqfmt_vfsv0}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2, 0x1}, 0x10) write(r0, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e40)=@newqdisc={0x54, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5}, {0xb, 0x1}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0xc1}}}, @qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x7}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x200040c0}, 0x50) syz_emit_ethernet(0x34, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x88be, 0x12, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "0a0286870000"}}}}}}, 0x0) mremap(&(0x7f0000e1b000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000f2b000/0x4000)=nil) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 1m33.856852139s ago: executing program 0 (id=49): sched_setscheduler(0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba0000000000eeffffff000000", @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/11, 0xb}], 0x1, 0x1d40, 0x4) 1m33.235538933s ago: executing program 0 (id=55): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, r5, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) syz_emit_ethernet(0x7e, &(0x7f0000000540)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "90d3a1", 0x44, 0x2f, 0x1, @private2, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x8, 0x1, 0xb, 0x3, 0x1, 0x2, 0x6, 0xfa}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x2, {{0x2, 0x2, 0x8, 0x0, 0x1, 0x1, 0x7, 0xc5}, 0x2, {0x8, 0x6104, 0x2, 0x0, 0x1, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0xffe, &(0x7f0000001200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x6, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}, 0x0) 1m33.179394224s ago: executing program 32 (id=55): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, r5, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) syz_emit_ethernet(0x7e, &(0x7f0000000540)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "90d3a1", 0x44, 0x2f, 0x1, @private2, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x8, 0x1, 0xb, 0x3, 0x1, 0x2, 0x6, 0xfa}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x2, {{0x2, 0x2, 0x8, 0x0, 0x1, 0x1, 0x7, 0xc5}, 0x2, {0x8, 0x6104, 0x2, 0x0, 0x1, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0xffe, &(0x7f0000001200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x6, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}, 0x0) 3.365673444s ago: executing program 1 (id=897): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) 3.356789774s ago: executing program 3 (id=899): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x1, 0x25, 0xff, @vifc_lcl_ifindex, @broadcast}, 0x10) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa19, &(0x7f0000000d00)="$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") r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10810d, 0x7fffffff, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x6, 0x7, @thr={&(0x7f00000002c0)="fd9d0fdc", 0x0}}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) flock(r1, 0x0) 3.249743217s ago: executing program 2 (id=901): gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x7, 0x11000, 0x4, 0x9484, 0x2001, 0x402, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) fsmount(0xffffffffffffffff, 0x1, 0x0) futex(&(0x7f0000000280), 0x80, 0x0, &(0x7f0000000300), 0x0, 0x2) lstat(0x0, &(0x7f00000007c0)) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f00000001c0)='./file2\x00', 0x824004, &(0x7f0000000780), 0x1, 0x438, &(0x7f0000000340)="$eJzs201oHFUcAPD/7Cat6YeNpYr9UKNVDH4kTVprD14UBQ8Kgh7qMSZpid020kSwJWgUqUepeBePgnfBk15EPQle9S6FIrm0epCV2Z1pdje7aZJuMtH9/WDa92be8t5/Z/67b+ZlA+hZQ+k/ScSeiPgtIvbVq80Nhur/3VxamPxraWEyiWr19T+TWrsbSwuTedP8dbvzSl9E6eMkDrfpd+7S5XMTlcr0xaw+On/+ndG5S5efnjk/cXb67PSF8VOnThwfe/bk+DNdiTON68ah92ePHHz5zauvTp6++tZPXyd5/C1xdMnQagcfq1a73F2x9jaUk74CB8K6lOtpGv21/N8X5Vrts4Go5cxLHxU9PmDzVKvV6n2dDy9Wgf+xJIoeAVCM/Is+vf/Nty2aemwL15+v3wClcd/MtvqRvihlbfpb7m+7aSgiTi/+/UW6xeY8hwAAaPJdOv95qt38rxSNz4XuztZQBiPinojYHxEnI+JARNwbkbb95p+IuH+d/bcukqyc/5SubSiwNUrnf89la1vN87989heD5ay2txZ/f3JmpjJ9LHtPhqN/Z1ofW6WP71/89dNOxxrnf+mW9p/PBbNxXOvb2fyaqYn5iTuJudH1DyMO9bWLP4l8GSeJiIMRcWiDfcw88dWRTsduH/8qurDOVP0y4vH6+V+Mlvhzyerrk6N3RWX62Gh+Vaz08y9XXuvU/x3F3wXp+d/V9vq/Ff9g0rheO7f+Pq78/knHe5qNXv87kjea9r03MT9/cSxiR/JKfdCN+8db2o0vt0/jHz7aPv/3x/I7cTgi0ov4gYh4MCIeysb+cEQ8EhFHV4n/xxcefXvj8W+uNP6pdZ3/5cKOaN3TvlA+98O3TZ0Orif+9PyfqJWGsz1r+fxby7g2djUDAADAf08pIvZEUhq5VS6VRkbqf8N/IHaVKrNz80+emX33wlT9NwKD0V/Kn3Tta3geOpbd1uf18Zb68ey58eflgVp9ZHK2MlV08NDjdnfI/9Qf5aJHB2w6v9eC3iX/oXfJf+hd8h96V5v8HyhiHMDWa/f9/0EB4wC2Xkv+W/aDHuL+H3qX/IfeJf+hJ80NxO1/JK+gsKIQpW0xjE0qxPYYRoGFoj+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuuPfAAAA//9Eg+ia") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0dff"], 0x14}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, 0x0, 0x64e98, 0x16ac1}}, 0x20}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) 3.248306646s ago: executing program 3 (id=902): r0 = memfd_create(0x0, 0x3) write$binfmt_elf64(r0, 0x0, 0x78) socket(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r5, 0x0, 0x7ffff000, 0x0) sendfile(r3, r2, 0x0, 0x100000000) close_range(r1, 0xffffffffffffffff, 0x0) 3.147857039s ago: executing program 4 (id=905): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$unix(r1, 0x0, 0x0, 0x84, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x1000000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 3.000815622s ago: executing program 2 (id=906): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x5, 0x0, 0x0, 0xf, 0x1, 0x14}]}, {0x0, [0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x2a, 0x0, 0x9, 0x1000}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4044) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)=' \x00') r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000000614010023bd7000fcdbdb250800d200000000000600010002000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x4) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$x25(r3, &(0x7f0000000180), 0x12) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500010000", @ANYRES32=0x0, @ANYBLOB="1a8904000a00000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000) 2.998769442s ago: executing program 3 (id=907): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) close(r2) write(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) 2.458589684s ago: executing program 5 (id=918): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) 2.118805042s ago: executing program 4 (id=909): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0xa30080, &(0x7f0000000500)={[{@usrquota}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@noauto_da_alloc}, {@nolazytime}, {@minixdf}, {@orlov}, {@inlinecrypt}, {@stripe={'stripe', 0x3d, 0x5}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@resuid}], [{@obj_role={'obj_role', 0x3d, '|pu\t&0&&\t'}}, {@context={'context', 0x3d, 'staff_u'}}]}, 0x1, 0x5ad, &(0x7f0000000b80)="$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") r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbf6, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) pread64(r0, &(0x7f0000000100)=""/93, 0x5d, 0x327) 1.919212547s ago: executing program 3 (id=910): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x9) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000040)=""/47, &(0x7f0000000180)=0x2f) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) shutdown(r0, 0x1) ioprio_set$pid(0x2, 0x0, 0x2000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 1.878824817s ago: executing program 1 (id=911): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee", 0x15}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x80000}]}, {0x0, [0x0, 0x51, 0x5f, 0x3e, 0x0, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2e, 0x0, 0x1, 0x5}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0xb, @any, 0x0, 0x1}, 0xe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x8100, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000044) 1.617645654s ago: executing program 5 (id=912): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x9}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sync() sync() ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 1.617523223s ago: executing program 2 (id=913): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = creat(0x0, 0x4a) close(r1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x40000, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 1.617278434s ago: executing program 3 (id=914): syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x99ac, 0x8, 0x1, 0x81}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x4, 0x4) r3 = syz_io_uring_setup(0x1593, &(0x7f0000000200)={0x0, 0x11b7, 0x40, 0x3, 0x6}, &(0x7f0000000400), &(0x7f0000002c00), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f0000001040)=[{}], 0x1) 1.210293183s ago: executing program 1 (id=915): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20030, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}, 0x0, 0x400001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setpriority(0x2, 0x0, 0xffffffffffffffcd) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x80) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001000), 0x581, 0x40000000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000640)=@framed, 0x0, 0x4}, 0x94) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) close_range(r3, 0xffffffffffffffff, 0x0) 1.204254693s ago: executing program 3 (id=916): sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000041) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsopen(0x0, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0x200002e6) fcntl$setpipe(r1, 0x407, 0x7000000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x80}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) 1.202534903s ago: executing program 5 (id=917): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x3, 0x4000) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000600)=""/205) socket$inet(0x2, 0x1, 0x0) r2 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2c, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x8, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xa, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x0, 0xf4240, 0x60, {0x1}, 0xfffffffe, 0x100000}) 1.181694133s ago: executing program 4 (id=919): syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x22eb, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000a0000004200000040947ffe1742df2d3b6fd5dbcb3c717f8a59874ba2386a79912eedf1d2fd371d6b0c027d3dceb75b6dba9a4b04ba36f5c200f934084a2d50dd4d6461a221d33240b450b3238794ceae1f321bec52203ea2a78be8296b89bec4d940f6a21ee00f788bc05fd685dbf5c50b0a676bcbaf53882086b53c96f820c2a14b86e2fb9fcec5f66aa94715312ef7d625a77bf0c023cdce504b00f19ecfe39ee4152e0fc94f0c474af6d2685a8630d326f629da1c204235e04c216361dc7d3dd48d1e8c9dabfebd8b211b03f87c0e047cc3420e4ee45f9bbaf090c2d93fce22b2cd82565e3d1ee4"], 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'geneve0\x00', {0x1}, 0x108}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'bridge_slave_0\x00', {0x4}, 0xf1ee}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x20, 0x42, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xb, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xb33}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x17}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x14) 1.133016065s ago: executing program 5 (id=920): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x8}, 0x100882, 0x7ff, 0x6, 0x6, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1002, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_GET_THP_DISABLE(0x2a) pread64(0xffffffffffffffff, &(0x7f0000000380)=""/148, 0x94, 0x40002f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7a}, 0x94) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 1.088703005s ago: executing program 4 (id=921): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) ioctl$EVIOCGBITSND(r0, 0x80404532, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$inet6(r1, 0x0, 0x40c0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) read(r4, &(0x7f0000000140)=""/177, 0xb1) 1.005358137s ago: executing program 1 (id=922): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) open$dir(0x0, 0x800, 0x10a) dup(r1) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a541, 0x52) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x8, 0x200, &(0x7f0000000200)="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"}) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 610.547196ms ago: executing program 1 (id=923): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x40010, 0xffffffffffffffff, 0xfc455000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = getpid() r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r2, r3, 0x0, r0, r1) 588.030517ms ago: executing program 2 (id=924): syz_emit_ethernet(0x82, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x2, [{0x0, 0xd, "5e00020000020000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x9, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x1437c0b97b9646a5, 0x70bd27, 0x25d7dbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8004) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d00d890c4c508df7c4972"], 0xc) write$vga_arbiter(r4, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) close_range(r3, 0xffffffffffffffff, 0x2000000000000) 511.758939ms ago: executing program 2 (id=925): socket$unix(0x1, 0x2, 0x0) pipe2(&(0x7f0000000400), 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x2a, 0x6, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x3}, 0x3022, 0x32, 0x43a1bd52, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x200000001, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x36, 0x0, &(0x7f00000001c0)="c1dfb080cd21d398098ee68886ddfc30d80ce5ed88f6e9b83601f444ac505655d702cb0e4881a9fb5fbebe8f1e17d613fe24c2021a97", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 311.993373ms ago: executing program 5 (id=926): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) pipe(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) chmod(&(0x7f0000000100)='./file1\x00', 0x161) open(0x0, 0x66842, 0x21) 186.554906ms ago: executing program 2 (id=927): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee", 0x15}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x80000}]}, {0x0, [0x0, 0x51, 0x5f, 0x3e, 0x0, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2e, 0x0, 0x1, 0x5}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0xb, @any, 0x0, 0x1}, 0xe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x8100, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000044) 157.429737ms ago: executing program 4 (id=928): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x40016b042, 0x2a) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@loopback, @in6=@dev}}, {{}, 0x0, @in6}}, 0x0) setsockopt(r1, 0x104, 0x100, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='$'], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) socket$nl_route(0x10, 0x3, 0x0) 20.56083ms ago: executing program 1 (id=929): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x240040c4) r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 20.40773ms ago: executing program 4 (id=930): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x9}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sync() sync() ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 0s ago: executing program 5 (id=931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d3, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 93][ T4260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.756666][ T4269] loop2: detected capacity change from 0 to 128 [ 48.790479][ T4269] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.805103][ T4269] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.862494][ T4260] netlink: 'syz.5.196': attribute type 3 has an invalid length. [ 48.862524][ T4260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.196'. [ 48.899144][ T3299] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.931791][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.949270][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.302011][ T4306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 49.403989][ T4309] loop4: detected capacity change from 0 to 512 [ 49.434571][ T4309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.447199][ T4309] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.498030][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.664039][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.671213][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.696864][ T4325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.214'. [ 49.705886][ T4325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.214'. [ 49.716078][ T4324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.726010][ T4324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.766575][ T40] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.776469][ T40] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.785697][ T40] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.795028][ T40] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.939488][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 49.939505][ T28] audit: type=1400 audit(1783792740.407:431): avc: denied { write } for pid=4343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.991139][ T28] audit: type=1400 audit(1783792740.457:432): avc: denied { bind } for pid=4357 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.027774][ T4359] team0: Port device syz_tun added [ 50.039224][ T28] audit: type=1400 audit(1783792740.487:433): avc: denied { write } for pid=4360 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.068932][ T4359] team0: Port device syz_tun removed [ 50.084256][ T28] audit: type=1400 audit(1783792740.547:434): avc: denied { setopt } for pid=4353 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.130730][ T4359] bridge_slave_0: left allmulticast mode [ 50.143018][ T4359] bridge_slave_0: left promiscuous mode [ 50.154833][ T4359] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.161865][ T28] audit: type=1400 audit(1783792740.627:435): avc: denied { write } for pid=4366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.208946][ T4359] bridge_slave_1: left allmulticast mode [ 50.215935][ T4359] bridge_slave_1: left promiscuous mode [ 50.216805][ T28] audit: type=1400 audit(1783792740.687:436): avc: denied { write } for pid=4379 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.221763][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.261623][ T4359] bond0: (slave bond_slave_0): Releasing backup interface [ 50.278930][ T4359] bond0: (slave bond_slave_1): Releasing backup interface [ 50.293846][ T4359] team0: Port device team_slave_0 removed [ 50.303074][ T4359] team0: Port device team_slave_1 removed [ 50.310644][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.318502][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.329560][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.337393][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.349034][ T4359] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 50.371127][ T4383] netlink: 'syz.5.219': attribute type 2 has an invalid length. [ 50.456089][ T4391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.475232][ T4391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.502047][ T28] audit: type=1400 audit(1783792740.967:437): avc: denied { write } for pid=4384 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.553866][ T28] audit: type=1400 audit(1783792741.027:438): avc: denied { write } for pid=4400 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.655610][ T4391] loop2: detected capacity change from 0 to 512 [ 50.708600][ T4414] loop4: detected capacity change from 0 to 512 [ 50.733168][ T4391] FAT-fs (loop2): error, clusters badly computed (1 != 0) [ 50.738332][ T4414] ext4: Unknown parameter 'fowner>00000000000000060928' [ 50.763941][ T28] audit: type=1400 audit(1783792741.227:439): avc: denied { map } for pid=4418 comm="syz.1.224" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 50.806080][ T4414] xt_hashlimit: size too large, truncated to 1048576 [ 50.837716][ T4391] FAT-fs (loop2): error, clusters badly computed (2 != 1) [ 50.862965][ T28] audit: type=1400 audit(1783792741.227:440): avc: denied { read write } for pid=4418 comm="syz.1.224" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 50.877633][ T4425] xt_hashlimit: size too large, truncated to 1048576 [ 51.018625][ T4432] gretap0: entered promiscuous mode [ 51.078838][ T4432] 0ªî{X¹¦: renamed from gretap0 [ 51.135570][ T4432] 0ªî{X¹¦: left promiscuous mode [ 51.142111][ T4432] 0ªî{X¹¦: entered allmulticast mode [ 51.157775][ T4435] loop3: detected capacity change from 0 to 1024 [ 51.183931][ T4435] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 51.218191][ T4435] System zones: 0-1, 3-36 [ 51.226709][ T4432] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 51.268037][ T4435] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.225: bad orphan inode 134217728 [ 51.289205][ T4435] loop3: lost filesystem error report for type 5 error -117 [ 51.289833][ T4435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.357275][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.831169][ T4462] xt_hashlimit: size too large, truncated to 1048576 [ 51.937398][ T4463] netlink: 'syz.1.234': attribute type 3 has an invalid length. [ 52.117638][ T4463] __nla_validate_parse: 2 callbacks suppressed [ 52.117650][ T4463] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.234'. [ 52.489329][ T4467] bridge_slave_0: left allmulticast mode [ 52.511680][ T4467] bridge_slave_0: left promiscuous mode [ 52.529454][ T4467] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.555766][ T4467] bridge_slave_1: left allmulticast mode [ 52.567417][ T4467] bridge_slave_1: left promiscuous mode [ 52.587342][ T4467] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.621594][ T4467] bond0: (slave bond_slave_0): Releasing backup interface [ 52.658425][ T4467] bond0: (slave bond_slave_1): Releasing backup interface [ 52.713643][ T4467] team0: Port device team_slave_0 removed [ 52.752221][ T4467] team0: Port device team_slave_1 removed [ 52.775473][ T4467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.800526][ T4467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.828780][ T4467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.851132][ T4467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.879021][ T4467] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 54.158224][ T4501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.247'. [ 54.182512][ T4501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.247'. [ 54.636170][ T4472] macsec1: entered promiscuous mode [ 54.817357][ T4523] netlink: 'syz.4.253': attribute type 1 has an invalid length. [ 54.856835][ T4523] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.912254][ T4523] bond1: (slave veth3): Enslaving as an active interface with a down link [ 55.021266][ T4523] veth0_virt_wifi: entered promiscuous mode [ 55.046265][ T4523] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 55.094435][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 55.094447][ T28] audit: type=1400 audit(1783792745.567:482): avc: denied { setopt } for pid=4539 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.113300][ T4523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.346575][ T4523] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.387250][ T4523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.421585][ T4540] loop3: detected capacity change from 0 to 512 [ 55.563693][ T4523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.572545][ T4523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.583070][ T4523] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.593696][ T4523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.606330][ T4523] veth1_vlan: left promiscuous mode [ 55.612360][ T4523] veth0_vlan: left promiscuous mode [ 55.619254][ T4523] veth0_vlan: entered promiscuous mode [ 55.626016][ T4523] veth1_vlan: entered promiscuous mode [ 55.629399][ T4540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.634060][ T4523] veth1_macvtap: left promiscuous mode [ 55.650242][ T4523] veth0_macvtap: left promiscuous mode [ 55.680664][ T4523] veth0_macvtap: entered promiscuous mode [ 55.687162][ T4523] veth1_macvtap: entered promiscuous mode [ 55.696520][ T28] audit: type=1400 audit(1783792746.167:483): avc: denied { write } for pid=4539 comm="syz.3.260" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.701426][ T4523] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.736455][ T4523] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.746612][ T28] audit: type=1400 audit(1783792746.167:484): avc: denied { add_name } for pid=4539 comm="syz.3.260" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.768354][ T4523] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.777251][ T28] audit: type=1400 audit(1783792746.167:485): avc: denied { create } for pid=4539 comm="syz.3.260" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 55.787103][ T4523] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.884890][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.900472][ T28] audit: type=1400 audit(1783792746.207:486): avc: denied { write } for pid=4539 comm="syz.3.260" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.922275][ T28] audit: type=1400 audit(1783792746.207:487): avc: denied { remove_name } for pid=4539 comm="syz.3.260" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.969357][ T28] audit: type=1400 audit(1783792746.207:488): avc: denied { rmdir } for pid=4539 comm="syz.3.260" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 55.995804][ T12] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 56.004633][ T12] bond1: (slave veth0_virt_wifi): link status definitely up, 10000 Mbps full duplex [ 56.015261][ T12] bond1: (slave veth3): making interface the new active one [ 56.024153][ T12] bond1: active interface up! [ 56.030673][ T4531] bond1: (slave veth0_virt_wifi): Releasing active interface [ 56.038591][ T4531] veth3: entered promiscuous mode [ 56.052420][ T3429] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.059505][ T3429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.075943][ T3429] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.083104][ T3429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.070091][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.080887][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.175995][ T4566] loop2: detected capacity change from 0 to 512 [ 57.186808][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.760337][ T4552] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.774427][ T4581] loop5: detected capacity change from 0 to 512 [ 57.782668][ T4566] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.267: iget: bad i_size value: 38620345925642 [ 57.802632][ T4566] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.803302][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 57.804572][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.812732][ C1] EXT4-fs (loop2): initial error at time 1783792748: ext4_orphan_get:1399 [ 57.822702][ T4566] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.267: couldn't read orphan inode 15 (err -117) [ 57.827852][ C1] : inode 15 [ 57.851701][ C1] EXT4-fs (loop2): last error at time 1783792748: ext4_orphan_get:1399: inode 15 [ 57.862226][ T4566] loop2: lost filesystem error report for type 5 error -117 [ 57.862798][ T4566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.910362][ T4581] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.924903][ T4552] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.933016][ T4581] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.946278][ T28] audit: type=1400 audit(1783792748.427:489): avc: denied { write } for pid=4565 comm="syz.2.267" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.006737][ T4552] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.022030][ T4585] loop4: detected capacity change from 0 to 512 [ 58.029032][ T28] audit: type=1400 audit(1783792748.427:490): avc: denied { append } for pid=4565 comm="syz.2.267" path="/44/file0/cpuset.effective_mems" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.029060][ T28] audit: type=1400 audit(1783792748.487:491): avc: denied { map } for pid=4565 comm="syz.2.267" path="/44/file0/cpuset.effective_mems" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.088832][ T4566] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.267: bg 0: block 5: invalid block bitmap [ 58.114122][ T4566] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 476 with error 28 [ 58.128281][ T4566] EXT4-fs (loop2): This should not happen!! Data will be lost [ 58.128281][ T4566] [ 58.128622][ T4552] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.149019][ T4585] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.157696][ T4566] EXT4-fs (loop2): Total free blocks count 0 [ 58.165402][ T4590] EXT4-fs (loop2): shut down requested (1) [ 58.171398][ T4566] EXT4-fs (loop2): Free/Dirty block details [ 58.173927][ T4585] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 58.188882][ T4585] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.193815][ T4566] EXT4-fs (loop2): free_blocks=0 [ 58.201878][ T4566] EXT4-fs (loop2): dirty_blocks=480 [ 58.208740][ T4566] EXT4-fs (loop2): Block reservation details [ 58.215759][ T4585] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.272: Allocating blocks 41-42 which overlap fs metadata [ 58.216621][ T4566] EXT4-fs (loop2): i_reserved_data_blocks=480 [ 58.242367][ T30] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.248905][ T4585] loop4: lost filesystem error report for type 5 error -117 [ 58.256623][ T4585] EXT4-fs (loop4): Remounting filesystem read-only [ 58.260853][ T30] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.264403][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 58.286483][ C0] EXT4-fs (loop4): initial error at time 1783792748: ext4_mb_mark_diskspace_used:4222 [ 58.293637][ T30] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.296786][ C0] EXT4-fs (loop4): last error at time 1783792748: ext4_mb_mark_diskspace_used:4222 [ 58.327629][ T4585] EXT4-fs (loop4): 1 truncate cleaned up [ 58.345945][ T4585] EXT4-fs (loop4): pa ffff888106d6aa10: logic 1, phys. 41, len 23 [ 58.354104][ T30] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.402694][ T4585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.459860][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.640751][ T4606] loop1: detected capacity change from 0 to 512 [ 58.700317][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.712063][ T4606] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.728691][ T4606] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 58.737444][ T4606] System zones: 1-12 [ 58.742184][ T4606] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.279: bad orphan inode 131072 [ 58.794925][ T4616] syzkaller0: entered promiscuous mode [ 58.849587][ T4606] loop1: lost filesystem error report for type 5 error -117 [ 58.853162][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 58.866935][ C0] EXT4-fs (loop1): initial error at time 1783792749: ext4_orphan_get:1425 [ 58.875468][ C0] EXT4-fs (loop1): last error at time 1783792749: ext4_orphan_get:1425 [ 58.898330][ T4606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.916080][ T4616] syzkaller0: entered allmulticast mode [ 59.060052][ T4620] netlink: 'syz.3.282': attribute type 1 has an invalid length. [ 59.130882][ T4620] bond1: entered promiscuous mode [ 59.148781][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.165749][ T4620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.188973][ T4622] vlan2: entered allmulticast mode [ 59.194216][ T4622] bond1: entered allmulticast mode [ 59.217428][ T4620] bond1: (slave bridge1): making interface the new active one [ 59.225555][ T4620] bridge1: entered promiscuous mode [ 59.234691][ T4620] bridge1: entered allmulticast mode [ 59.242986][ T4620] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 59.573506][ T4636] netlink: 'syz.1.287': attribute type 1 has an invalid length. [ 59.626048][ T4640] netlink: 144 bytes leftover after parsing attributes in process `syz.2.289'. [ 59.635983][ T4636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.664344][ T4643] futex_wake_op: syz.5.288 tries to shift op by -1; fix this program [ 59.712451][ T4642] bond1: (slave veth3): Enslaving as an active interface with a down link [ 59.739798][ T4636] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 59.844958][ T4645] Cannot find del_set index 14804 as target [ 59.860082][ T4636] bond1: (slave batadv1): making interface the new active one [ 59.882860][ T4636] batadv1: entered promiscuous mode [ 59.888371][ T4636] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 59.914058][ T4642] bond1 (unregistering): (slave veth3): Releasing active interface [ 59.928645][ T4642] bond1 (unregistering): (slave batadv1): Releasing active interface [ 59.942147][ T4642] bond1 (unregistering): Released all slaves [ 59.948097][ T4648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.957279][ T4648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.967252][ T4648] tmpfs: Bad value for 'nr_inodes' [ 59.973669][ T4648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'. [ 60.003395][ T4650] netlink: 'syz.1.292': attribute type 1 has an invalid length. [ 60.016083][ T4650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.037165][ T4650] bond1: (slave veth5): Enslaving as an active interface with a down link [ 60.051229][ T4650] veth0_virt_wifi: entered promiscuous mode [ 60.061929][ T4650] bond1: (slave veth0_virt_wifi): making interface the new active one [ 60.071809][ T4650] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 60.122038][ T4650] 8021q: adding VLAN 0 to HW filter on device eth0 [ 60.131034][ T4650] 8021q: adding VLAN 0 to HW filter on device eth1 [ 60.140649][ T4650] 8021q: adding VLAN 0 to HW filter on device eth2 [ 60.151598][ T4650] 8021q: adding VLAN 0 to HW filter on device eth3 [ 60.162157][ T4650] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 60.185224][ T4652] bond1: (slave veth0_virt_wifi): Releasing active interface [ 60.232920][ T4654] loop3: detected capacity change from 0 to 8192 [ 60.246419][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 60.246434][ T28] audit: type=1400 audit(1783792750.717:513): avc: denied { write } for pid=4653 comm="syz.3.293" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 60.275635][ T40] bond1: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 60.284640][ T40] bond1: (slave veth5): making interface the new active one [ 60.294099][ T40] bond1: active interface up! [ 60.435956][ T28] audit: type=1400 audit(1783792750.907:514): avc: denied { create } for pid=4658 comm="syz.5.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.491797][ T28] audit: type=1400 audit(1783792750.937:515): avc: denied { setopt } for pid=4658 comm="syz.5.295" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.757705][ T28] audit: type=1400 audit(1783792750.937:516): avc: denied { connect } for pid=4658 comm="syz.5.295" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.891473][ T28] audit: type=1400 audit(1783792750.937:517): avc: denied { write } for pid=4658 comm="syz.5.295" laddr=::1 lport=1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.075136][ T4665] netlink: 24 bytes leftover after parsing attributes in process `syz.3.297'. [ 61.100585][ T4665] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4665 comm=syz.3.297 [ 61.424779][ T4670] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 61.793918][ T4676] loop3: detected capacity change from 0 to 512 [ 61.844230][ T4676] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.300: invalid block [ 61.858703][ T4676] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 61.859581][ T4676] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.300: invalid indirect mapped block 4294967295 (level 1) [ 61.869292][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 61.869422][ C1] EXT4-fs (loop3): initial error at time 1783792752: ext4_get_branch:178: inode 11: block 4294967295 [ 61.869701][ C1] EXT4-fs (loop3): last error at time 1783792752: ext4_get_branch:178: inode 11: block 4294967295 [ 61.917687][ T4676] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 61.918737][ T4676] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.300: invalid indirect mapped block 4294967295 (level 1) [ 61.946524][ T4676] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 61.949317][ T4676] EXT4-fs (loop3): 2 truncates cleaned up [ 61.969973][ T4676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.185497][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.304534][ T28] audit: type=1400 audit(1783792752.777:518): avc: denied { setopt } for pid=4682 comm="syz.4.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.458758][ T28] audit: type=1400 audit(1783792752.927:519): avc: denied { write } for pid=4682 comm="syz.4.303" path="socket:[9294]" dev="sockfs" ino=9294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.516926][ T4685] loop3: detected capacity change from 0 to 128 [ 62.542045][ T4693] netlink: 'syz.1.306': attribute type 1 has an invalid length. [ 62.589356][ T4685] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 62.611552][ T4685] System zones: 1-3, 19-19, 35-36 [ 62.645236][ T4697] veth7: entered allmulticast mode [ 62.650461][ T4685] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.694605][ T4697] bond2: (slave veth7): Enslaving as an active interface with a down link [ 62.708344][ T4701] loop2: detected capacity change from 0 to 512 [ 62.723164][ T4685] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.758703][ T4701] EXT4-fs: Ignoring removed oldalloc option [ 62.769403][ T4693] bond2: (slave veth0_to_bond): making interface the new active one [ 62.804263][ T4701] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 62.816987][ T4693] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 62.830149][ T4685] EXT4-fs warning (device loop3): ext4_group_extend:1861: can't shrink FS - resize aborted [ 62.848047][ T4701] EXT4-fs (loop2): orphan cleanup on readonly fs [ 62.864668][ T4701] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 62.917954][ T4701] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 62.938716][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.963509][ T4701] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.308: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 62.987924][ T4701] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 62.988204][ T4701] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.308: couldn't read orphan inode 13 (err -117) [ 62.997398][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 62.997442][ C0] EXT4-fs (loop2): last error at time 1783792753: ext4_ext_check_inode:521: inode 13 [ 63.025473][ T4701] loop2: lost filesystem error report for type 5 error -117 [ 63.026460][ T4701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.035440][ T4712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.312'. [ 63.096851][ T28] audit: type=1400 audit(1783792753.567:520): avc: denied { remount } for pid=4700 comm="syz.2.308" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 63.116524][ T4701] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 63.143596][ T4701] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 63.177895][ T4701] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 63.206540][ T4712] bond2: entered promiscuous mode [ 63.212089][ T4712] bond2: entered allmulticast mode [ 63.241375][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.667259][ T4736] bond0: entered promiscuous mode [ 63.672850][ T4736] bond_slave_0: entered promiscuous mode [ 63.680156][ T4736] bond_slave_1: entered promiscuous mode [ 63.698244][ T4739] loop5: detected capacity change from 0 to 512 [ 63.713953][ T4739] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 63.775861][ T4736] batadv_slave_0: entered promiscuous mode [ 63.782945][ T4736] batadv_slave_0: left promiscuous mode [ 63.823427][ T4736] bond0: left promiscuous mode [ 63.836350][ T4736] bond_slave_0: left promiscuous mode [ 63.854812][ T4736] bond_slave_1: left promiscuous mode [ 64.133414][ T4739] EXT4-fs (loop5): 1 truncate cleaned up [ 64.139468][ T4739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.206429][ T4749] loop4: detected capacity change from 0 to 512 [ 64.231388][ T4749] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.323: iget: bad i_size value: 38620345925642 [ 64.246415][ T4749] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 64.249068][ T4749] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.323: couldn't read orphan inode 15 (err -117) [ 64.258261][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 64.258281][ C0] EXT4-fs (loop4): initial error at time 1783792754: ext4_orphan_get:1399: inode 15 [ 64.258309][ C0] EXT4-fs (loop4): last error at time 1783792754: ext4_orphan_get:1399: inode 15 [ 64.290258][ T4754] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.338'. [ 64.297206][ T4749] loop4: lost filesystem error report for type 5 error -117 [ 64.300004][ T4756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.328'. [ 64.303539][ T4749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.359803][ T4756] bond3: entered promiscuous mode [ 64.365046][ T4756] bond3: entered allmulticast mode [ 64.393871][ T28] audit: type=1400 audit(1783792754.867:521): avc: denied { write } for pid=4748 comm="syz.4.323" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.487027][ T4749] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.323: bg 0: block 5: invalid block bitmap [ 64.499891][ T4749] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 64.512598][ T4749] EXT4-fs (loop4): This should not happen!! Data will be lost [ 64.512598][ T4749] [ 64.522586][ T4749] EXT4-fs (loop4): Total free blocks count 0 [ 64.536857][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.543240][ T4749] EXT4-fs (loop4): Free/Dirty block details [ 64.546067][ T4761] EXT4-fs (loop4): shut down requested (1) [ 64.564531][ T4749] EXT4-fs (loop4): free_blocks=0 [ 64.589495][ T4749] EXT4-fs (loop4): dirty_blocks=2452 [ 64.607600][ T4749] EXT4-fs (loop4): Block reservation details [ 64.627209][ T4749] EXT4-fs (loop4): i_reserved_data_blocks=2452 [ 64.698154][ T4773] syzkaller0: entered promiscuous mode [ 64.708553][ T4773] syzkaller0: entered allmulticast mode [ 64.844404][ T28] audit: type=1326 audit(1783792755.307:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4778 comm="syz.3.336" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27726de59 code=0x7ffc0000 [ 65.519045][ T4800] loop2: detected capacity change from 0 to 128 [ 65.666108][ T4800] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 65.675236][ T4800] System zones: 1-3, 19-19, 35-36 [ 65.691903][ T4800] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.706836][ T4802] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.345'. [ 65.717721][ T4800] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 65.757698][ T4800] EXT4-fs warning (device loop2): ext4_group_extend:1861: can't shrink FS - resize aborted [ 65.848220][ T3299] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.318305][ T4842] netlink: 144 bytes leftover after parsing attributes in process `syz.4.359'. [ 67.399617][ T4853] netlink: 9 bytes leftover after parsing attributes in process `syz.5.373'. [ 67.481226][ T4853] gretap0: entered promiscuous mode [ 67.501630][ T4858] netlink: 5 bytes leftover after parsing attributes in process `syz.5.373'. [ 67.516863][ T4858] 0ªî{X¹¦: renamed from gretap0 [ 67.533043][ T4858] 0ªî{X¹¦: left promiscuous mode [ 67.562242][ T4858] 0ªî{X¹¦: entered allmulticast mode [ 67.582216][ T4858] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 67.768126][ T4853] loop5: detected capacity change from 0 to 1024 [ 67.808883][ T4853] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 67.833462][ T4853] System zones: 0-1, 3-36 [ 67.929484][ T4853] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.373: bad orphan inode 134217728 [ 67.957002][ T4853] loop5: lost filesystem error report for type 5 error -117 [ 67.985103][ T4853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.052934][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.392642][ T4896] netlink: 'syz.4.374': attribute type 8 has an invalid length. [ 68.401368][ T4896] sch_fq: defrate 0 ignored. [ 68.406749][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 68.406761][ T28] audit: type=1400 audit(1783792758.877:548): avc: denied { connect } for pid=4898 comm="syz.1.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.452108][ T28] audit: type=1400 audit(1783792758.917:549): avc: denied { read } for pid=4898 comm="syz.1.375" path="socket:[9758]" dev="sockfs" ino=9758 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.485378][ T3429] veth3: left promiscuous mode [ 70.122042][ T4908] loop2: detected capacity change from 0 to 512 [ 70.177604][ T4908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.184338][ T4911] bond0: entered promiscuous mode [ 70.195875][ T4911] bond_slave_0: entered promiscuous mode [ 70.203132][ T4911] bond_slave_1: entered promiscuous mode [ 70.223188][ T4908] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.233644][ T4911] batadv_slave_0: entered promiscuous mode [ 70.241385][ T4911] batadv_slave_0: left promiscuous mode [ 70.253901][ T4911] bond0: left promiscuous mode [ 70.286205][ T4911] bond_slave_0: left promiscuous mode [ 70.301101][ T4911] bond_slave_1: left promiscuous mode [ 70.569583][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.632902][ T4935] loop1: detected capacity change from 0 to 512 [ 70.663771][ T4935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.711888][ T4935] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.717990][ T4934] bond0: entered promiscuous mode [ 70.757407][ T4941] netlink: 'syz.3.385': attribute type 2 has an invalid length. [ 70.759831][ T4934] batadv_slave_0: entered promiscuous mode [ 70.985190][ T4946] loop3: detected capacity change from 0 to 128 [ 71.037885][ T28] audit: type=1400 audit(1783792761.507:550): avc: denied { wake_alarm } for pid=4945 comm="syz.3.387" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.172940][ T4956] vlan3: entered promiscuous mode [ 71.182526][ T28] audit: type=1400 audit(1783792761.647:551): avc: denied { getopt } for pid=4955 comm="syz.3.392" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.217421][ T4956] bridge0: entered promiscuous mode [ 71.270882][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.309640][ T4959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'. [ 71.795690][ T4972] loop5: detected capacity change from 0 to 2048 [ 71.828456][ T4972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.850215][ T4973] netlink: 'syz.4.402': attribute type 2 has an invalid length. [ 71.875823][ T4972] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.411: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 71.898195][ T4972] EXT4-fs (loop5): Remounting filesystem read-only [ 71.909891][ T28] audit: type=1400 audit(1783792762.387:552): avc: denied { write } for pid=4971 comm="syz.5.411" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.954244][ T28] audit: type=1400 audit(1783792762.387:553): avc: denied { create } for pid=4971 comm="syz.5.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.961948][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.102009][ T4970] macsec1: entered promiscuous mode [ 72.173525][ T4989] loop5: detected capacity change from 0 to 512 [ 72.214812][ T4989] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 72.238920][ T4989] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 72.262471][ T4989] System zones: 1-12 [ 72.276390][ T4989] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.404: bad orphan inode 131072 [ 72.288510][ T4989] loop5: lost filesystem error report for type 5 error -117 [ 72.321655][ T4989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.358844][ T4998] loop1: detected capacity change from 0 to 512 [ 72.365961][ T4998] EXT4-fs: Ignoring removed oldalloc option [ 72.389954][ T4998] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 72.416865][ T28] audit: type=1400 audit(1783792762.877:554): avc: denied { write } for pid=4988 comm="syz.5.404" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.418079][ T4998] EXT4-fs (loop1): orphan cleanup on readonly fs [ 72.501755][ T4998] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 72.502515][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.516681][ T4998] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 72.538581][ T4998] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.418: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 72.557658][ T4998] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 72.557880][ T4998] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.418: couldn't read orphan inode 13 (err -117) [ 72.567152][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 72.567184][ C1] EXT4-fs (loop1): last error at time 1783792763: ext4_ext_check_inode:521: inode 13 [ 72.595814][ T4998] loop1: lost filesystem error report for type 5 error -117 [ 72.596723][ T4998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.646908][ T4998] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 72.656584][ T4998] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 72.673722][ T4998] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 72.702326][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.748110][ T5011] loop3: detected capacity change from 0 to 512 [ 72.749052][ T5009] loop4: detected capacity change from 0 to 512 [ 72.785712][ T5011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.794528][ T5009] EXT4-fs: Ignoring removed oldalloc option [ 72.806024][ T5011] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.839652][ T5009] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 72.851768][ T5009] EXT4-fs (loop4): orphan cleanup on readonly fs [ 72.859577][ T5009] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 72.876136][ T5009] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 72.893260][ T5009] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.422: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 72.894702][ T5021] vlan2: entered promiscuous mode [ 72.911367][ T5009] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 72.917809][ T5009] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.422: couldn't read orphan inode 13 (err -117) [ 72.927097][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 72.927144][ C0] EXT4-fs (loop4): last error at time 1783792763: ext4_ext_check_inode:521: inode 13 [ 72.943267][ T5021] bridge0: entered promiscuous mode [ 72.960287][ T5009] loop4: lost filesystem error report for type 5 error -117 [ 72.961308][ T5009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.006972][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.039496][ T28] audit: type=1400 audit(1783792763.497:555): avc: denied { audit_write } for pid=5026 comm="syz.2.426" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.067444][ T5009] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 73.082014][ T5009] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 73.088855][ T28] audit: type=1107 audit(1783792763.507:556): pid=5026 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='úüà±n„2.QÛøÕèwàkA˜—×;¯’¯Ç[´¸ºø˜ï9¯¾éÿþ)R󵎡X´VlsðKnTO#Ë|……æïÏ“ÅM' [ 73.124331][ T5009] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 73.147933][ T28] audit: type=1400 audit(1783792763.557:557): avc: denied { accept } for pid=5026 comm="syz.2.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.169048][ T5027] loop2: detected capacity change from 0 to 128 [ 73.195892][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.239916][ T5027] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 73.299837][ T5027] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.317664][ T5027] ext2 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.387702][ T3299] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.559258][ T5053] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 73.629079][ T5059] netlink: 'syz.1.428': attribute type 8 has an invalid length. [ 73.637055][ T5059] sch_fq: defrate 0 ignored. [ 74.786898][ T5091] netlink: 24 bytes leftover after parsing attributes in process `syz.3.441'. [ 74.820027][ T5091] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5091 comm=syz.3.441 [ 75.804750][ T5108] loop3: detected capacity change from 0 to 512 [ 75.829912][ T5107] loop1: detected capacity change from 0 to 128 [ 75.858132][ T5108] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 75.895967][ T5108] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 75.905147][ T5108] System zones: 1-12 [ 75.911210][ T5108] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.446: bad orphan inode 131072 [ 75.929902][ T5108] loop3: lost filesystem error report for type 5 error -117 [ 75.933100][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 75.946883][ C1] EXT4-fs (loop3): initial error at time 1783792766: ext4_orphan_get:1425 [ 75.948069][ T5108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.955412][ C1] EXT4-fs (loop3): last error at time 1783792766: ext4_orphan_get:1425 [ 76.003071][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 76.009125][ T28] audit: type=1400 audit(1783792766.467:559): avc: denied { write } for pid=5103 comm="syz.3.446" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.060816][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.112316][ T5122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'. [ 76.722163][ T5138] loop4: detected capacity change from 0 to 2048 [ 76.762198][ T5146] loop3: detected capacity change from 0 to 128 [ 77.348760][ T5146] loop3: detected capacity change from 0 to 256 [ 77.723617][ T5176] loop4: detected capacity change from 0 to 128 [ 77.763268][ T5176] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.804565][ T5174] loop1: detected capacity change from 0 to 512 [ 77.819765][ T5176] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.850866][ T5174] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.861959][ T5174] EXT4-fs (loop1): SIPHASH is not a valid default hash value [ 77.963559][ T5182] loop5: detected capacity change from 0 to 128 [ 78.155993][ T28] audit: type=1400 audit(1783792768.627:560): avc: denied { map } for pid=5185 comm="syz.5.475" path="socket:[10664]" dev="sockfs" ino=10664 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.192803][ T28] audit: type=1400 audit(1783792768.627:561): avc: denied { read } for pid=5185 comm="syz.5.475" path="socket:[10664]" dev="sockfs" ino=10664 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.220790][ T5184] loop1: detected capacity change from 0 to 512 [ 78.251979][ T5184] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 78.281847][ T5184] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.474: invalid indirect mapped block 83886080 (level 1) [ 78.323224][ T5184] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 78.325587][ T5184] EXT4-fs (loop1): Remounting filesystem read-only [ 78.335053][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 78.335103][ C1] EXT4-fs (loop1): initial error at time 1783792768: ext4_free_branches:1023: inode 16 [ 78.335264][ C1] EXT4-fs (loop1): last error at time 1783792768: ext4_free_branches:1023: inode 16 [ 78.375020][ T5184] EXT4-fs (loop1): 1 orphan inode deleted [ 78.383410][ T5184] EXT4-fs (loop1): 1 truncate cleaned up [ 78.448473][ T5184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.567522][ T5192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.477'. [ 78.636198][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.660429][ T3294] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.846896][ T5200] netlink: 'syz.1.480': attribute type 10 has an invalid length. [ 78.936454][ T5205] netlink: 'syz.5.482': attribute type 4 has an invalid length. [ 78.957066][ T5205] netlink: 17 bytes leftover after parsing attributes in process `syz.5.482'. [ 79.069197][ T5196] loop4: detected capacity change from 0 to 512 [ 79.085815][ T5196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.085935][ T5196] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.103965][ T5200] team0: Device wg2 is of different type [ 79.136888][ T28] audit: type=1400 audit(1783792769.597:562): avc: denied { mounton } for pid=5195 comm="syz.4.479" path="/95/file1/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.477958][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.761648][ T5233] loop4: detected capacity change from 0 to 512 [ 80.814504][ T5233] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.857687][ T5237] loop3: detected capacity change from 0 to 2048 [ 80.963187][ T5233] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 80.981959][ T5233] System zones: 1-12 [ 80.989224][ T5233] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.487: bad orphan inode 131072 [ 81.000200][ T5233] loop4: lost filesystem error report for type 5 error -117 [ 81.004734][ T5233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.078317][ T28] audit: type=1400 audit(1783792771.547:563): avc: denied { write } for pid=5229 comm="syz.4.487" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.109461][ T5247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 81.125845][ T5247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 81.193635][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.204632][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.224398][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.240093][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.255964][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.430039][ T28] audit: type=1326 audit(1783792771.897:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5248 comm="syz.4.493" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fa18de59 code=0x7ffc0000 [ 81.459723][ T28] audit: type=1326 audit(1783792771.917:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5248 comm="syz.4.493" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f27fa18de59 code=0x7ffc0000 [ 81.485275][ T28] audit: type=1326 audit(1783792771.917:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5248 comm="syz.4.493" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fa18de59 code=0x7ffc0000 [ 81.511696][ T28] audit: type=1326 audit(1783792771.917:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5248 comm="syz.4.493" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fa18de59 code=0x7ffc0000 [ 81.541763][ T28] audit: type=1326 audit(1783792771.917:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5248 comm="syz.4.493" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f27fa18de59 code=0x7ffc0000 [ 81.567794][ T28] audit: type=1326 audit(1783792771.917:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5248 comm="syz.4.493" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fa18de59 code=0x7ffc0000 [ 81.603031][ T28] audit: type=1326 audit(1783792771.927:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5248 comm="syz.4.493" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f27fa18de59 code=0x7ffc0000 [ 81.629893][ T28] audit: type=1326 audit(1783792771.927:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5248 comm="syz.4.493" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27fa18de59 code=0x7ffc0000 [ 81.656172][ T28] audit: type=1326 audit(1783792771.927:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5248 comm="syz.4.493" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f27fa18de59 code=0x7ffc0000 [ 81.739111][ T5265] netlink: 'syz.3.498': attribute type 4 has an invalid length. [ 81.747330][ T5264] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5264 comm=syz.1.509 [ 81.766297][ T5265] netlink: 17 bytes leftover after parsing attributes in process `syz.3.498'. [ 81.789113][ T5264] netlink: 'syz.1.509': attribute type 1 has an invalid length. [ 81.866698][ T5264] 8021q: adding VLAN 0 to HW filter on device bond4 [ 81.893650][ T5264] bond4: (slave dummy0): making interface the new active one [ 81.902468][ T5264] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 81.982389][ T5281] loop2: detected capacity change from 0 to 256 [ 82.069327][ T5281] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 82.069971][ T5281] FAT-fs (loop2): Filesystem has been set read-only [ 82.139755][ T5276] loop1: detected capacity change from 0 to 128 [ 82.171482][ T5276] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.185836][ T5276] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.255847][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.296395][ T5292] loop2: detected capacity change from 0 to 128 [ 82.345923][ T5292] loop2: detected capacity change from 128 to 0 [ 82.355017][ T5292] FAT-fs (loop2): Directory bread(block 23) failed [ 82.363431][ T5292] FAT-fs (loop2): Directory bread(block 24) failed [ 82.373044][ T5292] FAT-fs (loop2): Directory bread(block 23) failed [ 82.387320][ T5292] FAT-fs (loop2): Directory bread(block 24) failed [ 82.396111][ T5293] loop1: detected capacity change from 0 to 2048 [ 82.400188][ T5292] FAT-fs (loop2): Directory bread(block 23) failed [ 82.417393][ T5292] FAT-fs (loop2): Directory bread(block 24) failed [ 82.433210][ T5292] FAT-fs (loop2): FAT read failed (blocknr 5) [ 82.492083][ T5300] syzkaller0: entered promiscuous mode [ 82.497994][ T5300] syzkaller0: entered allmulticast mode [ 82.647832][ T5310] netlink: 'syz.4.516': attribute type 4 has an invalid length. [ 82.657546][ T5310] netlink: 17 bytes leftover after parsing attributes in process `syz.4.516'. [ 83.096662][ T3299] FAT-fs (loop2): Directory bread(block 23) failed [ 83.105332][ T3299] FAT-fs (loop2): Directory bread(block 24) failed [ 83.123369][ T4745] FAT-fs (loop2): bread failed in fat_clusters_flush [ 83.131317][ T3299] FAT-fs (loop2): unable to read boot sector to mark fs as dirty [ 83.316052][ T5323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.521'. [ 83.435596][ T5306] macsec1: entered promiscuous mode [ 83.590764][ T5330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.523'. [ 83.618530][ T5335] netlink: 'syz.5.525': attribute type 8 has an invalid length. [ 83.630872][ T5335] sch_fq: defrate 0 ignored. [ 83.646843][ T5334] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.670113][ T5334] bridge_slave_0 (unregistering): left allmulticast mode [ 83.677610][ T5334] bridge_slave_0 (unregistering): left promiscuous mode [ 83.687155][ T5334] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.804097][ T12] bond0 (unregistering): left promiscuous mode [ 83.810648][ T12] bond0 (unregistering): Released all slaves [ 83.862756][ T12] batadv_slave_0: left promiscuous mode [ 83.870387][ T12] hsr_slave_0: left promiscuous mode [ 83.876917][ T12] hsr_slave_1: left promiscuous mode [ 83.939177][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 84.017090][ T5336] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.024238][ T5336] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.031402][ T5336] bridge_slave_0: entered allmulticast mode [ 84.038109][ T5336] bridge_slave_0: entered promiscuous mode [ 84.045111][ T5336] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.052195][ T5336] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.059568][ T5336] bridge_slave_1: entered allmulticast mode [ 84.066342][ T5336] bridge_slave_1: entered promiscuous mode [ 84.073039][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 84.089948][ T5336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.100557][ T5336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.119695][ T5336] team0: Port device team_slave_0 added [ 84.126412][ T5336] team0: Port device team_slave_1 added [ 84.141649][ T5336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.148633][ T5336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.174586][ T5336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.185772][ T5336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.192713][ T5336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.218794][ T5336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.245720][ T5336] hsr_slave_0: entered promiscuous mode [ 84.251760][ T5336] hsr_slave_1: entered promiscuous mode [ 84.257683][ T5336] debugfs: 'hsr0' already exists in 'hsr' [ 84.263437][ T5336] Cannot create hsr debugfs directory [ 84.341173][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 84.603917][ T5336] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.612312][ T5336] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.627508][ T5336] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.636277][ T5336] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.644261][ T5336] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.652957][ T5336] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.661390][ T5336] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.670627][ T5336] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.704708][ T5336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.716354][ T5336] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.725786][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.732865][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.743688][ T3654] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.750733][ T3654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.840718][ T5336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.895747][ T5336] veth0_vlan: entered promiscuous mode [ 84.903598][ T5336] veth1_vlan: entered promiscuous mode [ 84.918430][ T5336] veth0_macvtap: entered promiscuous mode [ 84.925971][ T5336] veth1_macvtap: entered promiscuous mode [ 84.936460][ T5336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.947479][ T5336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.957876][ T3654] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.966807][ T3654] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.975851][ T3654] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.984673][ T3654] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.068799][ T5485] netlink: 'syz.2.524': attribute type 10 has an invalid length. [ 85.090115][ T5480] loop5: detected capacity change from 0 to 512 [ 85.097871][ T5484] syzkaller0: entered promiscuous mode [ 85.116752][ T5480] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 85.119338][ T5484] syzkaller0: entered allmulticast mode [ 85.165861][ T5480] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.537: invalid indirect mapped block 83886080 (level 1) [ 85.173003][ T5485] team0: Device wg2 is of different type [ 85.192831][ T5480] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 85.195098][ T5480] EXT4-fs (loop5): Remounting filesystem read-only [ 85.204776][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 85.204806][ C1] EXT4-fs (loop5): initial error at time 1783792775: ext4_free_branches:1023: inode 16 [ 85.205016][ C1] EXT4-fs (loop5): last error at time 1783792775: ext4_free_branches:1023: inode 16 [ 85.247249][ T5480] EXT4-fs (loop5): 1 orphan inode deleted [ 85.253979][ T5480] EXT4-fs (loop5): 1 truncate cleaned up [ 85.269496][ T5480] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.332933][ T5497] netlink: 'syz.2.528': attribute type 4 has an invalid length. [ 85.342443][ T5497] netlink: 17 bytes leftover after parsing attributes in process `syz.2.528'. [ 85.355922][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.458739][ T5506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 85.544364][ T5510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.533'. [ 85.935273][ T5519] netlink: 8772 bytes leftover after parsing attributes in process `syz.5.550'. [ 85.947362][ T5516] netlink: 20 bytes leftover after parsing attributes in process `syz.3.541'. [ 85.964689][ T5516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.541'. [ 85.984975][ T5516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.541'. [ 86.003067][ T5516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.541'. [ 86.030069][ T5516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.541'. [ 86.148158][ T5525] loop4: detected capacity change from 0 to 256 [ 86.223190][ T5525] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.482999][ T5533] loop4: detected capacity change from 0 to 128 [ 86.742637][ T5540] loop4: detected capacity change from 0 to 256 [ 86.750058][ T5540] FAT-fs (loop4): data area starts beyond volume (274 > 64) [ 86.762117][ T5540] FAT-fs (loop4): Can't find a valid FAT filesystem [ 86.770570][ T5526] loop2: detected capacity change from 0 to 512 [ 86.782541][ T5540] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 86.835447][ T5526] EXT4-fs (loop2): filesystem is read-only [ 86.851157][ T5526] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 86.882562][ T5526] EXT4-fs (loop2): failed to initialize system zone (-117) [ 86.901404][ T5526] EXT4-fs (loop2): mount failed [ 86.956233][ T5545] loop1: detected capacity change from 0 to 512 [ 87.001409][ T5545] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 87.070588][ T5545] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -ENXIO [ 87.141106][ T5545] loop1: detected capacity change from 0 to 512 [ 87.163199][ T5545] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 87.267932][ T5554] gretap0: entered promiscuous mode [ 87.289806][ T5547] loop3: detected capacity change from 0 to 512 [ 87.327895][ T5547] EXT4-fs error (device loop3): ext4_get_journal_inode:5900: comm syz.3.548: inode #1792: comm syz.3.548: iget: illegal inode # [ 87.348442][ T5547] loop3: lost filesystem error report for type 5 error -117 [ 87.348831][ T5547] EXT4-fs (loop3): Remounting filesystem read-only [ 87.356419][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 87.356481][ C1] EXT4-fs (loop3): initial error at time 1783792777: ext4_get_journal_inode:5900 [ 87.356582][ C1] EXT4-fs (loop3): last error at time 1783792777: ext4_get_journal_inode:5900 [ 87.392477][ T5547] EXT4-fs (loop3): no journal found [ 87.392625][ T5558] 0ªî{X¹¦: renamed from gretap0 [ 87.407210][ T5547] EXT4-fs (loop3): can't get journal size [ 87.416754][ T5558] 0ªî{X¹¦: left promiscuous mode [ 87.426269][ T5547] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 87.438520][ T5558] 0ªî{X¹¦: entered allmulticast mode [ 87.446091][ T5554] loop2: detected capacity change from 0 to 1024 [ 87.463823][ T5558] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 87.493900][ T5547] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 87.519429][ T5554] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 87.538322][ T5554] System zones: 0-1, 3-36 [ 87.559119][ T5547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.571297][ T5554] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.551: bad orphan inode 134217728 [ 87.583342][ T5547] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.589827][ T5554] loop2: lost filesystem error report for type 5 error -117 [ 87.605289][ T5554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.669339][ T5570] syzkaller0: entered promiscuous mode [ 87.679504][ T5570] syzkaller0: entered allmulticast mode [ 87.691637][ T5570] 0: reclassify loop, rule prio 0, protocol 800 [ 87.718703][ T5336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.747199][ T5547] loop3: detected capacity change from 0 to 164 [ 87.789649][ T5577] mmap: syz.4.558 (5577) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 87.792632][ T5547] iso9660: Unknown parameter 'nocompressœßK½<þ"heck' [ 87.827577][ T5572] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.903343][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 87.903409][ T28] audit: type=1400 audit(1783792778.377:616): avc: denied { bind } for pid=5576 comm="syz.4.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.073972][ T28] audit: type=1400 audit(1783792778.547:617): avc: denied { create } for pid=5586 comm="syz.4.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 88.324748][ T5587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.424569][ T28] audit: type=1400 audit(1783792778.887:618): avc: denied { write } for pid=5586 comm="syz.4.561" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.630550][ T28] audit: type=1400 audit(1783792778.917:619): avc: denied { read write } for pid=5586 comm="syz.4.561" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 88.653100][ T28] audit: type=1400 audit(1783792778.917:620): avc: denied { open } for pid=5586 comm="syz.4.561" path="/111/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 88.676052][ T28] audit: type=1400 audit(1783792778.937:621): avc: denied { write } for pid=5586 comm="syz.4.561" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.699174][ T28] audit: type=1400 audit(1783792778.967:622): avc: denied { mounton } for pid=5586 comm="syz.4.561" path="/111/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 88.699310][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.721842][ T28] audit: type=1400 audit(1783792778.987:623): avc: denied { read write } for pid=5598 comm="syz.5.565" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 88.777576][ T28] audit: type=1400 audit(1783792778.987:624): avc: denied { open } for pid=5598 comm="syz.5.565" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 88.825188][ T28] audit: type=1400 audit(1783792779.067:625): avc: denied { write } for pid=3294 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.877265][ T5604] __nla_validate_parse: 73 callbacks suppressed [ 88.877311][ T5604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.567'. [ 88.971821][ T5610] netlink: 9 bytes leftover after parsing attributes in process `syz.4.569'. [ 88.981804][ T5610] gretap0: entered promiscuous mode [ 89.029253][ T5610] netlink: 5 bytes leftover after parsing attributes in process `syz.4.569'. [ 89.094644][ T5616] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 89.094677][ T5616] System zones: 0-1, 3-36 [ 89.095050][ T5616] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.569: bad orphan inode 134217728 [ 89.095143][ T5616] loop4: lost filesystem error report for type 5 error -117 [ 89.095689][ T5616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.143130][ T5610] 0ªî{X¹¦: renamed from gretap0 [ 89.177406][ T5609] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.189384][ T5610] 0ªî{X¹¦: left promiscuous mode [ 89.200370][ T5610] 0ªî{X¹¦: entered allmulticast mode [ 89.221777][ T5610] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 89.227142][ T5609] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.570: invalid indirect mapped block 83886080 (level 1) [ 89.227471][ T5609] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 89.232053][ T5609] EXT4-fs (loop3): Remounting filesystem read-only [ 89.243906][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 89.244172][ C0] EXT4-fs (loop3): initial error at time 1783792779: ext4_free_branches:1023: inode 16 [ 89.244312][ C0] EXT4-fs (loop3): last error at time 1783792779: ext4_free_branches:1023: inode 16 [ 89.314154][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.346760][ T5609] EXT4-fs (loop3): 1 orphan inode deleted [ 89.346840][ T5609] EXT4-fs (loop3): 1 truncate cleaned up [ 89.384913][ T5609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.441480][ T5622] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 89.466221][ T5622] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 89.466474][ T5622] System zones: 1-12 [ 89.467315][ T5622] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.573: bad orphan inode 131072 [ 89.467433][ T5622] loop2: lost filesystem error report for type 5 error -117 [ 89.473236][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 89.473266][ C1] EXT4-fs (loop2): initial error at time 1783792779: ext4_orphan_get:1425 [ 89.473378][ C1] EXT4-fs (loop2): last error at time 1783792779: ext4_orphan_get:1425 [ 89.480564][ T5622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.568889][ T5632] netlink: 12 bytes leftover after parsing attributes in process `syz.5.576'. [ 89.626626][ T5336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.659871][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.755663][ T5632] veth3: entered allmulticast mode [ 89.770366][ T5632] bond1: (slave veth3): Enslaving as an active interface with an up link [ 89.776500][ T311] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 89.791986][ T5648] Driver unsupported XDP return value 0 on prog (id 109) dev N/A, expect packet loss! [ 89.811042][ T5641] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 89.820594][ T5638] bond1 (unregistering): (slave veth3): Releasing backup interface [ 89.834397][ T5638] bond1 (unregistering): Released all slaves [ 89.880467][ T5640] syzkaller0: entered promiscuous mode [ 89.886099][ T5640] syzkaller0: entered allmulticast mode [ 89.902749][ T5646] syzkaller0: entered promiscuous mode [ 89.908266][ T5646] syzkaller0: entered allmulticast mode [ 90.105856][ T5664] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.585'. [ 90.118999][ T5667] netlink: 4 bytes leftover after parsing attributes in process `syz.5.582'. [ 90.236176][ T5664] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.585'. [ 90.555371][ T5677] netlink: 12 bytes leftover after parsing attributes in process `syz.5.587'. [ 90.566741][ T5666] set_capacity_and_notify: 5 callbacks suppressed [ 90.566864][ T5666] loop3: detected capacity change from 0 to 1024 [ 90.732567][ T5666] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 90.984739][ T5666] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 91.025884][ T5666] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 91.081410][ T5666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.190193][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.272134][ T5681] loop5: detected capacity change from 0 to 512 [ 91.325839][ T5681] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 91.357654][ T5681] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 91.373881][ T5681] System zones: 1-12 [ 91.388081][ T5681] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.590: bad orphan inode 131072 [ 91.410291][ T5681] loop5: lost filesystem error report for type 5 error -117 [ 91.419849][ T5681] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.500289][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.516720][ T5688] netlink: 'syz.3.592': attribute type 4 has an invalid length. [ 91.563856][ T5688] netlink: 17 bytes leftover after parsing attributes in process `syz.3.592'. [ 91.786531][ T5698] syzkaller0: entered promiscuous mode [ 91.792088][ T5698] syzkaller0: entered allmulticast mode [ 91.892853][ T5707] Invalid ELF header type: 2 != 1 [ 92.877158][ T5724] netlink: 'syz.4.602': attribute type 5 has an invalid length. [ 92.963395][ T5719] loop5: detected capacity change from 0 to 512 [ 92.975971][ T5719] EXT4-fs: Invalid want_extra_isize 9 [ 93.003969][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 93.003987][ T28] audit: type=1400 audit(1783792783.467:646): avc: denied { ioctl } for pid=5717 comm="syz.5.611" path="socket:[12901]" dev="sockfs" ino=12901 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 93.186265][ T5730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.616'. [ 93.227202][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.250279][ T5730] bond1: (slave bond0): Enslaving as an active interface with a down link [ 93.270886][ T5735] netlink: 'syz.5.616': attribute type 4 has an invalid length. [ 93.303059][ T5735] .`: renamed from bond0 (while UP) [ 93.361237][ T28] audit: type=1400 audit(1783792783.827:647): avc: denied { create } for pid=5737 comm="syz.5.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 93.552627][ T5731] macsec1: entered promiscuous mode [ 94.077808][ T5744] syzkaller0: entered promiscuous mode [ 94.083422][ T5744] syzkaller0: entered allmulticast mode [ 94.091215][ T5744] tipc: Started in network mode [ 94.096651][ T5744] tipc: Node identity f6aa9b8eb6e4, cluster identity 4711 [ 94.110396][ T5744] tipc: Enabled bearer , priority 0 [ 94.124561][ T5741] tipc: Resetting bearer [ 94.137840][ T5746] loop4: detected capacity change from 0 to 512 [ 94.139238][ T5741] tipc: Disabling bearer [ 94.164977][ T5748] __nla_validate_parse: 2 callbacks suppressed [ 94.164993][ T5748] netlink: 9 bytes leftover after parsing attributes in process `syz.1.609'. [ 94.181079][ T5748] gretap0: entered promiscuous mode [ 94.227589][ T5748] netlink: 5 bytes leftover after parsing attributes in process `syz.1.609'. [ 94.249389][ T5754] loop4: detected capacity change from 0 to 128 [ 94.261293][ T5748] 0ªî{X¹¦: renamed from gretap0 [ 94.284625][ T5748] 0ªî{X¹¦: left promiscuous mode [ 94.299655][ T5754] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.299905][ T5748] 0ªî{X¹¦: entered allmulticast mode [ 94.322151][ T5754] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.364244][ T5748] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 94.398182][ T28] audit: type=1400 audit(1783792784.877:648): avc: denied { mounton } for pid=5762 comm="syz.5.619" path="/" dev="tmpfs" ino=597 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 94.442243][ T28] audit: type=1400 audit(1783792784.907:649): avc: denied { write } for pid=5753 comm="syz.4.615" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.484394][ T5750] loop1: detected capacity change from 0 to 1024 [ 94.492384][ T5751] loop3: detected capacity change from 0 to 512 [ 94.517615][ T5750] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 94.517791][ T5750] System zones: 0-1, 3-36 [ 94.530204][ T5750] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.609: bad orphan inode 134217728 [ 94.530382][ T5750] loop1: lost filesystem error report for type 5 error -117 [ 94.549095][ T5750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.632687][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.683959][ T5773] netlink: 'syz.3.622': attribute type 4 has an invalid length. [ 94.708052][ T3294] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.776608][ T5779] syzkaller0: entered promiscuous mode [ 94.782353][ T5779] syzkaller0: entered allmulticast mode [ 94.832250][ T5781] netlink: 24 bytes leftover after parsing attributes in process `syz.4.626'. [ 94.881793][ T5786] netlink: 'syz.4.628': attribute type 1 has an invalid length. [ 94.912316][ T5784] loop3: detected capacity change from 0 to 512 [ 95.550851][ T5777] syz.1.624 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 95.566082][ T5777] CPU: 0 UID: 0 PID: 5777 Comm: syz.1.624 Not tainted syzkaller #0 PREEMPT(lazy) [ 95.566120][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 95.566138][ T5777] Call Trace: [ 95.566145][ T5777] [ 95.566152][ T5777] __dump_stack+0x1d/0x30 [ 95.566175][ T5777] dump_stack_lvl+0x95/0xd0 [ 95.566195][ T5777] dump_stack+0x15/0x1b [ 95.566218][ T5777] dump_header+0x80/0x240 [ 95.566260][ T5777] oom_kill_process+0x295/0x350 [ 95.566379][ T5777] out_of_memory+0x981/0xbc0 [ 95.566417][ T5777] try_charge_memcg+0x621/0xa00 [ 95.566533][ T5777] ? __rcu_read_unlock+0x4e/0x70 [ 95.566596][ T5777] __memcg_kmem_charge_page+0x199/0x3a0 [ 95.566626][ T5777] __alloc_frozen_pages_noprof+0x18a/0x350 [ 95.566667][ T5777] alloc_pages_mpol+0xa9/0x1d0 [ 95.566708][ T5777] alloc_pages_noprof+0x8f/0x140 [ 95.566738][ T5777] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 95.566833][ T5777] __kvmalloc_node_noprof+0x3a0/0x590 [ 95.566863][ T5777] ? futex_hash_allocate+0x192/0x920 [ 95.566885][ T5777] ? futex_hash_allocate+0x192/0x920 [ 95.566904][ T5777] ? futex_hash_allocate+0x192/0x920 [ 95.567000][ T5777] futex_hash_allocate+0x192/0x920 [ 95.567023][ T5777] ? cap_task_prctl+0x13f/0x6b0 [ 95.567064][ T5777] futex_hash_prctl+0xd8/0xf0 [ 95.567088][ T5777] __se_sys_prctl+0x4f4/0x13b0 [ 95.567168][ T5777] __x64_sys_prctl+0x67/0x80 [ 95.567192][ T5777] x64_sys_call+0x2533/0x3020 [ 95.567219][ T5777] do_syscall_64+0x136/0x3c0 [ 95.567294][ T5777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.567364][ T5777] RIP: 0033:0x7fc31cb9de59 [ 95.567389][ T5777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.567407][ T5777] RSP: 002b:00007fc31b5f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 95.567426][ T5777] RAX: ffffffffffffffda RBX: 00007fc31ce25fa0 RCX: 00007fc31cb9de59 [ 95.567440][ T5777] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 95.567532][ T5777] RBP: 00007fc31cc33e6f R08: 0000000000000000 R09: 0000000000000000 [ 95.567545][ T5777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.567560][ T5777] R13: 00007fc31ce26038 R14: 00007fc31ce25fa0 R15: 00007ffcb1a61cc8 [ 95.567641][ T5777] [ 95.567656][ T5777] memory: usage 307200kB, limit 307200kB, failcnt 1334 [ 95.800310][ T5777] memory+swap: usage 19476kB, limit 9007199254740988kB, failcnt 0 [ 95.808333][ T5777] kmem: usage 2036kB, limit 9007199254740988kB, failcnt 0 [ 95.815652][ T5777] Memory cgroup stats for /syz1: [ 95.815990][ T5777] cache 524288 [ 95.824378][ T5777] rss 8192 [ 95.827410][ T5777] shmem 0 [ 95.830822][ T5777] mapped_file 65536 [ 95.834802][ T5777] dirty 0 [ 95.837733][ T5777] writeback 0 [ 95.841017][ T5777] workingset_refault_anon 84 [ 95.845612][ T5777] workingset_refault_file 764 [ 95.850292][ T5777] swap 17154048 [ 95.853770][ T5777] swapcached 19529728 [ 95.857816][ T5777] pgpgin 56273 [ 95.861230][ T5777] pgpgout 56143 [ 95.864731][ T5777] pgfault 73222 [ 95.868195][ T5777] pgmajfault 49 [ 95.871628][ T5777] inactive_anon 0 [ 95.875361][ T5777] active_anon 8192 [ 95.879072][ T5777] inactive_file 0 [ 95.882774][ T5777] active_file 507904 [ 95.886730][ T5777] unevictable 0 [ 95.890254][ T5777] hierarchical_memory_limit 314572800 [ 95.895654][ T5777] hierarchical_memsw_limit 9223372036854771712 [ 95.901800][ T5777] total_cache 524288 [ 95.905712][ T5777] total_rss 8192 [ 95.909398][ T5777] total_shmem 0 [ 95.912920][ T5777] total_mapped_file 65536 [ 95.917274][ T5777] total_dirty 0 [ 95.920795][ T5777] total_writeback 0 [ 95.924653][ T5777] total_workingset_refault_anon 84 [ 95.929753][ T5777] total_workingset_refault_file 764 [ 95.934954][ T5777] total_swap 17154048 [ 95.938990][ T5777] total_swapcached 19529728 [ 95.943539][ T5777] total_pgpgin 56273 [ 95.947418][ T5777] total_pgpgout 56143 [ 95.951455][ T5777] total_pgfault 73222 [ 95.955594][ T5777] total_pgmajfault 49 [ 95.959564][ T5777] total_inactive_anon 0 [ 95.963803][ T5777] total_active_anon 8192 [ 95.968034][ T5777] total_inactive_file 0 [ 95.972197][ T5777] total_active_file 507904 [ 95.976638][ T5777] total_unevictable 0 [ 95.980698][ T5777] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.624,pid=5776,uid=0 [ 95.995238][ T5777] Memory cgroup out of memory: Killed process 5776 (syz.1.624) total-vm:96360kB, anon-rss:1236kB, file-rss:22152kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 96.012533][ T5782] syz.1.624 (5782) used greatest stack depth: 8512 bytes left [ 96.089954][ T5796] netlink: 'syz.3.632': attribute type 4 has an invalid length. [ 96.101548][ T5789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.630'. [ 96.105354][ T5796] netlink: 17 bytes leftover after parsing attributes in process `syz.3.632'. [ 96.112779][ T28] audit: type=1400 audit(1783792786.577:650): avc: denied { setopt } for pid=5792 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.166612][ T28] audit: type=1400 audit(1783792786.607:651): avc: denied { connect } for pid=5792 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.233955][ T28] audit: type=1400 audit(1783792786.707:652): avc: denied { write } for pid=5799 comm="syz.2.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 96.234271][ T5800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'. [ 96.301033][ T3409] IPVS: starting estimator thread 0... [ 96.403045][ T5804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.634'. [ 96.413685][ T5809] IPVS: using max 2304 ests per chain, 115200 per kthread [ 96.438197][ T5804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.634'. [ 96.495850][ T5804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.634'. [ 96.564465][ T28] audit: type=1400 audit(1783792787.027:653): avc: denied { append } for pid=5802 comm="syz.4.635" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 96.633977][ T28] audit: type=1400 audit(1783792787.067:654): avc: denied { cpu } for pid=5820 comm="syz.3.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 96.657027][ T5828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 97.217432][ T5835] loop1: detected capacity change from 0 to 512 [ 97.338306][ T5844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.348727][ T5844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.715691][ T5853] vlan2: entered promiscuous mode [ 97.723343][ T5853] bridge0: entered promiscuous mode [ 97.743921][ T28] audit: type=1400 audit(1783792788.217:655): avc: denied { create } for pid=5856 comm="syz.3.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 97.935476][ T5867] syzkaller0: entered promiscuous mode [ 97.947238][ T5867] syzkaller0: entered allmulticast mode [ 97.973281][ T5865] loop2: detected capacity change from 0 to 8192 [ 98.737051][ T5871] loop5: detected capacity change from 0 to 4096 [ 98.779641][ T5871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.824965][ T5883] xt_CT: No such helper "snmp_trap" [ 98.855550][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 98.855565][ T28] audit: type=1400 audit(1783792789.317:657): avc: denied { write } for pid=5870 comm="syz.5.657" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.906126][ T28] audit: type=1400 audit(1783792789.377:658): avc: denied { map } for pid=5870 comm="syz.5.657" path="/117/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.928982][ T28] audit: type=1400 audit(1783792789.377:659): avc: denied { execute } for pid=5870 comm="syz.5.657" path="/117/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.952149][ T28] audit: type=1400 audit(1783792789.387:660): avc: denied { write } for pid=5870 comm="syz.5.657" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.124085][ T28] audit: type=1400 audit(1783792789.597:661): avc: denied { write } for pid=3669 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.147302][ T28] audit: type=1400 audit(1783792789.597:662): avc: denied { write } for pid=3669 comm="syz-executor" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.149290][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.171168][ T28] audit: type=1400 audit(1783792789.597:663): avc: denied { write } for pid=3669 comm="syz-executor" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.205733][ T5892] netlink: 'syz.3.665': attribute type 4 has an invalid length. [ 99.223479][ T5892] __nla_validate_parse: 1 callbacks suppressed [ 99.223504][ T5892] netlink: 17 bytes leftover after parsing attributes in process `syz.3.665'. [ 99.239062][ T28] audit: type=1400 audit(1783792789.597:664): avc: denied { write } for pid=3669 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.302510][ T28] audit: type=1400 audit(1783792789.597:665): avc: denied { write } for pid=3669 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.325507][ T28] audit: type=1400 audit(1783792789.597:666): avc: denied { write } for pid=3669 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.337516][ T5897] netlink: 'syz.5.662': attribute type 10 has an invalid length. [ 99.399130][ T5897] team0: Port device wg2 added [ 99.532876][ T5902] xt_l2tp: v2 tid > 0xffff: 1114116 [ 99.684815][ T5910] loop2: detected capacity change from 0 to 256 [ 99.729252][ T5910] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.817742][ T5916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.682'. [ 99.822038][ T5920] loop2: detected capacity change from 0 to 512 [ 99.953392][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.675'. [ 100.522143][ T5942] loop3: detected capacity change from 0 to 512 [ 100.603883][ T5942] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 100.724776][ T5942] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.679: bg 0: block 255: padding at end of block bitmap is not set [ 100.785494][ T5942] loop3: lost filesystem error report for type 5 error -117 [ 100.788625][ T5942] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 100.796175][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 100.796255][ C1] EXT4-fs (loop3): initial error at time 1783792791: ext4_validate_block_bitmap:441 [ 100.796306][ C1] EXT4-fs (loop3): last error at time 1783792791: ext4_validate_block_bitmap:441 [ 100.833005][ T5942] loop3: lost filesystem error report for type 5 error -117 [ 100.834836][ T5942] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.679: invalid indirect mapped block 1 (level 1) [ 100.858079][ T5942] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 100.859939][ T5942] EXT4-fs (loop3): 1 truncate cleaned up [ 100.872824][ T5905] macsec1: entered promiscuous mode [ 100.881544][ T5942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.018001][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.095200][ T5957] loop3: detected capacity change from 0 to 256 [ 101.129057][ T5957] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.131386][ T5963] netlink: 20 bytes leftover after parsing attributes in process `syz.5.688'. [ 101.223361][ T5963] bond_slave_0: entered promiscuous mode [ 101.239425][ T5963] bond_slave_0: entered allmulticast mode [ 101.291855][ T5962] loop1: detected capacity change from 0 to 764 [ 101.591166][ T5952] loop4: detected capacity change from 0 to 512 [ 102.019414][ T5988] loop1: detected capacity change from 0 to 1024 [ 102.067103][ T5988] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 102.106572][ T5988] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 102.130129][ T5988] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 102.194392][ T6023] netlink: 'syz.4.696': attribute type 10 has an invalid length. [ 102.227840][ T5988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.256714][ T6030] sctp: [Deprecated]: syz.2.697 (pid 6030) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.256714][ T6030] Use struct sctp_sack_info instead [ 102.319986][ T6023] team0: Device wg2 is of different type [ 102.350302][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.475213][ T6045] loop5: detected capacity change from 0 to 512 [ 102.482701][ T6030] loop2: detected capacity change from 0 to 8192 [ 102.502516][ T6030] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.515286][ T6045] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 102.600429][ T6045] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -ENXIO [ 102.685044][ T6045] loop5: detected capacity change from 0 to 512 [ 102.714163][ T6045] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 102.761112][ T6047] loop4: detected capacity change from 0 to 512 [ 102.797199][ T6047] EXT4-fs: Invalid want_extra_isize 9 [ 102.979129][ T6062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.705'. [ 103.048406][ T6062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.705'. [ 103.121905][ T6062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.705'. [ 103.154440][ T6058] loop5: detected capacity change from 0 to 512 [ 103.410165][ T6072] loop2: detected capacity change from 0 to 4096 [ 103.434338][ T6072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.708171][ T6040] macsec1: entered promiscuous mode [ 103.722762][ T5336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.867297][ T6083] Set syz1 is full, maxelem 8 reached [ 103.934339][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.715'. [ 103.987884][ T6085] bond1: entered promiscuous mode [ 103.993017][ T6085] bond1: entered allmulticast mode [ 104.070999][ T6088] loop1: detected capacity change from 0 to 512 [ 104.080392][ T1039] IPVS: starting estimator thread 0... [ 104.085646][ T6088] EXT4-fs: Invalid want_extra_isize 9 [ 104.173378][ T6093] IPVS: using max 2256 ests per chain, 112800 per kthread [ 104.299942][ T6097] loop2: detected capacity change from 0 to 512 [ 104.311197][ T6089] loop4: detected capacity change from 0 to 512 [ 104.339496][ T6097] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 104.353376][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 104.353390][ T28] audit: type=1400 audit(1783792794.827:703): avc: denied { mounton } for pid=6086 comm="syz.4.716" path="/140/file0" dev="tmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.395904][ T6089] EXT4-fs error (device loop4): ext4_get_journal_inode:5900: comm syz.4.716: inode #1792: comm syz.4.716: iget: illegal inode # [ 104.426655][ T6097] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.720: bg 0: block 255: padding at end of block bitmap is not set [ 104.447110][ T6089] loop4: lost filesystem error report for type 5 error -117 [ 104.449739][ T6089] EXT4-fs (loop4): Remounting filesystem read-only [ 104.457960][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 104.458000][ C1] EXT4-fs (loop4): initial error at time 1783792794: ext4_get_journal_inode:5900 [ 104.458100][ C1] EXT4-fs (loop4): last error at time 1783792794: ext4_get_journal_inode:5900 [ 104.483330][ T6097] loop2: lost filesystem error report for type 5 error -117 [ 104.487451][ T6097] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 104.509721][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 104.509761][ C0] EXT4-fs (loop2): initial error at time 1783792794: ext4_validate_block_bitmap:441 [ 104.509940][ C0] EXT4-fs (loop2): last error at time 1783792794: ext4_validate_block_bitmap:441 [ 104.532021][ T6089] EXT4-fs (loop4): no journal found [ 104.536450][ T6097] loop2: lost filesystem error report for type 5 error -117 [ 104.547870][ T6097] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.720: invalid indirect mapped block 1 (level 1) [ 104.548008][ T6097] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 104.550135][ T6097] EXT4-fs (loop2): 1 truncate cleaned up [ 104.569197][ T6097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.601112][ T6089] EXT4-fs (loop4): can't get journal size [ 104.614794][ T6089] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 104.665439][ T6089] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 104.687640][ T28] audit: type=1400 audit(1783792795.157:704): avc: denied { write } for pid=6096 comm="syz.2.720" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.695088][ T6089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.733963][ T6089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.791789][ T5336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.062008][ T6089] loop4: detected capacity change from 0 to 164 [ 105.154682][ T6089] iso9660: Unknown parameter 'nocompressœßK½<þ"heck' [ 105.936421][ T6140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.947590][ T6140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.537905][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.736'. [ 106.578834][ T6146] vlan3: entered promiscuous mode [ 106.734469][ T6161] sctp: [Deprecated]: syz.4.743 (pid 6161) Use of int in maxseg socket option. [ 106.734469][ T6161] Use struct sctp_assoc_value instead [ 106.843416][ T6167] tipc: Failed to remove unknown binding: 66,0,0/0:3643171552/3643171554 [ 106.853882][ T6166] tipc: Failed to remove unknown binding: 66,0,0/0:957064318/957064319 [ 106.870068][ T6166] tipc: Failed to remove unknown binding: 66,0,0/0:957064318/957064319 [ 106.928532][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.745'. [ 106.945225][ T6171] EXT4-fs: Ignoring removed orlov option [ 106.966650][ T6171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.982428][ T28] audit: type=1400 audit(1783792797.457:705): avc: denied { write } for pid=6170 comm="syz.3.747" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.004483][ T28] audit: type=1400 audit(1783792797.457:706): avc: denied { write } for pid=6170 comm="syz.3.747" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.026720][ T28] audit: type=1400 audit(1783792797.457:707): avc: denied { write } for pid=6170 comm="syz.3.747" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.049187][ T28] audit: type=1400 audit(1783792797.457:708): avc: denied { write } for pid=6170 comm="syz.3.747" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.071510][ T28] audit: type=1400 audit(1783792797.457:709): avc: denied { rename } for pid=6170 comm="syz.3.747" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 107.095868][ T28] audit: type=1400 audit(1783792797.527:710): avc: denied { mounton } for pid=6170 comm="syz.3.747" path="/165/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 107.161807][ T28] audit: type=1400 audit(1783792797.527:711): avc: denied { mounton } for pid=6170 comm="syz.3.747" path="/165/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 107.659319][ T28] audit: type=1400 audit(1783792798.127:712): avc: denied { block_suspend } for pid=6178 comm="syz.2.748" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.722068][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.866703][ T6185] set_capacity_and_notify: 1 callbacks suppressed [ 107.866725][ T6185] loop1: detected capacity change from 0 to 4096 [ 107.934041][ T6185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.091754][ T6190] vlan4: entered promiscuous mode [ 108.244975][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.755'. [ 108.374606][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.622966][ T6205] syzkaller0: entered promiscuous mode [ 108.633268][ T6205] syzkaller0: entered allmulticast mode [ 108.642860][ T6206] syzkaller0: entered promiscuous mode [ 108.662459][ T6206] syzkaller0: entered allmulticast mode [ 108.667142][ T6179] kexec: Could not allocate control_code_buffer [ 108.739347][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.760'. [ 108.836207][ T6223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.764'. [ 108.897406][ T6230] loop4: detected capacity change from 0 to 512 [ 108.924670][ T6230] ext4: Unknown parameter 'obj_type' [ 109.103161][ T6236] loop3: detected capacity change from 0 to 512 [ 109.142843][ T6244] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 109.250430][ T6225] loop1: detected capacity change from 0 to 512 [ 109.256907][ T6247] syzkaller0: entered promiscuous mode [ 109.277802][ T6247] syzkaller0: entered allmulticast mode [ 109.309003][ T6225] EXT4-fs (loop1): filesystem is read-only [ 109.321589][ T6225] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 109.371005][ T6225] EXT4-fs (loop1): failed to initialize system zone (-117) [ 109.397541][ T6257] sctp: [Deprecated]: syz.3.778 (pid 6257) Use of int in maxseg socket option. [ 109.397541][ T6257] Use struct sctp_assoc_value instead [ 109.411914][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 109.433791][ T6225] EXT4-fs (loop1): mount failed [ 109.921996][ T6266] netlink: 20 bytes leftover after parsing attributes in process `syz.1.782'. [ 110.002918][ T1039] IPVS: starting estimator thread 0... [ 110.095391][ T6270] IPVS: using max 2304 ests per chain, 115200 per kthread [ 110.189989][ T6268] loop5: detected capacity change from 0 to 512 [ 110.206055][ T6268] EXT4-fs error (device loop5): ext4_get_journal_inode:5900: comm syz.5.783: inode #1792: comm syz.5.783: iget: illegal inode # [ 110.224571][ T6268] loop5: lost filesystem error report for type 5 error -117 [ 110.227151][ T6268] EXT4-fs (loop5): Remounting filesystem read-only [ 110.234793][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 110.234824][ C0] EXT4-fs (loop5): initial error at time 1783792800: ext4_get_journal_inode:5900 [ 110.235076][ C0] EXT4-fs (loop5): last error at time 1783792800: ext4_get_journal_inode:5900 [ 110.270718][ T6268] EXT4-fs (loop5): no journal found [ 110.276881][ T6268] EXT4-fs (loop5): can't get journal size [ 110.286724][ T6268] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 110.300157][ T6268] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 110.319312][ T6268] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.353451][ T6281] loop1: detected capacity change from 0 to 512 [ 110.369385][ T6268] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.385974][ T6281] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 110.412418][ T6281] EXT4-fs (loop1): 1 truncate cleaned up [ 110.419216][ T6281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.434477][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 110.434491][ T28] audit: type=1400 audit(1783792800.907:730): avc: denied { write } for pid=6280 comm="syz.1.788" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.513689][ T6287] EXT4-fs (loop1): shut down requested (2) [ 110.646580][ T28] audit: type=1400 audit(1783792801.117:731): avc: denied { ioctl } for pid=6280 comm="syz.1.788" path="socket:[14267]" dev="sockfs" ino=14267 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 110.674873][ T28] audit: type=1400 audit(1783792801.147:732): avc: denied { write } for pid=6280 comm="syz.1.788" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.706811][ T6268] loop5: detected capacity change from 0 to 164 [ 110.723306][ T28] audit: type=1326 audit(1783792801.187:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.1.788" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31cb9de59 code=0x7ffc0000 [ 110.736705][ T6268] iso9660: Unknown parameter 'nocompressœßK½<þ"heck' [ 110.783173][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.885417][ T6290] loop3: detected capacity change from 0 to 764 [ 110.950784][ T6298] Set syz1 is full, maxelem 8 reached [ 110.966556][ T6301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.791'. [ 111.022518][ T6301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.791'. [ 111.086341][ T6301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.791'. [ 111.942016][ T28] audit: type=1400 audit(1783792802.407:734): avc: denied { create } for pid=6323 comm="syz.4.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 112.007378][ T6327] loop1: detected capacity change from 0 to 512 [ 112.028355][ T28] audit: type=1400 audit(1783792802.497:735): avc: denied { lock } for pid=6326 comm="syz.1.804" path="socket:[14757]" dev="sockfs" ino=14757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 112.189795][ T6334] loop2: detected capacity change from 0 to 764 [ 112.277803][ T6339] vlan2: entered promiscuous mode [ 112.291165][ T6339] bridge0: entered promiscuous mode [ 112.331397][ T6342] Set syz1 is full, maxelem 8 reached [ 112.337451][ T6345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.809'. [ 112.364129][ T6347] syzkaller0: entered promiscuous mode [ 112.369656][ T6347] syzkaller0: entered allmulticast mode [ 112.380290][ T6345] vlan3: entered allmulticast mode [ 112.386231][ T6345] bridge1: entered allmulticast mode [ 112.400925][ T6345] bridge1: port 1(erspan0) entered blocking state [ 112.412898][ T28] audit: type=1400 audit(1783792802.877:736): avc: denied { create } for pid=6335 comm="syz.3.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 112.419283][ T6345] bridge1: port 1(erspan0) entered disabled state [ 112.457104][ T6345] erspan0: entered allmulticast mode [ 112.462952][ T6345] erspan0: entered promiscuous mode [ 112.470633][ T6345] bridge1: port 1(erspan0) entered blocking state [ 112.477105][ T6345] bridge1: port 1(erspan0) entered forwarding state [ 112.789182][ T6353] netlink: 'syz.5.813': attribute type 12 has an invalid length. [ 112.814779][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.5.813'. [ 112.853041][ T28] audit: type=1400 audit(1783792803.317:737): avc: denied { view } for pid=6352 comm="syz.5.813" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 112.948313][ T6364] Cannot find set identified by id 0 to match [ 113.638848][ T28] audit: type=1400 audit(1783792804.097:738): avc: denied { nlmsg_read } for pid=6372 comm="syz.1.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.751822][ T6377] set_capacity_and_notify: 1 callbacks suppressed [ 113.751835][ T6377] loop4: detected capacity change from 0 to 512 [ 113.915152][ T3654] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.954671][ T3654] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.012219][ T3654] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.033245][ T3654] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.160185][ T6387] netlink: 32 bytes leftover after parsing attributes in process `syz.4.825'. [ 114.294534][ T28] audit: type=1400 audit(1783792804.767:739): avc: denied { write } for pid=6389 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.504305][ T6421] netlink: 'syz.3.833': attribute type 1 has an invalid length. [ 114.514663][ T6421] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.833'. [ 114.542262][ T6424] loop2: detected capacity change from 0 to 2048 [ 114.588197][ T6436] loop3: detected capacity change from 0 to 512 [ 114.695945][ T6424] loop2: unable to read partition table [ 114.709293][ T6424] loop2: partition table beyond EOD, truncated [ 114.723549][ T6424] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 114.773525][ T2980] loop2: unable to read partition table [ 114.782533][ T2980] loop2: partition table beyond EOD, truncated [ 114.842005][ T6388] loop5: detected capacity change from 0 to 512 [ 114.874127][ T6388] EXT4-fs (loop5): filesystem is read-only [ 114.884881][ T6388] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 114.903746][ T6388] EXT4-fs (loop5): failed to initialize system zone (-117) [ 114.912522][ T6388] EXT4-fs (loop5): mount failed [ 115.118747][ T6449] loop3: detected capacity change from 0 to 512 [ 115.138103][ T6449] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.169750][ T6449] EXT4-fs (loop3): 1 truncate cleaned up [ 115.189634][ T6449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.265814][ T6458] EXT4-fs (loop3): shut down requested (2) [ 115.271929][ T6457] loop1: detected capacity change from 0 to 512 [ 115.278636][ T6457] ext4: Unknown parameter 'obj_type' [ 115.457822][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.158682][ T6492] xt_bpf: check failed: parse error [ 117.753685][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 117.753739][ T28] audit: type=1400 audit(1783792808.217:746): avc: denied { getopt } for pid=6504 comm="syz.2.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 117.822267][ T28] audit: type=1400 audit(1783792808.287:747): avc: denied { ioctl } for pid=6506 comm="syz.1.858" path="socket:[15723]" dev="sockfs" ino=15723 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.907918][ T28] audit: type=1400 audit(1783792808.377:748): avc: denied { shutdown } for pid=6508 comm="syz.2.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.114088][ T6489] loop3: detected capacity change from 0 to 512 [ 118.143548][ T6489] EXT4-fs (loop3): filesystem is read-only [ 118.150480][ T6489] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 118.176411][ T6489] EXT4-fs (loop3): failed to initialize system zone (-117) [ 118.191971][ T6489] EXT4-fs (loop3): mount failed [ 118.812763][ T6524] syzkaller0: entered promiscuous mode [ 118.824242][ T6524] syzkaller0: entered allmulticast mode [ 118.914057][ T28] audit: type=1400 audit(1783792809.387:749): avc: denied { connect } for pid=6525 comm="syz.4.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 119.177467][ T6535] syzkaller0: entered promiscuous mode [ 119.183301][ T6535] syzkaller0: entered allmulticast mode [ 119.217664][ T6533] loop5: detected capacity change from 0 to 2048 [ 119.239457][ T6533] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.341706][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.630279][ T6554] xfrm1: entered allmulticast mode [ 119.648454][ T28] audit: type=1400 audit(1783792810.117:750): avc: denied { getopt } for pid=6557 comm="syz.1.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.683086][ T68] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.700821][ T68] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.719320][ T68] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.741990][ T28] audit: type=1400 audit(1783792810.207:751): avc: denied { write } for pid=6559 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.746639][ T68] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.815298][ T28] audit: type=1400 audit(1783792810.287:752): avc: denied { write } for pid=6585 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.844734][ T6571] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 119.887328][ T68] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.923582][ T68] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.960679][ T68] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.990150][ T68] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.163128][ T28] audit: type=1400 audit(1783792810.627:753): avc: denied { write } for pid=6588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.257850][ T6611] kernel profiling enabled (shift: 0) [ 120.302579][ T6612] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 120.314073][ T6612] bridge2: entered promiscuous mode [ 120.477650][ T28] audit: type=1400 audit(1783792810.947:754): avc: denied { write } for pid=6609 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.822255][ T28] audit: type=1400 audit(1783792812.287:755): avc: denied { mount } for pid=6631 comm="syz.5.898" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 122.061543][ T6639] loop1: detected capacity change from 0 to 1024 [ 122.088478][ T6639] netlink: 'syz.1.888': attribute type 12 has an invalid length. [ 122.097163][ T6639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.888'. [ 122.208946][ T311] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.226101][ T311] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.244475][ T311] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.252994][ T311] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.267162][ T6663] loop4: detected capacity change from 0 to 128 [ 122.278281][ T6663] FAT-fs (loop4): bogus number of FAT structure [ 122.284851][ T6663] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 122.294515][ T6663] FAT-fs (loop4): Can't find a valid FAT filesystem [ 122.364864][ T6663] netlink: 140 bytes leftover after parsing attributes in process `syz.4.895'. [ 122.377748][ T6670] loop5: detected capacity change from 0 to 512 [ 122.396909][ T6674] loop3: detected capacity change from 0 to 1764 [ 122.508390][ T6677] loop2: detected capacity change from 0 to 512 [ 122.704327][ T6693] netlink: 'syz.2.906': attribute type 1 has an invalid length. [ 123.969372][ T6707] loop4: detected capacity change from 0 to 1024 [ 124.004679][ T6707] netlink: 'syz.4.909': attribute type 12 has an invalid length. [ 124.013916][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.909'. [ 124.145196][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 124.145209][ T28] audit: type=1326 audit(1783792814.617:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6718 comm="syz.2.913" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839d4ade59 code=0x7ffc0000 [ 124.212595][ T28] audit: type=1326 audit(1783792814.647:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6718 comm="syz.2.913" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f839d4ade59 code=0x7ffc0000 [ 124.256074][ T28] audit: type=1326 audit(1783792814.647:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6718 comm="syz.2.913" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839d4ade59 code=0x7ffc0000 [ 124.282980][ T28] audit: type=1326 audit(1783792814.647:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6718 comm="syz.2.913" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839d4ade59 code=0x7ffc0000 [ 124.311947][ T28] audit: type=1326 audit(1783792814.647:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6718 comm="syz.2.913" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f839d4ade59 code=0x7ffc0000 [ 124.337731][ T28] audit: type=1326 audit(1783792814.647:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6718 comm="syz.2.913" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839d4ade59 code=0x7ffc0000 [ 124.363859][ T28] audit: type=1326 audit(1783792814.647:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6718 comm="syz.2.913" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839d4ade59 code=0x7ffc0000 [ 124.389351][ T28] audit: type=1326 audit(1783792814.647:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6718 comm="syz.2.913" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f839d4ade59 code=0x7ffc0000 [ 124.415218][ T28] audit: type=1326 audit(1783792814.647:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6718 comm="syz.2.913" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839d4ade59 code=0x7ffc0000 [ 124.447773][ T28] audit: type=1326 audit(1783792814.647:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6718 comm="syz.2.913" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839d4ade59 code=0x7ffc0000 [ 124.490538][ T68] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.499567][ T68] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.519171][ T68] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.569711][ T68] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.749550][ T6739] loop1: detected capacity change from 0 to 128 [ 124.774899][ T6739] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 124.854456][ T6739] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.081495][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.178389][ T6747] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 125.446080][ T6751] loop5: detected capacity change from 0 to 1024 [ 125.491038][ T6751] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.747320][ T3669] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.017173][ T6724] ================================================================== [ 126.025295][ T6724] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 126.032255][ T6724] [ 126.034583][ T6724] read-write to 0xffff88810d38dc64 of 4 bytes by task 6732 on cpu 0: [ 126.042656][ T6724] fifo_open+0x89/0x5b0 [ 126.046827][ T6724] do_dentry_open+0x49f/0xa60 [ 126.051520][ T6724] vfs_open+0x37/0x1e0 [ 126.055690][ T6724] path_openat+0x1b39/0x2000 [ 126.060305][ T6724] do_file_open+0x16c/0x290 [ 126.064833][ T6724] do_sys_openat2+0xa0/0x130 [ 126.069435][ T6724] __x64_sys_openat+0xf2/0x120 [ 126.074209][ T6724] x64_sys_call+0x1e39/0x3020 [ 126.078903][ T6724] do_syscall_64+0x136/0x3c0 [ 126.083510][ T6724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.089414][ T6724] [ 126.091738][ T6724] read to 0xffff88810d38dc64 of 4 bytes by task 6724 on cpu 1: [ 126.099291][ T6724] wait_for_partner+0x109/0x1d0 [ 126.104161][ T6724] fifo_open+0x443/0x5b0 [ 126.108416][ T6724] do_dentry_open+0x49f/0xa60 [ 126.113103][ T6724] vfs_open+0x37/0x1e0 [ 126.117231][ T6724] path_openat+0x1b39/0x2000 [ 126.121855][ T6724] do_file_open+0x16c/0x290 [ 126.126382][ T6724] do_sys_openat2+0xa0/0x130 [ 126.130993][ T6724] __se_sys_openat2+0x193/0x1f0 [ 126.135862][ T6724] __x64_sys_openat2+0x55/0x70 [ 126.140639][ T6724] x64_sys_call+0x2170/0x3020 [ 126.145335][ T6724] do_syscall_64+0x136/0x3c0 [ 126.149946][ T6724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.155849][ T6724] [ 126.158169][ T6724] value changed: 0x00000001 -> 0x00000002 [ 126.163899][ T6724] [ 126.166221][ T6724] Reported by Kernel Concurrency Sanitizer on: [ 126.172373][ T6724] CPU: 1 UID: 0 PID: 6724 Comm: syz.3.916 Not tainted syzkaller #0 PREEMPT(lazy) [ 126.181582][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 126.191642][ T6724] ==================================================================