last executing test programs: 5.631749712s ago: executing program 1 (id=1009): unshare(0x6a040000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x5dc, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x14c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) syz_io_uring_setup(0x837, &(0x7f00000003c0)={0x0, 0xa846, 0x10, 0x3, 0x179}, &(0x7f0000002380), 0x0, 0x0) ioprio_get$pid(0x2, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) 4.326812884s ago: executing program 4 (id=1011): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x5}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x700, {0x27e2544c, 0x7}, 0x1}, 0x1) syz_emit_ethernet(0x15e, &(0x7f00000001c0)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x14}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c2a8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) unshare(0xa000080) syz_init_net_socket$llc(0x1a, 0x0, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42, @remote}, 0xfffffe22) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, 0x0, 0x44044) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb72b40000005908460001080006040001aaaaaaaaaa16ac1414bbaaaaaaaaaa14ac"], 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x5b, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 3.82436454s ago: executing program 1 (id=1015): socket$inet6(0xa, 0x802, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x52}, 0x28) socket$inet6(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x80d08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/anycast6\x00') lseek(r3, 0x2004, 0xf5) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r6, &(0x7f0000000a00)=""/143, 0x8f, 0x5e) 3.419767962s ago: executing program 4 (id=1019): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x7c}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) socket$kcm(0xa, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000100), 0x120) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x90) socket$kcm(0x2, 0x1, 0x84) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000000}, 0xa027, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f00000001c0)=0x2e7, 0x4) 3.288478066s ago: executing program 4 (id=1021): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x5, 0x6, 0x401}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x44000) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 3.060657363s ago: executing program 4 (id=1024): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x519, &(0x7f0000000f80)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x3b4a468, &(0x7f0000007400)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e447586", @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="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", @ANYRES8, @ANYRESHEX, @ANYBLOB="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", @ANYRESDEC, @ANYRES32, @ANYRES8], 0xb, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0x914, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x107220, 0x10004, 0x20da, 0x5, 0xa, 0x52ef, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42442, 0x1c1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x800080, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) write$binfmt_script(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x100000, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="1cc1110ec1e9abc89b005bec0000", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 3.023098074s ago: executing program 3 (id=1025): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002f00)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, 0x55}, 0x1c, &(0x7f0000002b80)=[{0x0}], 0x1}}], 0x1, 0x10004040) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002d00)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0xfffe}, 0x1c, &(0x7f00000010c0)=[{0x0}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001140)="a5", 0x1}], 0x1}}], 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000600)=ANY=[@ANYBLOB="757466383d312c696f636861727365743d6d6163677265656b2c756e695f786c6174653d302c696f636861727365743d7574c6382c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c636865636b2e72656c617865642c73686f72746e616d653d6c6f7765722c757466383d302c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c73686f72746e616d653d77696e6e762c00"], 0x0, 0x362, &(0x7f0000000280)="$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") open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, &(0x7f0000001dc0)={0x8d, 0x0, 0x100000}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in=@private=0xa010100, 0x4e20, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xd, 0x1, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4d5, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x11dc0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x89, 0x1, '\x00', [@generic={0x7}, @jumbo={0xc2, 0x4, 0x20000007}]}]}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 2.874300359s ago: executing program 3 (id=1026): openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioperm(0x0, 0x40, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5d31, 0x98040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x2, 0x20000}, 0x2065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x4a3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x28, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x13, 0x0, 0x0, 0x0, @binary="56ccabd869c2033840919fdc5a8d25"}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x100224, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) fstatfs(0xffffffffffffffff, &(0x7f00000001c0)=""/88) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) 2.610815687s ago: executing program 1 (id=1031): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team0\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x884) 2.560276309s ago: executing program 2 (id=1032): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000000240)=ANY=[], 0x0) 2.539009549s ago: executing program 2 (id=1033): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x1, 0x4fb, &(0x7f0000000540)="$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") r0 = creat(&(0x7f0000000e40)='./bus\x00', 0x19) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) fallocate(r0, 0x0, 0xbf5, 0x2000402) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x2000, 0x103) connect$unix(r4, &(0x7f0000000180)=@file={0x1, './file2\x00'}, 0x6e) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffe000001}) 2.364804455s ago: executing program 0 (id=1034): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x40, 0x0, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000340)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100c404, &(0x7f0000000600)=ANY=[@ANYBLOB='quiet,fmask=00000000000000000006673,nodo\bs,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',discard,nodots,nodots,tz=UTC,nodots,dots,umask=00000000000000000000003,nodots,nodots,dots,showexec,nfs=stale_rw,nodots,showexec,dots,dots,dots,dots,\x00'], 0x1, 0x1fa, &(0x7f0000000800)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18, 0x1020000}, 0x41) set_mempolicy(0x4005, &(0x7f00000000c0)=0x4, 0x7) socket(0x10, 0x803, 0x0) socket$kcm(0x10, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=ANY=[@ANYBLOB="380000000314010026bd7000ffdbdf250900020072797a31000000000800410072786500140033006772653000"/56], 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008010) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000600)={r6, r0, 0x2, 0x0, 0x0, 0xf7, 0x5, 0x1, 0x1, 0x6, 0x6, 0xffffffff, 'syz0\x00'}) 2.364404545s ago: executing program 3 (id=1035): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socket$inet6(0xa, 0x802, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x10) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, &(0x7f0000000180), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) 2.283922077s ago: executing program 4 (id=1036): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000580)="17", 0xffffffffffffff99, 0x10008095, 0x0, 0x0) 1.498064332s ago: executing program 1 (id=1037): socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r1, r0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000440)=@sg0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40010040) sendto(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) 1.485244543s ago: executing program 0 (id=1038): socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x1e, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x2000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 1.2809581s ago: executing program 3 (id=1039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x5, 0x6, 0x401}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x44000) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)='\r', 0x1}, {&(0x7f0000000180)="332202f608fc6f70b6206dbe79", 0xd}], 0x2, 0x0, 0x0, 0x86dd}, 0x4) 1.218239631s ago: executing program 1 (id=1040): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) listen(0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) getsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000f80), 0x0) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a00000200"], 0x10}}, 0x0) 1.209852651s ago: executing program 0 (id=1041): r0 = syz_io_uring_complete(0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x7) mount$bpf(0x200000000000, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x20000, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000040)={0x3, 'batadv_slave_0\x00', {0x800}, 0x6}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) 1.029958667s ago: executing program 3 (id=1042): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r1}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001cc0), 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) lseek(0xffffffffffffffff, 0xfc, 0x1) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r3, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) 1.029536277s ago: executing program 4 (id=1043): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x9, 0x6}, 0x0, 0x7, 0x800000, 0x7, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 973.032809ms ago: executing program 2 (id=1044): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3, &(0x7f0000000300)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@noload}, {@noblock_validity}, {@noblock_validity}, {@grpjquota}]}, 0x1, 0x625, &(0x7f0000000800)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) read(r2, &(0x7f0000000600)=""/4096, 0x1000) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, 0x0, 0x0, 0xffffffffffffffff) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x2040, 0x0) 415.360196ms ago: executing program 3 (id=1045): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000200)=[{0x40, 0x2, 0xff, 0x7}, {0x6, 0x0, 0xff, 0x1}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r6) 404.354877ms ago: executing program 2 (id=1046): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x5, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195412, 0x0, 0x40, 0x0, &(0x7f0000000140)) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x43440, 0x0, 0x0, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) rename(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000900)='./file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, 0x0, 0x20000004) 308.6889ms ago: executing program 2 (id=1047): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x802) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000020c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x10, 0xfffa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0xe0, 0x3, 0x4, 0xb, 0x3, 0x7, 0x9, 0x0, 0x0, 0x80, 0x5, 0x0, 0x1a, 0x4, 0xff, 0x1d4}}]}}]}, 0x170}}, 0x24040004) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000080)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x4400, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x2000, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x1, "93c9691928972925723d55c712e63c92b492a3c50c9c3d27093a79585e8b73b3", "8aa4c506bcba17a29171be64a1e0f09d", {"c952a7f1f0443ce3114cee3518bfb345"}}}}}}}, 0x0) 235.640652ms ago: executing program 1 (id=1048): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) open(0x0, 0x80, 0x122) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x6000000) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r6, &(0x7f0000000300)=ANY=[], 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x23, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0x2, 0xfff2}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 164.878184ms ago: executing program 2 (id=1049): fcntl$lock(0xffffffffffffffff, 0x7, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd94ac76b42879f9f}, 0x20040040) socket$inet(0x2b, 0x801, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = io_uring_setup(0x56c5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) close(r1) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='cgroup\x00', 0x0, &(0x7f0000000380)='source') mremap(&(0x7f0000b88000/0x2000)=nil, 0x2000, 0x2000, 0x4, &(0x7f0000c5a000/0x2000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x7fff) io_uring_enter(r0, 0x560c, 0xacd, 0x40, 0x0, 0x0) 99.812806ms ago: executing program 0 (id=1050): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x7c}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) socket$kcm(0xa, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000100), 0x120) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x90) socket$kcm(0x2, 0x1, 0x84) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000000}, 0xa027, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f00000001c0)=0x2e7, 0x4) 59.888267ms ago: executing program 0 (id=1051): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40002000) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x110) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb}) r2 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000008240), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c0d1}, 0x40) r3 = eventfd2(0x8, 0xc0000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x18, &(0x7f0000000000)=r3, 0x1) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20008044) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x20000084}, 0x880) 0s ago: executing program 0 (id=1052): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0x6c0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008840) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) kernel console output (not intermixed with test programs): . [ 32.269677][ T3799] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.313468][ T28] audit: type=1400 audit(1781341442.146:307): avc: denied { write } for pid=3798 comm="syz.4.124" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.352751][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.363533][ T28] audit: type=1326 audit(1781341442.196:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3811 comm="syz.0.129" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4910d4ce59 code=0x0 [ 32.558971][ T3834] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.571473][ T3834] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.590489][ T28] audit: type=1400 audit(1781341442.416:309): avc: denied { write } for pid=3833 comm="syz.4.137" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.615581][ T28] audit: type=1400 audit(1781341442.416:310): avc: denied { create } for pid=3833 comm="syz.4.137" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 32.665060][ T3836] EXT4-fs: Ignoring removed nobh option [ 32.676826][ T28] audit: type=1400 audit(1781341442.416:311): avc: denied { write } for pid=3833 comm="syz.4.137" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.693312][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.698934][ T28] audit: type=1400 audit(1781341442.416:312): avc: denied { write } for pid=3833 comm="syz.4.137" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.739674][ T3836] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 32.748791][ T28] audit: type=1400 audit(1781341442.416:313): avc: denied { write } for pid=3833 comm="syz.4.137" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.770868][ T28] audit: type=1400 audit(1781341442.416:314): avc: denied { write } for pid=3833 comm="syz.4.137" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.793249][ T28] audit: type=1400 audit(1781341442.416:315): avc: denied { rename } for pid=3833 comm="syz.4.137" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.798542][ T3836] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.138: attempt to clear invalid blocks 1 len 1 [ 32.851716][ T3836] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 32.852263][ T3836] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, [ 32.858221][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 32.861434][ T3836] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 32.875102][ T3836] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.138: invalid indirect mapped block 1819239214 (level 0) [ 32.877307][ C0] EXT4-fs (loop2): initial error at time 1781341442: ext4_clear_blocks:876: inode 13 [ 32.901080][ T3836] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 32.909972][ C0] EXT4-fs (loop2): last error at time 1781341442: ext4_mb_generate_buddy:1317 [ 32.934757][ T3836] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.138: invalid indirect mapped block 1819239214 (level 1) [ 32.963676][ T3836] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 32.964067][ T3836] EXT4-fs (loop2): 1 truncate cleaned up [ 33.014026][ T3836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.036854][ T3836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.245421][ T3872] set_capacity_and_notify: 11 callbacks suppressed [ 33.245437][ T3872] loop1: detected capacity change from 0 to 512 [ 33.308827][ T3872] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 33.322621][ T3872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.335239][ T3872] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.360853][ T3884] loop0: detected capacity change from 0 to 1024 [ 33.385775][ T3884] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 33.424980][ T3884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.439741][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.823980][ T3901] loop2: detected capacity change from 0 to 764 [ 33.844010][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.797599][ T3922] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 35.050990][ T3940] syzkaller1: entered promiscuous mode [ 35.056753][ T3940] syzkaller1: entered allmulticast mode [ 35.094268][ T3944] loop3: detected capacity change from 0 to 512 [ 35.107662][ T3944] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.140346][ T3944] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 35.177634][ T3944] EXT4-fs (loop3): 1 truncate cleaned up [ 35.184068][ T3944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.452043][ T3955] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.459377][ T3955] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.473529][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.517128][ T3957] loop3: detected capacity change from 0 to 128 [ 35.521132][ T3955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.532995][ T3955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.596927][ T3955] geneve2: left promiscuous mode [ 35.603485][ T3955] geneve2: left allmulticast mode [ 35.611303][ T3488] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.620972][ T3488] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 35.633411][ T3488] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.653961][ T3488] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 35.662837][ T3488] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.681012][ T3488] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 35.696861][ T3488] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.706056][ T3488] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 35.863907][ T3972] loop3: detected capacity change from 0 to 128 [ 35.874841][ T3972] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.887155][ T3972] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.908769][ T3295] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.289481][ T3980] loop3: detected capacity change from 0 to 764 [ 36.351483][ T3888] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 36.871508][ T3994] loop2: detected capacity change from 0 to 7 [ 37.065744][ T4005] capability: warning: `syz.0.200' uses 32-bit capabilities (legacy support in use) [ 37.086112][ T4002] loop1: detected capacity change from 0 to 8192 [ 37.181737][ T4002] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 37.191329][ T4002] FAT-fs (loop1): Filesystem has been set read-only [ 37.368727][ T4011] xt_hashlimit: size too large, truncated to 1048576 [ 37.559672][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 37.559685][ T28] audit: type=1400 audit(1781341447.396:351): avc: denied { module_request } for pid=4010 comm="syz.1.203" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.774872][ T28] audit: type=1400 audit(1781341447.606:352): avc: denied { bind } for pid=4024 comm="syz.2.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.803142][ T28] audit: type=1400 audit(1781341447.606:353): avc: denied { listen } for pid=4024 comm="syz.2.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.823223][ T28] audit: type=1400 audit(1781341447.606:354): avc: denied { accept } for pid=4024 comm="syz.2.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.849088][ T4028] loop1: detected capacity change from 0 to 1024 [ 37.857379][ T4028] EXT4-fs: Ignoring removed bh option [ 37.871950][ T4028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.886904][ T28] audit: type=1400 audit(1781341447.716:355): avc: denied { write } for pid=4027 comm="syz.1.210" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.908583][ T28] audit: type=1400 audit(1781341447.736:356): avc: denied { map } for pid=4027 comm="syz.1.210" path="/39/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.931727][ T28] audit: type=1400 audit(1781341447.736:357): avc: denied { execute } for pid=4027 comm="syz.1.210" path="/39/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.980389][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.028853][ T4040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'. [ 38.038383][ T4040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'. [ 38.103433][ T28] audit: type=1400 audit(1781341447.936:358): avc: denied { sqpoll } for pid=4047 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 38.150933][ T4057] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.330071][ T4069] set_capacity_and_notify: 1 callbacks suppressed [ 38.330154][ T4069] loop0: detected capacity change from 0 to 4096 [ 38.349037][ T4069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.370364][ T28] audit: type=1400 audit(1781341448.206:359): avc: denied { write } for pid=4068 comm="syz.0.219" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.410678][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.432138][ T28] audit: type=1400 audit(1781341448.266:360): avc: denied { bind } for pid=4076 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.480525][ T4080] syzkaller1: entered promiscuous mode [ 38.486315][ T4080] syzkaller1: entered allmulticast mode [ 38.650285][ T4083] capability: warning: `syz.0.222' uses deprecated v2 capabilities in a way that may be insecure [ 38.728216][ T4085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'. [ 38.755116][ T4087] loop4: detected capacity change from 0 to 512 [ 38.786589][ T4087] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 38.798468][ T4087] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 38.809134][ T4087] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.225: Corrupt directory, running e2fsck is recommended [ 38.824000][ T4087] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 38.835969][ T4087] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.225: corrupted in-inode xattr: e_name out of bounds [ 38.850326][ T4087] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 38.850703][ T4087] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.225: couldn't read orphan inode 15 (err -117) [ 38.859867][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 38.859887][ C0] EXT4-fs (loop4): initial error at time 1781341448: ext4_iget_extra_inode:5128: inode 15 [ 38.859918][ C0] EXT4-fs (loop4): last error at time 1781341448: ext4_iget_extra_inode:5128: inode 15 [ 38.898878][ T4087] loop4: lost filesystem error report for type 5 error -117 [ 38.899788][ T4087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.568892][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.679403][ T4097] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.724562][ T4097] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.731873][ T4097] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.739023][ T4097] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.746091][ T4097] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.753213][ T4097] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.760213][ T4097] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.767181][ T4097] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.774273][ T4097] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.814924][ T4097] net_ratelimit: 56 callbacks suppressed [ 39.814949][ T4097] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.827719][ T4097] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.834888][ T4097] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.842028][ T4097] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.849038][ T4097] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.855979][ T4097] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.863040][ T4097] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.870188][ T4097] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.877168][ T4097] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.884258][ T4097] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 40.222438][ T4115] loop2: detected capacity change from 0 to 512 [ 40.238654][ T4115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.525957][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.557542][ T4127] loop2: detected capacity change from 0 to 256 [ 40.565719][ T4124] loop3: detected capacity change from 0 to 512 [ 40.601834][ T4124] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.617642][ T4127] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.635943][ T4127] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 40.636594][ T4124] EXT4-fs (loop3): 1 truncate cleaned up [ 40.644569][ T4127] FAT-fs (loop2): Filesystem has been set read-only [ 40.657675][ T4129] loop4: detected capacity change from 0 to 8192 [ 40.661212][ T4127] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 40.672564][ T4132] process 'syz.0.240' launched '/dev/fd/5' with NULL argv: empty string added [ 40.697434][ T4127] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 40.705550][ T4127] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 40.706005][ T4124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.721782][ T4134] loop1: detected capacity change from 0 to 512 [ 40.733335][ T4134] EXT4-fs: Ignoring removed bh option [ 40.737084][ T4134] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 40.737600][ T4134] EXT4-fs (loop1): 1 truncate cleaned up [ 40.738069][ T4134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.761904][ T4137] loop4: detected capacity change from 0 to 1024 [ 40.768900][ T4137] EXT4-fs: Ignoring removed bh option [ 40.786373][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.834782][ T4140] loop0: detected capacity change from 0 to 128 [ 40.850243][ T4137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.866712][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.877358][ T4140] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.892562][ T4140] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.953799][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.972669][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.041274][ T4158] loop1: detected capacity change from 0 to 1024 [ 41.059906][ T4160] EXT4-fs: Ignoring removed oldalloc option [ 41.074569][ T4158] EXT4-fs: Ignoring removed bh option [ 41.089773][ T4160] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.109978][ T4158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.125837][ T4160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.144956][ T4160] ext4 filesystem being mounted at /46/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.185843][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.205525][ T4170] EXT4-fs: Ignoring removed bh option [ 41.222882][ T4170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.282789][ T4175] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.308364][ T4175] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 41.309280][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.316389][ T4175] FAT-fs (loop4): Filesystem has been set read-only [ 41.332052][ T4175] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 41.358894][ T4175] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 41.366877][ T4175] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 41.395314][ T4178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 41.425744][ T4178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 41.434713][ T4059] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.443806][ T4059] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.452686][ T4059] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.461637][ T4059] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.478971][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.869953][ T4210] EXT4-fs (loop2): invalid journal inode [ 41.875735][ T4210] EXT4-fs (loop2): can't get journal size [ 41.882422][ T4210] EXT4-fs (loop2): 1 truncate cleaned up [ 41.888517][ T4210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.905838][ T4210] EXT4-fs warning (device loop2): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 41.964939][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.053594][ T4227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.126008][ T4226] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 42.140728][ T4226] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 42.162868][ T4226] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.162868][ T4226] [ 42.178144][ T4226] EXT4-fs (loop4): Total free blocks count 0 [ 42.184272][ T4226] EXT4-fs (loop4): Free/Dirty block details [ 42.190364][ T4226] EXT4-fs (loop4): free_blocks=4096 [ 42.195750][ T4226] EXT4-fs (loop4): dirty_blocks=32 [ 42.201095][ T4226] EXT4-fs (loop4): Block reservation details [ 42.207230][ T4226] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 42.240379][ T4062] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 2 with error 28 [ 42.253921][ T3301] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 42.301931][ T4246] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.582365][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 42.582378][ T28] audit: type=1400 audit(1781341452.416:407): avc: denied { setopt } for pid=4262 comm="syz.4.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 42.607932][ T28] audit: type=1400 audit(1781341452.416:408): avc: denied { connect } for pid=4262 comm="syz.4.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 42.646870][ T28] audit: type=1400 audit(1781341452.476:409): avc: denied { bind } for pid=4267 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.503093][ T28] audit: type=1400 audit(1781341453.336:410): avc: denied { read write } for pid=4293 comm="syz.3.303" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 43.584771][ T28] audit: type=1400 audit(1781341453.336:411): avc: denied { open } for pid=4293 comm="syz.3.303" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 43.646038][ T28] audit: type=1400 audit(1781341453.456:412): avc: denied { name_bind } for pid=4299 comm="syz.3.305" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 43.846327][ T28] audit: type=1400 audit(1781341453.676:413): avc: denied { write } for pid=4313 comm="syz.2.311" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 43.948801][ T28] audit: type=1400 audit(1781341453.706:414): avc: denied { append } for pid=4313 comm="syz.2.311" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 44.090948][ T4323] netlink: 'syz.2.314': attribute type 4 has an invalid length. [ 44.231376][ T28] audit: type=1400 audit(1781341454.066:415): avc: denied { setopt } for pid=4326 comm="syz.0.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 44.251521][ T28] audit: type=1400 audit(1781341454.086:416): avc: denied { read } for pid=4326 comm="syz.0.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 44.383695][ T4336] xt_hashlimit: size too large, truncated to 1048576 [ 44.612331][ T4350] set_capacity_and_notify: 7 callbacks suppressed [ 44.612345][ T4350] loop0: detected capacity change from 0 to 512 [ 44.647579][ T4350] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.324: bad orphan inode 13 [ 44.661197][ T4350] loop0: lost filesystem error report for type 5 error -117 [ 44.661349][ T4350] ext4_test_bit(bit=12, block=4) = 1 [ 44.668711][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 44.668738][ C0] EXT4-fs (loop0): initial error at time 1781341454: ext4_orphan_get:1423 [ 44.668762][ C0] EXT4-fs (loop0): last error at time 1781341454: ext4_orphan_get:1423 [ 44.701128][ T4350] is_bad_inode(inode)=0 [ 44.705319][ T4350] NEXT_ORPHAN(inode)=0 [ 44.709529][ T4350] max_ino=32 [ 44.712729][ T4350] i_nlink=1 [ 44.716335][ T4350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.732357][ T4350] EXT4-fs warning (device loop0): dx_probe:813: inode #2: comm syz.0.324: Hash code is SIPHASH, but hash not in dirent [ 44.745042][ T4350] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.324: Corrupt directory, running e2fsck is recommended [ 44.758458][ T4350] EXT4-fs warning (device loop0): dx_probe:813: inode #2: comm syz.0.324: Hash code is SIPHASH, but hash not in dirent [ 44.771124][ T4350] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.324: Corrupt directory, running e2fsck is recommended [ 44.813989][ T4359] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 44.822976][ T4359] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 44.840790][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.904014][ T4365] loop1: detected capacity change from 0 to 4096 [ 44.918408][ T4365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.010863][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.095723][ T4387] syzkaller1: entered promiscuous mode [ 45.101345][ T4387] syzkaller1: entered allmulticast mode [ 45.202963][ T4395] syz_tun: entered allmulticast mode [ 45.219628][ T4394] syz_tun: left allmulticast mode [ 45.263124][ T4398] loop1: detected capacity change from 0 to 512 [ 45.286821][ T4398] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.345: inode has both inline data and extents flags [ 45.324189][ T4398] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 45.324308][ T4398] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.345: couldn't read orphan inode 15 (err -117) [ 45.333751][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 45.333772][ C1] EXT4-fs (loop1): initial error at time 1781341455: ext4_orphan_get:1397: inode 15 [ 45.333804][ C1] EXT4-fs (loop1): last error at time 1781341455: ext4_orphan_get:1397: inode 15 [ 45.371962][ T4398] loop1: lost filesystem error report for type 5 error -117 [ 45.372621][ T4398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.432099][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.588523][ T4422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.627209][ T4422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.753747][ T4440] syzkaller0: entered promiscuous mode [ 45.759365][ T4440] syzkaller0: entered allmulticast mode [ 45.838070][ T4447] tipc: Started in network mode [ 45.842979][ T4447] tipc: Node identity 4, cluster identity 4711 [ 45.849522][ T4447] tipc: Node number set to 4 [ 46.029038][ T4465] loop1: detected capacity change from 0 to 8192 [ 46.104582][ T3294] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 46.112609][ T3294] FAT-fs (loop1): Filesystem has been set read-only [ 46.270083][ T4493] netlink: 20 bytes leftover after parsing attributes in process `syz.1.382'. [ 46.433053][ T4500] loop1: detected capacity change from 0 to 512 [ 46.498898][ T4500] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 46.564579][ T4509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'. [ 46.659148][ T4521] loop1: detected capacity change from 0 to 128 [ 46.675675][ T4523] netlink: 'syz.2.394': attribute type 1 has an invalid length. [ 46.689966][ T4523] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.705124][ T4523] bond1: (slave ip6erspan0): making interface the new active one [ 46.714379][ T4523] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 46.895872][ T4546] loop2: detected capacity change from 0 to 512 [ 46.910071][ T4546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.922781][ T4546] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.945136][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.987599][ T4552] loop2: detected capacity change from 0 to 1024 [ 47.005812][ T4559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'. [ 47.006753][ T4552] EXT4-fs: Ignoring removed oldalloc option [ 47.014905][ T4559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'. [ 47.027973][ T4552] EXT4-fs: Ignoring removed bh option [ 47.038474][ T4559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'. [ 47.053265][ T4552] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 47.053265][ T4552] [ 47.056562][ T4559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'. [ 47.196896][ T4572] netlink: 'syz.1.413': attribute type 11 has an invalid length. [ 47.231446][ T4572] netlink: 36 bytes leftover after parsing attributes in process `syz.1.413'. [ 47.677190][ T4578] net_ratelimit: 3257 callbacks suppressed [ 47.677205][ T4578] Set syz1 is full, maxelem 65536 reached [ 48.017909][ T4591] loop2: detected capacity change from 0 to 764 [ 48.084627][ T3376] IPVS: starting estimator thread 0... [ 48.093872][ T4597] tipc: Started in network mode [ 48.099095][ T4597] tipc: Node identity ac1414aa, cluster identity 4711 [ 48.118937][ T4597] tipc: Enabled bearer , priority 10 [ 48.178026][ T4598] IPVS: using max 2352 ests per chain, 117600 per kthread [ 48.265280][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 48.265303][ T28] audit: type=1326 audit(1781341458.096:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.1.427" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08371ce59 code=0x7ffc0000 [ 48.304307][ T4591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.326554][ T4607] loop3: detected capacity change from 0 to 1024 [ 48.330329][ T4591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.352638][ T4607] EXT4-fs: Ignoring removed bh option [ 48.358328][ T28] audit: type=1326 audit(1781341458.146:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.1.427" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08371ce59 code=0x7ffc0000 [ 48.391302][ T4607] EXT4-fs: Ignoring removed oldalloc option [ 48.399650][ T28] audit: type=1326 audit(1781341458.146:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.1.427" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08371ce59 code=0x7ffc0000 [ 48.426622][ T28] audit: type=1326 audit(1781341458.146:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.1.427" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08371ce59 code=0x7ffc0000 [ 48.452782][ T28] audit: type=1326 audit(1781341458.146:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.1.427" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff08371ce59 code=0x7ffc0000 [ 48.482652][ T28] audit: type=1326 audit(1781341458.196:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.1.427" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08371ce59 code=0x7ffc0000 [ 48.486128][ T4617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'. [ 48.508675][ T28] audit: type=1326 audit(1781341458.196:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.1.427" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08371ce59 code=0x7ffc0000 [ 48.524539][ T4607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.542295][ T28] audit: type=1326 audit(1781341458.196:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.1.427" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff08371ce59 code=0x7ffc0000 [ 48.579421][ T28] audit: type=1326 audit(1781341458.196:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.1.427" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff08371ce59 code=0x7ffc0000 [ 48.636931][ T28] audit: type=1400 audit(1781341458.466:457): avc: denied { write } for pid=4606 comm="syz.3.425" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.680988][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.763310][ T4639] sctp: [Deprecated]: syz.3.433 (pid 4639) Use of struct sctp_assoc_value in delayed_ack socket option. [ 48.763310][ T4639] Use struct sctp_sack_info instead [ 49.238037][ T3383] tipc: Node number set to 2886997162 [ 50.664572][ T4654] set_capacity_and_notify: 1 callbacks suppressed [ 50.664588][ T4654] loop0: detected capacity change from 0 to 764 [ 50.896334][ T4657] syzkaller0: entered promiscuous mode [ 50.908004][ T4657] syzkaller0: entered allmulticast mode [ 51.194581][ T4671] SELinux: failed to load policy [ 51.227703][ T4673] loop3: detected capacity change from 0 to 512 [ 51.242156][ T4673] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.268987][ T4673] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.318988][ T4673] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 51.330052][ T4673] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 51.349051][ T4673] EXT4-fs (loop3): 1 truncate cleaned up [ 51.357444][ T4673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.389872][ T4673] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 4: comm syz.3.447: lblock 0 mapped to illegal pblock 4 (length 1) [ 51.421761][ T4673] EXT4-fs (loop3): Remounting filesystem read-only [ 51.481468][ T4689] loop1: detected capacity change from 0 to 512 [ 51.508124][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.523694][ T4689] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.558782][ T4689] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.452: iget: bad i_size value: 38620345925642 [ 51.607821][ T4694] pimreg: entered allmulticast mode [ 51.625814][ T4689] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 51.625991][ T4689] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.452: couldn't read orphan inode 15 (err -117) [ 51.635188][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 51.635205][ C1] EXT4-fs (loop1): initial error at time 1781341461: ext4_orphan_get:1397: inode 15 [ 51.635253][ C1] EXT4-fs (loop1): last error at time 1781341461: ext4_orphan_get:1397: inode 15 [ 51.783643][ T4689] loop1: lost filesystem error report for type 5 error -117 [ 51.784226][ T4689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.901746][ T4726] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.452: bg 0: block 5: invalid block bitmap [ 51.925499][ T4726] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1052 with error 28 [ 51.938209][ T4726] EXT4-fs (loop1): This should not happen!! Data will be lost [ 51.938209][ T4726] [ 51.947909][ T4726] EXT4-fs (loop1): Total free blocks count 0 [ 52.001608][ T4726] EXT4-fs (loop1): Free/Dirty block details [ 52.007818][ T4726] EXT4-fs (loop1): free_blocks=0 [ 52.017128][ T4726] EXT4-fs (loop1): dirty_blocks=1056 [ 52.029867][ T4726] EXT4-fs (loop1): Block reservation details [ 52.035970][ T4726] EXT4-fs (loop1): i_reserved_data_blocks=1056 [ 52.054068][ T4747] IPVS: Scheduler module ip_vs_ not found [ 52.072531][ T4689] EXT4-fs (loop1): shut down requested (0) [ 52.168788][ T4770] syzkaller0: entered promiscuous mode [ 52.179827][ T4770] syzkaller0: entered allmulticast mode [ 52.387666][ T4810] syzkaller0: entered allmulticast mode [ 52.487714][ T4824] syzkaller0: entered promiscuous mode [ 52.493628][ T4824] syzkaller0: entered allmulticast mode [ 52.867218][ T4866] syzkaller0: entered promiscuous mode [ 52.925549][ T4866] syzkaller0: entered allmulticast mode [ 53.600299][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 53.600314][ T28] audit: type=1400 audit(1781341463.436:486): avc: denied { wake_alarm } for pid=4878 comm="syz.3.487" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 54.299372][ T4901] loop0: detected capacity change from 0 to 764 [ 54.856012][ T28] audit: type=1400 audit(1781341464.686:487): avc: denied { cpu } for pid=4908 comm="syz.1.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 54.995808][ T4920] syzkaller0: entered promiscuous mode [ 55.021561][ T4920] syzkaller0: entered allmulticast mode [ 55.365346][ T4929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.502'. [ 55.472299][ T28] audit: type=1400 audit(1781341465.306:488): avc: denied { read write } for pid=4930 comm="syz.4.503" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 55.578295][ T28] audit: type=1400 audit(1781341465.306:489): avc: denied { open } for pid=4930 comm="syz.4.503" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 55.607011][ T28] audit: type=1400 audit(1781341465.416:490): avc: denied { bind } for pid=4933 comm="syz.0.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.626433][ T28] audit: type=1400 audit(1781341465.416:491): avc: denied { listen } for pid=4933 comm="syz.0.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.650897][ T4936] team0: Port device syz_tun added [ 55.666801][ T28] audit: type=1400 audit(1781341465.416:492): avc: denied { accept } for pid=4933 comm="syz.0.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.782619][ T4942] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 55.783939][ T4946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.799240][ T4946] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.814120][ T4950] netlink: 'syz.1.510': attribute type 1 has an invalid length. [ 55.815526][ T4946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.841510][ T28] audit: type=1400 audit(1781341465.676:493): avc: denied { ioctl } for pid=4953 comm="syz.1.511" path="socket:[9387]" dev="sockfs" ino=9387 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.885828][ T4946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.894802][ T4946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.904859][ T4946] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.915328][ T4946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.927267][ T4946] veth1_vlan: left promiscuous mode [ 55.933096][ T4946] veth0_vlan: left promiscuous mode [ 55.938750][ T4946] veth0_vlan: entered promiscuous mode [ 55.946584][ T4946] veth1_vlan: entered promiscuous mode [ 55.955356][ T4946] veth1_macvtap: left promiscuous mode [ 55.961716][ T4946] veth0_macvtap: left promiscuous mode [ 55.967884][ T4946] veth0_macvtap: entered promiscuous mode [ 55.974392][ T4946] veth1_macvtap: entered promiscuous mode [ 55.982706][ T4946] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.990692][ T4946] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.999158][ T4946] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.007110][ T4946] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.020892][ T4054] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.028059][ T4054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.049976][ T4054] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.057075][ T4054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.089033][ T4061] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.098211][ T4061] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.109428][ T4061] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.118210][ T4061] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.127128][ T4059] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 56.162242][ T4961] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_0, syncid = 134217731, id = 0 [ 56.189388][ T28] audit: type=1400 audit(1781341466.026:494): avc: denied { setopt } for pid=4962 comm="syz.2.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.189911][ T4963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.514'. [ 56.606398][ T4970] loop4: detected capacity change from 0 to 512 [ 56.617908][ T4970] ------------[ cut here ]------------ [ 56.623435][ T4970] EA inode 11 i_nlink=0 [ 56.623459][ T4970] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x301/0x330, CPU#0: syz.4.517/4970 [ 56.638310][ T4970] Modules linked in: [ 56.642357][ T4970] CPU: 0 UID: 0 PID: 4970 Comm: syz.4.517 Not tainted syzkaller #0 PREEMPT(lazy) [ 56.651646][ T4970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 56.661910][ T4970] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 56.668686][ T4970] Code: 86 98 98 ff 4c 8d 2d cf 44 5c 05 49 8d 7e 40 e8 36 4a b6 ff 49 8b 6e 40 4c 89 e7 e8 6a 45 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 c1 52 d5 03 90 90 90 90 90 90 90 [ 56.688388][ T4970] RSP: 0018:ffffc90010903648 EFLAGS: 00010246 [ 56.694467][ T4970] RAX: ffff8881052a4f00 RBX: ffff8881082b32f8 RCX: ffffffff81c069a6 [ 56.702500][ T4970] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871cae60 [ 56.710524][ T4970] RBP: 000000000000000b R08: 00018881082b32ab R09: 0000000000000000 [ 56.718585][ T4970] R10: ffffc90010903578 R11: 0001c90010903578 R12: ffff8881082b32a8 [ 56.726604][ T4970] R13: ffffffff871cae60 R14: ffff8881082b3260 R15: 0000000000000001 [ 56.734651][ T4970] FS: 00007f2f5e75f6c0(0000) GS:ffff8882ae90d000(0000) knlGS:0000000000000000 [ 56.743623][ T4970] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.750253][ T4970] CR2: 00007f2f5637e000 CR3: 00000001226f2000 CR4: 00000000003506f0 [ 56.758310][ T4970] Call Trace: [ 56.761592][ T4970] [ 56.764511][ T4970] ext4_xattr_set_entry+0x78a/0x1050 [ 56.769908][ T4970] ext4_xattr_ibody_set+0x156/0x390 [ 56.775120][ T4970] ext4_expand_extra_isize_ea+0xc04/0x1120 [ 56.780977][ T4970] __ext4_expand_extra_isize+0x246/0x280 [ 56.786629][ T4970] __ext4_mark_inode_dirty+0x290/0x3d0 [ 56.792275][ T4970] ext4_evict_inode+0x8b3/0xe30 [ 56.797182][ T4970] ? __pfx_ext4_evict_inode+0x10/0x10 [ 56.802600][ T4970] evict+0x2a5/0x510 [ 56.806517][ T4970] iput+0x430/0x5a0 [ 56.810392][ T4970] ext4_process_orphan+0x1a4/0x1c0 [ 56.815510][ T4970] ext4_orphan_cleanup+0x6a6/0xa10 [ 56.820642][ T4970] ? ext4_register_li_request+0x403/0x440 [ 56.826367][ T4970] ext4_fill_super+0x33d5/0x3780 [ 56.831341][ T4970] ? set_blocksize+0x14c/0x270 [ 56.836121][ T4970] ? __pfx_ext4_fill_super+0x10/0x10 [ 56.841475][ T4970] get_tree_bdev_flags+0x291/0x300 [ 56.846657][ T4970] ? __pfx_ext4_fill_super+0x10/0x10 [ 56.851979][ T4970] get_tree_bdev+0x1f/0x30 [ 56.856408][ T4970] ext4_get_tree+0x1c/0x30 [ 56.860907][ T4970] vfs_get_tree+0x57/0x1d0 [ 56.865469][ T4970] do_new_mount+0x288/0x8d0 [ 56.870020][ T4970] path_mount+0x4ad/0xb90 [ 56.874382][ T4970] __se_sys_mount+0x28c/0x2e0 [ 56.879161][ T4970] ? __se_sys_mkdirat+0xa2/0xf0 [ 56.884042][ T4970] ? kmem_cache_free+0xca/0x380 [ 56.888945][ T4970] __x64_sys_mount+0x67/0x80 [ 56.893631][ T4970] x64_sys_call+0x2d61/0x3020 [ 56.898364][ T4970] do_syscall_64+0x136/0x3c0 [ 56.903042][ T4970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.908987][ T4970] RIP: 0033:0x7f2f5fd0e0ca [ 56.913464][ T4970] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.933178][ T4970] RSP: 002b:00007f2f5e75ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 56.941676][ T4970] RAX: ffffffffffffffda RBX: 00007f2f5e75eee0 RCX: 00007f2f5fd0e0ca [ 56.949676][ T4970] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f2f5e75eea0 [ 56.957645][ T4970] RBP: 0000200000000180 R08: 00007f2f5e75eee0 R09: 0000000000000000 [ 56.965748][ T4970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 56.973744][ T4970] R13: 00007f2f5e75eea0 R14: 000000000000047a R15: 00002000000001c0 [ 56.981792][ T4970] [ 56.984809][ T4970] ---[ end trace 0000000000000000 ]--- [ 56.991088][ T4970] EXT4-fs error (device loop4): ext4_free_inode:354: comm syz.4.517: bit already cleared for inode 11 [ 57.002406][ T4970] loop4: lost filesystem error report for type 5 error -117 [ 57.004731][ T4970] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 57.012134][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 57.012160][ C0] EXT4-fs (loop4): initial error at time 1781341466: ext4_free_inode:354 [ 57.012202][ C0] EXT4-fs (loop4): last error at time 1781341466: ext4_free_inode:354 [ 57.047088][ T4970] loop4: lost filesystem error report for type 5 error -117 [ 57.048324][ T4970] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 57.072381][ T4970] loop4: lost filesystem error report for type 5 error -117 [ 57.072790][ T4970] EXT4-fs (loop4): 1 orphan inode deleted [ 57.090849][ T4970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.121797][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.161236][ T28] audit: type=1326 audit(1781341466.996:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.4.523" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f5fd0ce59 code=0x0 [ 57.194518][ T4985] syzkaller0: entered promiscuous mode [ 57.200174][ T4985] syzkaller0: entered allmulticast mode [ 57.895182][ T5013] loop0: detected capacity change from 0 to 764 [ 58.325675][ T5012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'. [ 58.751132][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 58.751147][ T28] audit: type=1400 audit(1781341468.586:506): avc: denied { mount } for pid=5022 comm="syz.1.534" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 59.099705][ T5028] syzkaller0: entered promiscuous mode [ 59.105218][ T5028] syzkaller0: entered allmulticast mode [ 59.113390][ T5030] syzkaller0: entered promiscuous mode [ 59.119001][ T5030] syzkaller0: entered allmulticast mode [ 59.192653][ T5034] netlink: 'syz.0.538': attribute type 3 has an invalid length. [ 59.200512][ T5034] netlink: 132 bytes leftover after parsing attributes in process `syz.0.538'. [ 59.241880][ T28] audit: type=1400 audit(1781341469.076:507): avc: denied { connect } for pid=5040 comm="syz.2.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.241981][ T5041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'. [ 59.272500][ T5037] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 59.358881][ T5044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.372703][ T5044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.851086][ T5069] loop4: detected capacity change from 0 to 764 [ 59.868102][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 60.217352][ T5081] netlink: 'syz.2.553': attribute type 1 has an invalid length. [ 60.297031][ T5082] netlink: 28 bytes leftover after parsing attributes in process `syz.2.553'. [ 60.347494][ T5081] bond2: entered promiscuous mode [ 60.360094][ T5081] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.444746][ T5082] bond2: entered allmulticast mode [ 60.486687][ T5087] bond2: (slave bridge1): making interface the new active one [ 60.510544][ T5087] bridge1: entered promiscuous mode [ 60.523118][ T5087] bridge1: entered allmulticast mode [ 60.542904][ T5087] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 60.584254][ T5089] syzkaller0: entered promiscuous mode [ 60.601972][ T5089] syzkaller0: entered allmulticast mode [ 60.624303][ T5089] tipc: Enabled bearer , priority 0 [ 60.636463][ T5088] tipc: Resetting bearer [ 60.655874][ T5088] tipc: Disabling bearer [ 60.711366][ T5100] netlink: 36 bytes leftover after parsing attributes in process `syz.2.560'. [ 60.742199][ T5100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.560'. [ 60.770476][ T5100] netlink: 36 bytes leftover after parsing attributes in process `syz.2.560'. [ 61.182544][ T5113] syzkaller0: entered promiscuous mode [ 61.198232][ T5113] syzkaller0: entered allmulticast mode [ 61.684095][ T5136] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 61.946302][ T5141] loop0: detected capacity change from 0 to 764 [ 62.051715][ T5144] gretap0: entered promiscuous mode [ 62.095970][ T5144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.575'. [ 62.147028][ T5144] gretap0: left promiscuous mode [ 62.947421][ T28] audit: type=1400 audit(1781341472.776:508): avc: denied { watch watch_reads } for pid=5151 comm="syz.1.579" path="/136/file1" dev="tmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.119335][ T5152] loop1: detected capacity change from 0 to 512 [ 63.171094][ T5152] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 63.221125][ T5152] EXT4-fs: error: could not find journal device path [ 63.369092][ T5162] syzkaller0: entered promiscuous mode [ 63.387165][ T5162] syzkaller0: entered allmulticast mode [ 63.477337][ T5165] SELinux: failed to load policy [ 63.561815][ T5175] gretap0: entered promiscuous mode [ 63.585977][ T5175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. [ 63.621689][ T5175] gretap0: left promiscuous mode [ 63.666397][ T5167] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 63.821450][ T5186] syzkaller0: entered promiscuous mode [ 63.827073][ T5186] syzkaller0: entered allmulticast mode [ 63.834956][ T5186] tipc: Started in network mode [ 63.840083][ T5186] tipc: Node identity e2722c509891, cluster identity 4711 [ 63.847465][ T5186] tipc: Enabled bearer , priority 0 [ 63.855225][ T5185] tipc: Resetting bearer [ 63.864707][ T5185] tipc: Disabling bearer [ 64.136985][ T5188] loop3: detected capacity change from 0 to 764 [ 64.324823][ T5191] netlink: 240 bytes leftover after parsing attributes in process `syz.0.593'. [ 64.699463][ T28] audit: type=1400 audit(1781341474.426:509): avc: denied { mount } for pid=5196 comm="syz.0.596" name="/" dev="autofs" ino=10405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 64.747178][ T5201] loop1: detected capacity change from 0 to 512 [ 64.803895][ T5201] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.822748][ T28] audit: type=1326 audit(1781341474.456:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz.4.595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f5fd0ce59 code=0x0 [ 64.851816][ T5201] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 64.890139][ T5201] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 64.922127][ T5201] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 64.948322][ T5201] System zones: 0-2, 18-18, 34-35 [ 64.955064][ T5210] loop4: detected capacity change from 0 to 1024 [ 64.978422][ T5201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.996304][ T5210] EXT4-fs: Ignoring removed orlov option [ 65.017507][ T28] audit: type=1400 audit(1781341474.846:511): avc: denied { write } for pid=5199 comm="syz.1.597" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.057527][ T5201] xt_TCPMSS: Only works on TCP SYN packets [ 65.093690][ T5210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.107969][ T28] audit: type=1400 audit(1781341474.876:512): avc: denied { create } for pid=5199 comm="syz.1.597" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 65.176478][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.201001][ T5210] netlink: 'syz.4.598': attribute type 3 has an invalid length. [ 65.216350][ T5210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.598'. [ 65.258980][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.304589][ T5219] gretap0: entered promiscuous mode [ 65.310671][ T5219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'. [ 65.319725][ T5219] gretap0: left promiscuous mode [ 65.553837][ T5238] loop0: detected capacity change from 0 to 512 [ 65.557416][ T5239] loop2: detected capacity change from 0 to 7 [ 65.560639][ T5238] EXT4-fs: Ignoring removed nobh option [ 65.600097][ T5238] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #3: comm syz.0.608: corrupted inode contents [ 65.616213][ T5238] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 65.617641][ T5238] EXT4-fs (loop0): Remounting filesystem read-only [ 65.626714][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 65.626729][ C1] EXT4-fs (loop0): initial error at time 1781341475: ext4_do_update_inode:5690: inode 3 [ 65.626774][ C1] EXT4-fs (loop0): last error at time 1781341475: ext4_do_update_inode:5690: inode 3 [ 65.661992][ T5238] Quota error (device loop0): write_blk: dquota write failed [ 65.669511][ T5238] Quota error (device loop0): qtree_write_dquot: Error -30 occurred while creating quota [ 65.682874][ T5238] EXT4-fs (loop0): 1 truncate cleaned up [ 65.694714][ T5249] syzkaller0: entered promiscuous mode [ 65.700487][ T5249] syzkaller0: entered allmulticast mode [ 65.708478][ T5238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.711283][ T5249] TC_ACT_REPEAT abuse ? [ 65.721068][ T5238] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.759292][ T5238] netlink: 132 bytes leftover after parsing attributes in process `syz.0.608'. [ 65.841607][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.848857][ T5252] netlink: 'syz.3.612': attribute type 10 has an invalid length. [ 65.867543][ T5252] team0 (unregistering): Port device team_slave_0 removed [ 65.895160][ T5252] team0 (unregistering): Port device team_slave_1 removed [ 65.957701][ T5256] SELinux: failed to load policy [ 65.975746][ T28] audit: type=1400 audit(1781341475.806:513): avc: denied { ioctl } for pid=5259 comm="syz.4.616" path="socket:[9748]" dev="sockfs" ino=9748 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.790452][ T5277] netlink: 'syz.0.621': attribute type 1 has an invalid length. [ 66.828383][ T28] audit: type=1400 audit(1781341476.636:514): avc: denied { connect } for pid=5274 comm="syz.2.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.897356][ T5278] netlink: 28 bytes leftover after parsing attributes in process `syz.0.621'. [ 67.055964][ T5277] bond1: entered promiscuous mode [ 67.064004][ T28] audit: type=1400 audit(1781341476.636:515): avc: denied { read } for pid=5274 comm="syz.2.622" path="socket:[9792]" dev="sockfs" ino=9792 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.111681][ T5277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.143487][ T5278] bond1: entered allmulticast mode [ 67.225016][ T5285] bond1: (slave bridge1): making interface the new active one [ 67.246804][ T5285] bridge1: entered promiscuous mode [ 67.266715][ T5285] bridge1: entered allmulticast mode [ 67.299526][ T5285] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 67.468015][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 67.560176][ T5301] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.567345][ T5301] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.782650][ T5301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.804418][ T5301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.903018][ T4059] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.944005][ T5310] syzkaller0: entered promiscuous mode [ 67.962504][ T5310] syzkaller0: entered allmulticast mode [ 67.971952][ T4059] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.081042][ T4059] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.147518][ T5317] netlink: 'syz.1.636': attribute type 10 has an invalid length. [ 68.191485][ T4059] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.234083][ T5322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 68.276867][ T5317] veth0_vlan: left promiscuous mode [ 68.283271][ T5317] veth0_vlan: entered promiscuous mode [ 68.314742][ T5317] team0: Device veth0_vlan failed to register rx_handler [ 68.468804][ T28] audit: type=1400 audit(1781341478.306:516): avc: denied { setopt } for pid=5337 comm="syz.3.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.586993][ T5348] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 68.595216][ T5350] syzkaller0: entered promiscuous mode [ 68.595252][ T5350] syzkaller0: entered allmulticast mode [ 68.626465][ T5348] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 69.142345][ T5374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 69.368149][ T5391] loop0: detected capacity change from 0 to 1024 [ 69.375288][ T5391] EXT4-fs: Ignoring removed nobh option [ 69.381216][ T5391] EXT4-fs: Ignoring removed i_version option [ 69.393027][ T5391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.425377][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.465102][ T5398] tipc: Cannot configure node identity twice [ 69.488559][ T5400] loop1: detected capacity change from 0 to 128 [ 69.496566][ T5400] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.509823][ T5400] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.544416][ T4059] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.247547][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.672'. [ 70.259417][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.672'. [ 70.287712][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.672'. [ 70.296943][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.672'. [ 71.622513][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 71.622537][ T28] audit: type=1400 audit(1781341481.456:554): avc: denied { create } for pid=5433 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 71.657780][ T5434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.676'. [ 71.699516][ T5434] bond1: entered promiscuous mode [ 71.704709][ T5434] bond1: entered allmulticast mode [ 71.744553][ T5447] syzkaller0: entered promiscuous mode [ 71.759339][ T5447] syzkaller0: entered allmulticast mode [ 71.838956][ T28] audit: type=1400 audit(1781341481.676:555): avc: denied { setopt } for pid=5454 comm="syz.3.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.949584][ T5460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.687'. [ 71.978237][ T28] audit: type=1400 audit(1781341481.816:556): avc: denied { write } for pid=5461 comm="syz.3.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 71.999305][ T28] audit: type=1400 audit(1781341481.816:557): avc: denied { create } for pid=5461 comm="syz.3.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.019362][ T28] audit: type=1400 audit(1781341481.816:558): avc: denied { ioctl } for pid=5461 comm="syz.3.688" path="socket:[10146]" dev="sockfs" ino=10146 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.561928][ T28] audit: type=1400 audit(1781341482.396:559): avc: denied { bind } for pid=5472 comm="syz.2.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.635108][ T5475] tipc: Failed to remove unknown binding: 66,0,0/0:1141468509/1141468511 [ 72.643973][ T5473] tipc: Failed to remove unknown binding: 66,0,0/0:3454843618/3454843619 [ 72.656049][ T5473] tipc: Failed to remove unknown binding: 66,0,0/0:3454843618/3454843619 [ 72.705518][ T28] audit: type=1400 audit(1781341482.536:560): avc: denied { ioctl } for pid=5476 comm="syz.4.694" path="socket:[10173]" dev="sockfs" ino=10173 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.783840][ T5479] loop4: detected capacity change from 0 to 128 [ 72.857720][ T5483] netlink: 'syz.4.696': attribute type 10 has an invalid length. [ 72.893907][ T5483] veth0_vlan: left promiscuous mode [ 72.905336][ T5483] veth0_vlan: entered promiscuous mode [ 72.922947][ T5483] team0: Device veth0_vlan failed to register rx_handler [ 72.938927][ T28] audit: type=1400 audit(1781341482.766:561): avc: denied { mounton } for pid=5484 comm="syz.3.698" path="/143/file0" dev="tmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.035826][ T5492] syzkaller0: entered promiscuous mode [ 73.046907][ T5492] syzkaller0: entered allmulticast mode [ 73.306764][ T28] audit: type=1400 audit(1781341483.136:562): avc: denied { write } for pid=5497 comm="syz.4.704" path="socket:[10201]" dev="sockfs" ino=10201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 73.580402][ T5523] netlink: 'syz.0.709': attribute type 10 has an invalid length. [ 73.597623][ T5523] veth0_vlan: left promiscuous mode [ 73.612080][ T5523] veth0_vlan: entered promiscuous mode [ 73.630392][ T5523] team0: Device veth0_vlan failed to register rx_handler [ 73.763020][ T5527] syzkaller0: entered promiscuous mode [ 73.768833][ T5527] syzkaller0: entered allmulticast mode [ 73.874050][ T5533] tipc: Enabled bearer , priority 10 [ 73.880190][ T3410] IPVS: starting estimator thread 0... [ 73.968007][ T5534] IPVS: using max 2448 ests per chain, 122400 per kthread [ 74.105315][ T5537] syzkaller0: entered promiscuous mode [ 74.114711][ T5537] syzkaller0: entered allmulticast mode [ 74.127681][ T5538] syzkaller0: entered promiscuous mode [ 74.133629][ T5538] syzkaller0: entered allmulticast mode [ 74.142025][ T5537] TC_ACT_REPEAT abuse ? [ 74.274781][ T5547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.718'. [ 74.346142][ T5551] syzkaller0: entered promiscuous mode [ 74.413254][ T5555] syzkaller0: entered promiscuous mode [ 74.418886][ T5555] syzkaller0: entered allmulticast mode [ 74.500973][ T28] audit: type=1400 audit(1781341484.336:563): avc: denied { append } for pid=5559 comm="syz.4.724" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 74.535120][ T5556] macsec1: entered promiscuous mode [ 74.551043][ T5556] batadv0: entered promiscuous mode [ 74.556513][ T5556] macsec1: entered allmulticast mode [ 74.562081][ T5556] batadv0: entered allmulticast mode [ 74.568135][ T5556] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 74.897227][ T5582] syz_tun: entered allmulticast mode [ 74.904920][ T5582] bond0: entered promiscuous mode [ 74.910299][ T5582] bond_slave_0: entered promiscuous mode [ 74.916202][ T5582] bond_slave_1: entered promiscuous mode [ 75.380907][ T5590] loop1: detected capacity change from 0 to 764 [ 75.850833][ T5593] syzkaller0: entered promiscuous mode [ 75.877823][ T5593] syzkaller0: entered allmulticast mode [ 75.904229][ T5600] netlink: 76 bytes leftover after parsing attributes in process `syz.2.736'. [ 76.158019][ T5618] loop4: detected capacity change from 0 to 512 [ 76.176088][ T5618] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.224781][ T5618] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.738: iget: bad i_size value: 38620345925642 [ 76.255218][ T5618] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 76.255411][ T5618] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.738: couldn't read orphan inode 15 (err -117) [ 76.264594][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 76.264613][ C0] EXT4-fs (loop4): initial error at time 1781341486: ext4_orphan_get:1397: inode 15 [ 76.264647][ C0] EXT4-fs (loop4): last error at time 1781341486: ext4_orphan_get:1397: inode 15 [ 76.317155][ T5618] loop4: lost filesystem error report for type 5 error -117 [ 76.317786][ T5618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.483440][ T5618] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.738: bg 0: block 5: invalid block bitmap [ 76.502495][ T5618] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 76.545085][ T5618] EXT4-fs (loop4): This should not happen!! Data will be lost [ 76.545085][ T5618] [ 76.574232][ T5618] EXT4-fs (loop4): Total free blocks count 0 [ 76.591133][ T5618] EXT4-fs (loop4): Free/Dirty block details [ 76.615670][ T5618] EXT4-fs (loop4): free_blocks=0 [ 76.629629][ T5618] EXT4-fs (loop4): dirty_blocks=2260 [ 76.647498][ T5618] EXT4-fs (loop4): Block reservation details [ 76.672414][ T5618] EXT4-fs (loop4): i_reserved_data_blocks=2260 [ 76.708557][ T4050] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 208 with error 28 [ 76.850141][ T5659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.750'. [ 77.121611][ T5679] syzkaller0: entered promiscuous mode [ 77.134617][ T5679] syzkaller0: entered allmulticast mode [ 77.166474][ T5676] loop4: detected capacity change from 0 to 764 [ 77.381403][ T5711] syzkaller0: entered promiscuous mode [ 77.398081][ T5711] syzkaller0: entered allmulticast mode [ 77.417014][ T5676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.426895][ T5676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.648676][ T5718] loop0: detected capacity change from 0 to 764 [ 79.334148][ T5772] syzkaller0: entered promiscuous mode [ 79.339897][ T5772] syzkaller0: entered allmulticast mode [ 79.346587][ T5776] loop0: detected capacity change from 0 to 1024 [ 79.379101][ T5779] syzkaller0: entered promiscuous mode [ 79.384867][ T5779] syzkaller0: entered allmulticast mode [ 79.407084][ T5776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.460374][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 79.460389][ T28] audit: type=1400 audit(1781341489.296:571): avc: denied { write } for pid=5775 comm="syz.0.768" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.469784][ T5784] syzkaller0: entered promiscuous mode [ 79.562739][ T5784] syzkaller0: entered allmulticast mode [ 79.586655][ T5791] loop4: detected capacity change from 0 to 128 [ 79.606949][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.620030][ T5791] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 79.642137][ T5791] ext4 filesystem being mounted at /157/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.908011][ T28] audit: type=1400 audit(1781341489.706:572): avc: denied { write } for pid=5790 comm="syz.4.774" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.006511][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.044261][ T28] audit: type=1400 audit(1781341489.766:573): avc: denied { write } for pid=5790 comm="syz.4.774" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.235039][ T28] audit: type=1400 audit(1781341489.766:574): avc: denied { getopt } for pid=5790 comm="syz.4.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.379352][ T28] audit: type=1400 audit(1781341490.186:575): avc: denied { listen } for pid=5801 comm="syz.1.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 80.410714][ T5804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.777'. [ 80.644117][ T5808] loop4: detected capacity change from 0 to 256 [ 80.677648][ T5808] GUP no longer grows the stack in syz.4.779 (5808): 200000009000-200000018000 (200000006000) [ 80.731127][ T28] audit: type=1400 audit(1781341490.216:576): avc: denied { read } for pid=5803 comm="syz.4.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 80.750214][ T28] audit: type=1400 audit(1781341490.316:577): avc: denied { write } for pid=5803 comm="syz.4.777" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 80.769130][ T28] audit: type=1400 audit(1781341490.506:578): avc: denied { watch } for pid=5807 comm="syz.4.779" path="/159/file0" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 80.795597][ T5808] CPU: 1 UID: 0 PID: 5808 Comm: syz.4.779 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 80.795629][ T5808] Tainted: [W]=WARN [ 80.795636][ T5808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 80.795649][ T5808] Call Trace: [ 80.795656][ T5808] [ 80.795663][ T5808] __dump_stack+0x1d/0x30 [ 80.795722][ T5808] dump_stack_lvl+0x95/0xd0 [ 80.795749][ T5808] dump_stack+0x15/0x1b [ 80.795769][ T5808] __get_user_pages+0x1b27/0x1f10 [ 80.795802][ T5808] ? free_pgd_range+0x109/0xdc0 [ 80.795898][ T5808] __gup_longterm_locked+0x905/0xe30 [ 80.795935][ T5808] gup_fast_fallback+0x312/0x5c0 [ 80.795970][ T5808] pin_user_pages_fast+0x5f/0x90 [ 80.796082][ T5808] iov_iter_extract_pages+0x251/0x440 [ 80.796117][ T5808] __blockdev_direct_IO+0xaaf/0x20e0 [ 80.796165][ T5808] ? __pfx_fat_get_block+0x10/0x10 [ 80.796317][ T5808] fat_direct_IO+0x108/0x1d0 [ 80.796351][ T5808] generic_file_read_iter+0x20e/0x320 [ 80.796388][ T5808] do_iter_readv_writev+0x4f6/0x5a0 [ 80.796442][ T5808] vfs_readv+0x1e8/0x6d0 [ 80.796500][ T5808] __se_sys_preadv2+0xfc/0x1c0 [ 80.796531][ T5808] __x64_sys_preadv2+0x67/0x80 [ 80.796569][ T5808] x64_sys_call+0x2b3b/0x3020 [ 80.796593][ T5808] do_syscall_64+0x136/0x3c0 [ 80.796651][ T5808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.796739][ T5808] RIP: 0033:0x7f2f5fd0ce59 [ 80.796755][ T5808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.796778][ T5808] RSP: 002b:00007f2f5e75f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 80.796845][ T5808] RAX: ffffffffffffffda RBX: 00007f2f5ff85fa0 RCX: 00007f2f5fd0ce59 [ 80.796866][ T5808] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 80.796882][ T5808] RBP: 00007f2f5fda2d6f R08: 0000000000000000 R09: 0000000000000007 [ 80.796914][ T5808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.796926][ T5808] R13: 00007f2f5ff86038 R14: 00007f2f5ff85fa0 R15: 00007fff01c61c78 [ 80.796946][ T5808] [ 81.482119][ T28] audit: type=1400 audit(1781341491.286:579): avc: denied { write } for pid=5809 comm="syz.1.780" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.505061][ T5816] netlink: 'syz.2.782': attribute type 1 has an invalid length. [ 81.513640][ T5816] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.782'. [ 81.526572][ T28] audit: type=1400 audit(1781341491.286:580): avc: denied { read } for pid=5809 comm="syz.1.780" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.436892][ T5818] loop3: detected capacity change from 0 to 512 [ 82.521886][ T5818] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.783: corrupted inode contents [ 82.607375][ T5818] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 82.612542][ T5818] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #16: comm syz.3.783: mark_inode_dirty error [ 82.621914][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 82.622016][ C0] EXT4-fs (loop3): initial error at time 1781341492: ext4_do_update_inode:5690: inode 16 [ 82.622135][ C0] EXT4-fs (loop3): last error at time 1781341492: ext4_do_update_inode:5690: inode 16 [ 82.978145][ T5818] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 82.978940][ T5818] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.783: corrupted inode contents [ 83.006732][ T5849] syzkaller0: entered promiscuous mode [ 83.016062][ T5849] syzkaller0: entered allmulticast mode [ 83.017040][ T5818] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 83.026939][ T5818] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.783: mark_inode_dirty error [ 83.048285][ T5818] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 83.048987][ T5818] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.783: corrupted inode contents [ 83.071099][ T5818] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 83.071568][ T5818] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 83.089680][ T5818] loop3: lost filesystem error report for type 5 error -117 [ 83.090393][ T5818] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.783: corrupted inode contents [ 83.110132][ T5818] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 83.110483][ T5818] EXT4-fs error (device loop3): ext4_truncate:4690: inode #16: comm syz.3.783: mark_inode_dirty error [ 83.132223][ T5818] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 83.132663][ T5818] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 83.151981][ T5818] loop3: lost filesystem error report for type 5 error -117 [ 83.154021][ T5818] EXT4-fs (loop3): 1 truncate cleaned up [ 83.171632][ T5818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.184724][ T30] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 83.196392][ T30] loop3: lost filesystem error report for type 5 error -117 [ 83.196929][ T5818] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.286060][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.413500][ T5858] No such timeout policy "syz1" [ 83.420892][ T5863] syzkaller0: entered promiscuous mode [ 83.438469][ T5863] syzkaller0: entered allmulticast mode [ 83.452292][ T5866] Cannot find map_set index 65533 as target [ 83.520589][ T5868] netlink: 20 bytes leftover after parsing attributes in process `syz.1.799'. [ 85.629658][ T5907] syzkaller0: entered promiscuous mode [ 85.642771][ T5907] syzkaller0: entered allmulticast mode [ 86.336546][ T5928] netlink: 'syz.2.819': attribute type 1 has an invalid length. [ 86.346379][ T5930] loop4: detected capacity change from 0 to 512 [ 86.352905][ T5928] netlink: 'syz.2.819': attribute type 4 has an invalid length. [ 86.361167][ T5928] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.819'. [ 86.534744][ T5930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 86.558174][ T5930] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.592562][ T5941] tipc: Enabled bearer , priority 0 [ 86.600359][ T5941] syzkaller0: entered promiscuous mode [ 86.613055][ T5941] syzkaller0: entered allmulticast mode [ 86.620282][ T5941] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 86.635984][ T5941] tipc: Resetting bearer [ 86.650829][ T5940] tipc: Resetting bearer [ 86.657588][ T5940] tipc: Disabling bearer [ 86.757837][ T5947] loop1: detected capacity change from 0 to 512 [ 86.789851][ T5947] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 86.818059][ T5947] EXT4-fs (loop1): 1 truncate cleaned up [ 86.826602][ T5947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.871955][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 86.871969][ T28] audit: type=1400 audit(1781341496.706:581): avc: denied { write } for pid=5946 comm="syz.1.826" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.905786][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 86.929825][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.953224][ T5957] tipc: Started in network mode [ 86.958200][ T5957] tipc: Node identity fa9c18c2d207, cluster identity 4711 [ 86.965508][ T5957] tipc: Enabled bearer , priority 0 [ 86.972794][ T5955] syzkaller0: entered promiscuous mode [ 86.978442][ T5955] syzkaller0: entered allmulticast mode [ 86.985630][ T5957] syzkaller0: entered promiscuous mode [ 86.991626][ T5957] syzkaller0: entered allmulticast mode [ 87.001056][ T5957] netlink: 44 bytes leftover after parsing attributes in process `syz.1.829'. [ 87.012361][ T5957] tipc: Resetting bearer [ 87.025404][ T5956] tipc: Resetting bearer [ 87.039114][ T5956] tipc: Disabling bearer [ 87.145001][ T5960] Cannot find map_set index 65533 as target [ 87.155609][ T5960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.830'. [ 87.197233][ T5963] tipc: Enabled bearer , priority 0 [ 87.204579][ T5963] syzkaller0: entered promiscuous mode [ 87.210153][ T5963] syzkaller0: entered allmulticast mode [ 87.232651][ T5966] syzkaller0: entered promiscuous mode [ 87.238442][ T5966] syzkaller0: entered allmulticast mode [ 87.369978][ T5968] tipc: Resetting bearer [ 87.517333][ T5962] tipc: Resetting bearer [ 87.524806][ T5962] tipc: Disabling bearer [ 87.571313][ T28] audit: type=1400 audit(1781341497.406:582): avc: denied { setopt } for pid=5973 comm="syz.3.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 87.648066][ T5983] loop3: detected capacity change from 0 to 128 [ 87.676891][ T5983] FAT-fs (loop3): bogus number of reserved sectors [ 87.686328][ T5987] loop4: detected capacity change from 0 to 512 [ 87.694133][ T5983] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 87.719427][ T5983] FAT-fs (loop3): Can't find a valid FAT filesystem [ 87.734962][ T5987] cgroup: Invalid name [ 87.765148][ T5983] No such timeout policy "syz1" [ 87.781280][ T5993] syzkaller0: entered promiscuous mode [ 87.792006][ T5993] syzkaller0: entered allmulticast mode [ 87.803142][ T5993] TC_ACT_REPEAT abuse ? [ 87.822224][ T6000] syzkaller0: entered promiscuous mode [ 87.827760][ T6000] syzkaller0: entered allmulticast mode [ 87.879137][ T6004] syzkaller0: entered promiscuous mode [ 87.884886][ T6004] syzkaller0: entered allmulticast mode [ 88.004188][ T6010] netlink: 'syz.0.848': attribute type 10 has an invalid length. [ 88.169696][ T6010] ipvlan1: entered allmulticast mode [ 88.175307][ T6010] veth0_vlan: entered allmulticast mode [ 88.187437][ T6010] team0: Device ipvlan1 failed to register rx_handler [ 88.243263][ T28] audit: type=1400 audit(1781341498.076:583): avc: denied { read write } for pid=6015 comm="syz.1.851" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 88.245063][ T9] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 88.280626][ T9] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 88.283046][ T6019] 0: reclassify loop, rule prio 0, protocol 700 [ 88.288475][ T9] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 88.302218][ T9] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 88.309712][ T9] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 88.315089][ T28] audit: type=1400 audit(1781341498.076:584): avc: denied { open } for pid=6015 comm="syz.1.851" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 88.317205][ T9] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 88.349379][ T9] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 88.368961][ T9] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 88.380963][ T9] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 88.392949][ T9] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 88.412935][ T9] hid-generic 0103:0004:0000.0001: hidraw0: HID v0.05 Device [syz0] on syz1 [ 88.463085][ T6022] fido_id[6022]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 88.493185][ T6024] tipc: Enabled bearer , priority 0 [ 88.507787][ T6024] syzkaller0: entered promiscuous mode [ 88.519577][ T6024] syzkaller0: entered allmulticast mode [ 88.534436][ T6024] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 88.545093][ T6024] tipc: Resetting bearer [ 88.558466][ T6023] tipc: Resetting bearer [ 88.573298][ T6023] tipc: Disabling bearer [ 88.690050][ T6034] loop1: detected capacity change from 0 to 128 [ 88.703096][ T28] audit: type=1400 audit(1781341498.536:585): avc: denied { read } for pid=6031 comm="syz.2.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.728073][ T6034] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 88.746170][ T6034] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.782121][ T28] audit: type=1400 audit(1781341498.616:586): avc: denied { write } for pid=6033 comm="syz.1.859" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.803841][ T28] audit: type=1400 audit(1781341498.616:587): avc: denied { write } for pid=6033 comm="syz.1.859" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.833226][ T3294] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.969590][ T6044] tipc: Enabled bearer , priority 0 [ 88.977036][ T6044] syzkaller0: entered promiscuous mode [ 88.982957][ T6044] syzkaller0: entered allmulticast mode [ 88.993684][ T6044] tipc: Resetting bearer [ 89.005400][ T6043] tipc: Resetting bearer [ 89.012579][ T6043] tipc: Disabling bearer [ 89.106169][ T6053] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 89.114169][ T6053] SELinux: failed to load policy [ 89.138315][ T6055] tipc: Enabled bearer , priority 0 [ 89.145729][ T6055] syzkaller0: entered promiscuous mode [ 89.152072][ T6055] syzkaller0: entered allmulticast mode [ 89.179778][ T6055] tipc: Resetting bearer [ 89.212873][ T6054] tipc: Resetting bearer [ 89.220242][ T6054] tipc: Disabling bearer [ 89.513202][ T6065] loop1: detected capacity change from 0 to 764 [ 89.783345][ T6071] syzkaller0: entered promiscuous mode [ 89.812731][ T6071] syzkaller0: entered allmulticast mode [ 90.331089][ T6078] syzkaller0: entered promiscuous mode [ 90.342754][ T6078] syzkaller0: entered allmulticast mode [ 90.348501][ T28] audit: type=1400 audit(1781341500.176:588): avc: denied { connect } for pid=6079 comm="syz.2.874" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.571197][ T28] audit: type=1400 audit(1781341500.396:589): avc: denied { shutdown } for pid=6085 comm="syz.4.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.620990][ T28] audit: type=1400 audit(1781341500.396:590): avc: denied { read } for pid=6085 comm="syz.4.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.949721][ T3410] IPVS: starting estimator thread 0... [ 90.996790][ T6112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'. [ 91.016587][ T6112] loop1: detected capacity change from 0 to 128 [ 91.029221][ T6112] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 91.049300][ T6104] IPVS: using max 2352 ests per chain, 117600 per kthread [ 91.058259][ T6112] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 91.076190][ T6112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.885'. [ 91.406153][ T6122] loop1: detected capacity change from 0 to 512 [ 91.418430][ T6122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.431223][ T6122] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.930322][ T6137] netlink: 'syz.4.893': attribute type 1 has an invalid length. [ 91.944676][ T6137] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.962629][ T6137] macvlan2: entered promiscuous mode [ 91.968175][ T6137] macvlan2: entered allmulticast mode [ 91.973938][ T6137] bond1: entered allmulticast mode [ 91.979154][ T6137] bond1: entered promiscuous mode [ 91.984640][ T6137] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 91.993054][ T6137] team0: Port device macvlan2 added [ 92.016009][ T6137] bond1: (slave ip6gretap1): making interface the new active one [ 92.023919][ T6137] ip6gretap1: entered promiscuous mode [ 92.029810][ T6137] ip6gretap1: entered allmulticast mode [ 92.036292][ T6137] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 92.098935][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.390930][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.900'. [ 92.675597][ T6159] netlink: 'syz.1.904': attribute type 3 has an invalid length. [ 92.686266][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'. [ 92.696093][ T6159] netlink: 'syz.1.904': attribute type 3 has an invalid length. [ 92.697165][ T6157] loop3: detected capacity change from 0 to 512 [ 92.704298][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'. [ 92.717487][ T6157] EXT4-fs: Ignoring removed bh option [ 92.746920][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.904'. [ 92.763100][ T6157] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.3.903: corrupted xattr block 95: invalid header [ 92.781018][ T6157] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 92.781570][ T6157] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.903: bg 0: block 7: invalid block bitmap [ 92.790749][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 92.790797][ C0] EXT4-fs (loop3): initial error at time 1781341502: ext4_expand_extra_isize_ea:2810: inode 11 [ 92.790887][ C0] EXT4-fs (loop3): last error at time 1781341502: ext4_expand_extra_isize_ea:2810: inode 11 [ 92.830481][ T6157] loop3: lost filesystem error report for type 5 error -117 [ 92.830944][ T6157] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 92.847226][ T6157] loop3: lost filesystem error report for type 5 error -117 [ 92.848188][ T6157] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #11: comm syz.3.903: corrupted xattr block 95: invalid header [ 92.894365][ T6157] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 92.894727][ T6157] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 92.925469][ T6157] EXT4-fs (loop3): 1 orphan inode deleted [ 92.933315][ T6157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.950930][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 92.950944][ T28] audit: type=1400 audit(1781341502.786:594): avc: denied { map } for pid=6156 comm="syz.3.903" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 92.982970][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.051563][ T6173] loop3: detected capacity change from 0 to 128 [ 93.060170][ T6173] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 93.086035][ T28] audit: type=1400 audit(1781341502.916:595): avc: denied { connect } for pid=6172 comm="syz.3.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 94.250530][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.915'. [ 94.328979][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.915'. [ 94.385978][ T6197] loop1: detected capacity change from 0 to 512 [ 94.420740][ T6197] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.488320][ T6197] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 95.082241][ T6222] loop3: detected capacity change from 0 to 128 [ 95.094835][ T6222] EXT4-fs: test_dummy_encryption option not supported [ 95.379566][ T6230] netlink: 'syz.0.925': attribute type 1 has an invalid length. [ 95.414363][ T6228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.924'. [ 95.425284][ T28] audit: type=1400 audit(1781341505.198:596): avc: denied { remount } for pid=6227 comm="syz.2.924" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 95.448290][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.924'. [ 95.464040][ T6230] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.477261][ T6231] macvlan2: entered promiscuous mode [ 95.482911][ T6231] macvlan2: entered allmulticast mode [ 95.488791][ T6231] bond2: entered allmulticast mode [ 95.494010][ T6231] bond2: entered promiscuous mode [ 95.500497][ T6231] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 95.514039][ T6231] team0: Port device macvlan2 added [ 95.543031][ T6230] bond2: (slave ip6gretap1): making interface the new active one [ 95.559418][ T6230] ip6gretap1: entered promiscuous mode [ 95.576434][ T6230] ip6gretap1: entered allmulticast mode [ 95.585698][ T6230] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 95.718921][ T28] audit: type=1400 audit(1781341505.548:597): avc: denied { execute } for pid=6247 comm="syz.3.930" path="/selinux/status" dev="selinuxfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 95.802781][ T28] audit: type=1400 audit(1781341505.598:598): avc: denied { bind } for pid=6245 comm="syz.4.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.771787][ T28] audit: type=1400 audit(1781341506.608:599): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 97.052831][ T6264] syzkaller0: entered promiscuous mode [ 97.543998][ T6264] syzkaller0: entered allmulticast mode [ 97.694864][ T6260] loop1: detected capacity change from 0 to 512 [ 97.786712][ T6260] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 97.799289][ T6260] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.932: invalid block [ 97.811605][ T6260] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 97.815764][ T6260] EXT4-fs (loop1): 1 truncate cleaned up [ 97.825197][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 97.825258][ C0] EXT4-fs (loop1): initial error at time 1781341507: ext4_get_branch:178: inode 13: block 1024 [ 97.825649][ C0] EXT4-fs (loop1): last error at time 1781341507: ext4_get_branch:178: inode 13: block 1024 [ 97.866156][ T6260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.092370][ T6273] loop0: detected capacity change from 0 to 1024 [ 98.124024][ T6273] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.220864][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.646515][ T28] audit: type=1400 audit(1781341508.478:600): avc: denied { getopt } for pid=6282 comm="syz.0.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.684176][ T6285] netlink: 'syz.3.940': attribute type 1 has an invalid length. [ 98.753153][ T6285] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.821689][ T6294] macvlan2: entered promiscuous mode [ 98.839862][ T6294] macvlan2: entered allmulticast mode [ 98.866336][ T6289] syzkaller0: entered promiscuous mode [ 98.882662][ T6289] syzkaller0: entered allmulticast mode [ 98.920493][ T6285] bond2: (slave ip6gretap1): making interface the new active one [ 98.945614][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.954717][ T6285] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 99.079790][ T6299] syzkaller0: entered promiscuous mode [ 99.092731][ T6299] syzkaller0: entered allmulticast mode [ 99.114824][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.942'. [ 99.130582][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.942'. [ 99.154030][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.942'. [ 99.190513][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.942'. [ 99.455877][ T6318] syzkaller0: entered promiscuous mode [ 99.465921][ T6318] syzkaller0: entered allmulticast mode [ 99.632673][ T28] audit: type=1400 audit(1781341509.468:601): avc: denied { write } for pid=6322 comm="syz.3.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.749507][ T6328] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 100.135236][ T6331] loop3: detected capacity change from 0 to 512 [ 100.154804][ T6331] EXT4-fs (loop3): orphan cleanup on readonly fs [ 100.165003][ T6331] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #11: block 10: comm syz.3.950: lblock 0 mapped to illegal pblock 10 (length 1) [ 100.192928][ T6331] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 100.193143][ T6331] EXT4-fs (loop3): Remounting filesystem read-only [ 100.202317][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 100.202340][ C0] EXT4-fs (loop3): initial error at time 1781341510: ext4_map_blocks:791: inode 11: block 10 [ 100.202378][ C0] EXT4-fs (loop3): last error at time 1781341510: ext4_map_blocks:791: inode 11: block 10 [ 100.271889][ T6331] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 100.299702][ T6334] loop0: detected capacity change from 0 to 512 [ 100.308749][ T6331] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 100.337553][ T6334] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 100.360959][ T6331] EXT4-fs (loop3): 1 orphan inode deleted [ 100.420210][ T6331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.446344][ T6340] syzkaller0: entered promiscuous mode [ 100.458936][ T6340] syzkaller0: entered allmulticast mode [ 100.460272][ T6338] loop1: detected capacity change from 0 to 512 [ 100.490959][ T28] audit: type=1400 audit(1781341510.326:602): avc: denied { mount } for pid=6330 comm="syz.3.950" name="/" dev="configfs" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 100.523081][ T28] audit: type=1400 audit(1781341510.356:603): avc: denied { search } for pid=6330 comm="syz.3.950" name="/" dev="configfs" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.525448][ T6334] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 100.545290][ T28] audit: type=1400 audit(1781341510.356:604): avc: denied { search } for pid=6330 comm="syz.3.950" name="/" dev="configfs" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.545319][ T28] audit: type=1400 audit(1781341510.356:605): avc: denied { read } for pid=6330 comm="syz.3.950" name="/" dev="configfs" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.545377][ T28] audit: type=1400 audit(1781341510.356:606): avc: denied { read open } for pid=6330 comm="syz.3.950" path="/" dev="configfs" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.633435][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.759850][ T6338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.919011][ T6351] loop4: detected capacity change from 0 to 512 [ 101.748413][ T6338] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.984601][ T28] audit: type=1400 audit(1781341511.806:607): avc: denied { ioctl } for pid=6337 comm="syz.1.953" path="socket:[13028]" dev="sockfs" ino=13028 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.025711][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.750361][ T6346] loop3: detected capacity change from 0 to 256 [ 103.822962][ T6354] loop0: detected capacity change from 0 to 764 [ 103.829542][ T6351] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 103.839753][ T6351] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 103.839915][ T6351] EXT4-fs: failed to create workqueue [ 103.854788][ T6351] EXT4-fs (loop4): mount failed [ 104.216015][ T6361] loop4: detected capacity change from 0 to 512 [ 104.242899][ T6361] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 104.278279][ T6371] loop0: detected capacity change from 0 to 128 [ 104.285174][ T6361] EXT4-fs (loop4): 1 orphan inode deleted [ 104.291891][ T6361] EXT4-fs (loop4): 1 truncate cleaned up [ 104.304481][ T6361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.325322][ T6371] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.352692][ T6371] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.395194][ T6373] bridge_slave_0: left allmulticast mode [ 104.405734][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.418221][ T28] audit: type=1400 audit(1781341514.256:608): avc: denied { write } for pid=6368 comm="syz.0.962" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.428115][ T6373] bridge_slave_0: left promiscuous mode [ 104.448286][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.553491][ T6376] loop1: detected capacity change from 0 to 8192 [ 104.572204][ T6373] bridge_slave_1: left allmulticast mode [ 104.582819][ T6373] bridge_slave_1: left promiscuous mode [ 104.584493][ T28] audit: type=1400 audit(1781341514.416:609): avc: denied { read } for pid=6378 comm="syz.4.964" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 104.589310][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.685125][ T6373] bond0: (slave bond_slave_0): Releasing backup interface [ 104.725083][ T6373] bond0: (slave bond_slave_1): Releasing backup interface [ 104.799517][ T6373] team0: Failed to send options change via netlink (err -105) [ 104.855250][ T6373] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 104.902062][ T6373] team0: Port device team_slave_0 removed [ 104.956362][ T6373] team0: Failed to send options change via netlink (err -105) [ 105.006818][ T6373] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 105.053482][ T6373] team0: Port device team_slave_1 removed [ 105.063173][ T28] audit: type=1400 audit(1781341514.416:610): avc: denied { open } for pid=6378 comm="syz.4.964" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 105.081456][ T6373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.089358][ T28] audit: type=1400 audit(1781341514.506:611): avc: denied { setopt } for pid=6372 comm="syz.1.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.114650][ T6373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.168995][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.184249][ T6373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.208136][ T6373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.271464][ T6373] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 105.343276][ T6376] team0: Mode changed to "activebackup" [ 105.481846][ T6388] loop1: detected capacity change from 0 to 512 [ 105.529241][ T6388] EXT4-fs (loop1): orphan cleanup on readonly fs [ 105.553806][ T6388] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #11: block 10: comm syz.1.966: lblock 0 mapped to illegal pblock 10 (length 1) [ 105.585622][ T6387] loop4: detected capacity change from 0 to 512 [ 105.592549][ T6388] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 105.592753][ T6388] EXT4-fs (loop1): Remounting filesystem read-only [ 105.601337][ T6387] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 105.601928][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 105.601968][ C0] EXT4-fs (loop1): initial error at time 1781341515: ext4_map_blocks:791: inode 11: block 10 [ 105.602011][ C0] EXT4-fs (loop1): last error at time 1781341515: ext4_map_blocks:791: inode 11: block 10 [ 105.625894][ T6388] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 105.717521][ T6387] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 105.730579][ T6388] EXT4-fs (loop1): 1 orphan inode deleted [ 105.742769][ T6388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.830155][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.858549][ T6391] tc action pedit 'at' offset 9 out of bounds [ 105.887247][ T6393] netlink: 76 bytes leftover after parsing attributes in process `syz.1.969'. [ 105.983131][ T6401] loop4: detected capacity change from 0 to 2048 [ 106.085238][ T6401] loop4: p4 < > [ 106.638508][ T6412] loop1: detected capacity change from 0 to 764 [ 108.707321][ T28] audit: type=1400 audit(1781341518.537:612): avc: denied { create } for pid=6419 comm="syz.2.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 108.729448][ T6420] gre0 speed is unknown, defaulting to 1000 [ 108.742512][ T6420] gre0 speed is unknown, defaulting to 1000 [ 108.754868][ T6420] gre0 speed is unknown, defaulting to 1000 [ 108.768667][ T28] audit: type=1400 audit(1781341518.567:613): avc: denied { write } for pid=6419 comm="syz.2.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 108.851960][ T6420] infiniband ryz1: set down [ 108.856606][ T9] gre0 speed is unknown, defaulting to 1000 [ 108.869584][ T6420] infiniband ryz1: added gre0 [ 108.893542][ T6420] RDS/IB: ryz1: added [ 108.909473][ T6420] smc: adding ib device ryz1 with port count 1 [ 108.918091][ T6420] smc: ib device ryz1 port 1 has no pnetid [ 108.930452][ T6420] gre0 speed is unknown, defaulting to 1000 [ 108.947509][ T9] gre0 speed is unknown, defaulting to 1000 [ 108.984390][ T6420] gre0 speed is unknown, defaulting to 1000 [ 109.024266][ T6420] gre0 speed is unknown, defaulting to 1000 [ 109.061458][ T6420] gre0 speed is unknown, defaulting to 1000 [ 109.099006][ T6420] gre0 speed is unknown, defaulting to 1000 [ 109.222698][ T6427] loop0: detected capacity change from 0 to 1024 [ 109.242725][ T6428] netlink: 'syz.1.981': attribute type 1 has an invalid length. [ 109.251059][ T6427] EXT4-fs: Ignoring removed bh option [ 109.281373][ T6427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.283727][ T6428] loop1: detected capacity change from 0 to 512 [ 109.315823][ T6428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 109.346394][ T6427] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 109.360977][ T28] audit: type=1400 audit(1781341519.175:614): avc: denied { write } for pid=6426 comm="syz.0.989" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.395306][ T6428] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 3: comm syz.1.981: lblock 0 mapped to illegal pblock 3 (length 1) [ 109.432607][ T6428] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.981: error -117 reading directory block [ 109.473633][ T6437] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 3: comm syz.1.981: lblock 0 mapped to illegal pblock 3 (length 1) [ 109.568663][ T6437] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.981: error -117 reading directory block [ 109.649767][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.755185][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.007385][ T28] audit: type=1400 audit(1781341519.835:615): avc: denied { create } for pid=6451 comm="syz.3.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 110.655913][ T6466] loop1: detected capacity change from 0 to 512 [ 110.712612][ T6466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.742207][ T6466] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.773536][ T28] audit: type=1400 audit(1781341520.605:616): avc: denied { write } for pid=6465 comm="syz.1.985" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.895373][ T28] audit: type=1400 audit(1781341520.695:617): avc: denied { append } for pid=6465 comm="syz.1.985" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.932895][ T6473] loop0: detected capacity change from 0 to 128 [ 111.291425][ T6475] gre0 speed is unknown, defaulting to 1000 [ 111.531535][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.699906][ T6484] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.998' sets config #-1 [ 111.700475][ T6486] loop0: detected capacity change from 0 to 512 [ 111.710666][ T28] audit: type=1400 audit(1781341521.535:618): avc: denied { read append } for pid=6483 comm="syz.4.998" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 111.776800][ T6486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 111.790043][ T28] audit: type=1400 audit(1781341521.535:619): avc: denied { open } for pid=6483 comm="syz.4.998" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 111.832379][ T6486] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.847950][ T28] audit: type=1400 audit(1781341521.535:620): avc: denied { ioctl } for pid=6483 comm="syz.4.998" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 111.882267][ T6492] tipc: Enabled bearer , priority 0 [ 111.910675][ T6492] syzkaller0: entered promiscuous mode [ 111.930992][ T6492] syzkaller0: entered allmulticast mode [ 111.968035][ T6492] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 112.039740][ T6492] tipc: Resetting bearer [ 112.056744][ T6491] tipc: Resetting bearer [ 112.084195][ T6491] tipc: Disabling bearer [ 112.175227][ T6501] loop1: detected capacity change from 0 to 512 [ 112.185336][ T6501] msdos: Unknown parameter 'dos>xdìoppy' [ 112.459515][ T6501] loop1: detected capacity change from 0 to 4096 [ 112.535707][ T6501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.646208][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 112.697704][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.698799][ T6516] can0: slcan on ptm0. [ 112.712756][ T28] audit: type=1400 audit(1781341522.545:621): avc: denied { read } for pid=3020 comm="dhcpcd" name="n25" dev="tmpfs" ino=5831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.819674][ T6519] loop4: detected capacity change from 0 to 512 [ 112.938674][ T6519] EXT4-fs (loop4): 1 orphan inode deleted [ 112.952444][ T6519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.149097][ T28] audit: type=1400 audit(1781341522.545:622): avc: denied { open } for pid=3020 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=5831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 113.622263][ T6529] loop3: detected capacity change from 0 to 764 [ 113.722083][ T28] audit: type=1400 audit(1781341522.545:623): avc: denied { getattr } for pid=3020 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=5831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 113.765927][ T28] audit: type=1400 audit(1781341523.595:624): avc: denied { create } for pid=6521 comm="syz.1.1009" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 113.766182][ T6523] gre0 speed is unknown, defaulting to 1000 [ 113.989506][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.248291][ T6516] can0 (unregistered): slcan off ptm0. [ 114.803994][ T6572] tipc: Enabled bearer , priority 0 [ 114.832591][ T6572] syzkaller0: entered promiscuous mode [ 114.847511][ T6572] syzkaller0: entered allmulticast mode [ 114.862946][ T6572] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 114.912439][ T6572] tipc: Resetting bearer [ 114.938123][ T6571] tipc: Resetting bearer [ 114.958882][ T6582] loop3: detected capacity change from 0 to 256 [ 114.975765][ T6582] msdos: Unknown parameter 'nodos' [ 114.991734][ T6571] tipc: Disabling bearer [ 115.004283][ T6582] rdma_rxe: rxe_newlink: failed to add gre0 [ 115.051096][ T6586] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1021'. [ 115.135309][ T6591] loop0: detected capacity change from 0 to 512 [ 115.158616][ T6591] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1023: bg 0: block 5: invalid block bitmap [ 115.171968][ T6591] loop0: lost filesystem error report for type 5 error -117 [ 115.172170][ T6591] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 115.179502][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 115.179535][ C0] EXT4-fs (loop0): initial error at time 1781341525: ext4_validate_block_bitmap:432 [ 115.179561][ C0] EXT4-fs (loop0): last error at time 1781341525: ext4_validate_block_bitmap:432 [ 115.217107][ T6591] loop0: lost filesystem error report for type 5 error -117 [ 115.217290][ T6591] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1023: invalid indirect mapped block 3 (level 2) [ 115.264248][ T6591] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 115.264497][ T6591] EXT4-fs (loop0): 2 truncates cleaned up [ 115.301138][ T6597] loop3: detected capacity change from 0 to 256 [ 115.307582][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 115.307595][ T28] audit: type=1400 audit(1781341525.135:637): avc: denied { read write } for pid=6596 comm="syz.3.1025" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 115.348597][ T6597] vfat: Unknown parameter 'check.relaxed' [ 115.349860][ T6591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.406503][ T28] audit: type=1400 audit(1781341525.135:638): avc: denied { open } for pid=6596 comm="syz.3.1025" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 115.451502][ T6595] loop4: detected capacity change from 0 to 512 [ 115.466266][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1026'. [ 115.486228][ T6599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.503574][ T6599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.512124][ T6599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.519696][ T6599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.542798][ T6600] loop3: detected capacity change from 0 to 1024 [ 115.544810][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.561970][ T6595] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.598578][ T6600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.620179][ T6600] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.634100][ T28] audit: type=1400 audit(1781341525.465:639): avc: denied { remount } for pid=6594 comm="syz.4.1024" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 115.675602][ T6595] EXT4-fs error (device loop4): ext4_quota_enable:7221: comm syz.4.1024: Bad quota inum: 2, type: 1 [ 115.712159][ T6610] netlink: 'syz.1.1031': attribute type 1 has an invalid length. [ 115.715012][ T6595] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 115.734861][ T6610] bond1: (slave bridge2): making interface the new active one [ 115.735429][ T6610] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 115.810966][ T6618] team0: entered promiscuous mode [ 115.817555][ T6618] team0: entered allmulticast mode [ 115.831308][ T6618] bond1: (slave team0): Enslaving as an active interface with a down link [ 115.864298][ T6595] 9p: Bad value for 'rfdno' [ 115.870250][ T28] audit: type=1400 audit(1781341525.695:640): avc: denied { read append } for pid=6594 comm="syz.4.1024" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 115.925861][ T28] audit: type=1400 audit(1781341525.695:641): avc: denied { open } for pid=6594 comm="syz.4.1024" path="/217/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 115.972029][ T28] audit: type=1400 audit(1781341525.695:642): avc: denied { mounton } for pid=6594 comm="syz.4.1024" path="/217/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 116.015432][ T6622] loop0: detected capacity change from 0 to 256 [ 116.030649][ T3301] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 116.041261][ T6622] msdos: Unknown parameter 'nodos' [ 116.306695][ T6622] rdma_rxe: rxe_newlink: failed to add gre0 [ 117.107420][ T6640] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1039'. [ 117.148367][ T6642] loop0: detected capacity change from 0 to 512 [ 117.266567][ T6642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.296865][ T6642] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.309227][ T6651] loop4: detected capacity change from 0 to 512 [ 117.315949][ T6642] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1041: iget: bad i_size value: 2533274857506816 [ 117.433433][ T6651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 117.566841][ T6651] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.567412][ T6657] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1041: iget: bad i_size value: 2533274857506816 [ 117.810927][ T6642] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1041: iget: bad i_size value: 2533274857506816 [ 117.821776][ T28] audit: type=1400 audit(1781341527.205:643): avc: denied { getopt } for pid=6643 comm="syz.1.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 117.874957][ T6658] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1041: iget: bad i_size value: 2533274857506816 [ 118.015129][ T6642] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.1041: iget: bad i_size value: 2533274857506816 [ 118.031694][ T28] audit: type=1400 audit(1781341527.865:644): avc: denied { ioctl } for pid=6641 comm="syz.0.1041" path="socket:[14126]" dev="sockfs" ino=14126 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.058421][ T28] audit: type=1400 audit(1781341527.895:645): avc: denied { getopt } for pid=6641 comm="syz.0.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.153306][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1048'. [ 118.160387][ T6673] Non-string source [ 118.178748][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.264905][ T28] audit: type=1400 audit(1781341528.095:646): avc: denied { getopt } for pid=6677 comm="syz.0.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.324400][ T3191] ================================================================== [ 118.332516][ T3191] BUG: KCSAN: data-race in __d_drop / fast_dput [ 118.338766][ T3191] [ 118.341095][ T3191] write to 0xffff88811b10bc10 of 8 bytes by task 2981 on cpu 0: [ 118.346124][ T6682] loop0: detected capacity change from 0 to 128 [ 118.348729][ T3191] __d_drop+0x131/0x220 [ 118.348753][ T3191] __dentry_kill+0x122/0x4c0 [ 118.348779][ T3191] finish_dput+0x2b/0x210 [ 118.348796][ T3191] dput+0x52/0x60 [ 118.348812][ T3191] step_into_slowpath+0x38c/0x4c0 [ 118.348834][ T3191] path_lookupat+0x2eb/0x4c0 [ 118.348852][ T3191] filename_lookup+0x329/0x390 [ 118.348870][ T3191] do_readlinkat+0x74/0x2f0 [ 118.362142][ T6682] syz.0.1053: attempt to access beyond end of device [ 118.362142][ T6682] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 118.363816][ T3191] __x64_sys_readlink+0x47/0x60 [ 118.368231][ T6682] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 118.371762][ T3191] x64_sys_call+0x2b51/0x3020 [ 118.385418][ T6682] syz.0.1053: attempt to access beyond end of device [ 118.385418][ T6682] loop0: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 118.386094][ T3191] do_syscall_64+0x136/0x3c0 [ 118.386129][ T3191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.386149][ T3191] [ 118.386154][ T3191] read to 0xffff88811b10bc10 of 8 bytes by task 3191 on cpu 1: [ 118.386169][ T3191] fast_dput+0x5f/0x2d0 [ 118.459550][ T3191] dput+0x24/0x60 [ 118.463175][ T3191] filename_unlinkat+0x217/0x410 [ 118.468107][ T3191] __se_sys_unlink+0x2b/0xe0 [ 118.472698][ T3191] __x64_sys_unlink+0x1f/0x30 [ 118.477370][ T3191] x64_sys_call+0x2eb6/0x3020 [ 118.482036][ T3191] do_syscall_64+0x136/0x3c0 [ 118.486619][ T3191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.492503][ T3191] [ 118.494810][ T3191] value changed: 0xffff888237654490 -> 0x0000000000000000 [ 118.501896][ T3191] [ 118.504202][ T3191] Reported by Kernel Concurrency Sanitizer on: [ 118.510337][ T3191] CPU: 1 UID: 0 PID: 3191 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 118.520742][ T3191] Tainted: [W]=WARN [ 118.524530][ T3191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 118.534573][ T3191] ================================================================== [ 118.563799][ T6682] Buffer I/O error on dev loop0, logical block 70, lost async page write [ 118.594339][ T6682] syz.0.1053: attempt to access beyond end of device [ 118.594339][ T6682] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 118.607981][ T6682] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 118.616648][ T6682] syz.0.1053: attempt to access beyond end of device [ 118.616648][ T6682] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 118.630633][ T6682] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 118.639992][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 118.717763][ T6683] syz.0.1053: attempt to access beyond end of device [ 118.717763][ T6683] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 118.731280][ T6683] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 118.740133][ T6683] syz.0.1053: attempt to access beyond end of device [ 118.740133][ T6683] loop0: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 118.789495][ T6683] Buffer I/O error on dev loop0, logical block 70, lost async page write [ 118.803875][ T6683] syz.0.1053: attempt to access beyond end of device [ 118.803875][ T6683] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 118.821224][ T6683] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 118.868035][ T6684] mmap: syz.2.1049 (6684) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.