last executing test programs: 2m17.709759039s ago: executing program 2 (id=372): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000000000)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m17.413668797s ago: executing program 2 (id=376): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2205c04, 0x0) 2m17.376749989s ago: executing program 2 (id=379): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x58eb, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x101ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffb}, 0x50) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='+'], 0x50) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 2m15.873344244s ago: executing program 4 (id=392): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 2m15.454736857s ago: executing program 4 (id=398): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet6(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0x8, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_genetlink_get_family_id$nfc(&(0x7f0000002700), 0xffffffffffffffff) 2m15.225699904s ago: executing program 4 (id=400): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2404c002) truncate(0x0, 0x8da6) unlink(&(0x7f0000000280)='./file1\x00') r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) 2m15.158928626s ago: executing program 4 (id=401): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 2m15.127057637s ago: executing program 4 (id=402): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) shutdown(r1, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f00000060c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) write$binfmt_misc(r0, 0x0, 0x0) 2m14.839260695s ago: executing program 4 (id=403): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000069114e000000000018d89bab68215a15a62e2e0000000100"], 0x0, 0x5}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb0105", 0x1e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e0914050001000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33) 2m14.808560136s ago: executing program 32 (id=403): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000069114e000000000018d89bab68215a15a62e2e0000000100"], 0x0, 0x5}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb0105", 0x1e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e0914050001000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33) 2m11.963306613s ago: executing program 2 (id=384): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507f, 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xacdd, 0x1000, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208280ff18f2ff0000000000000000000000008000", [0x4, 0x4]}) creat(&(0x7f0000000340)='./file1\x00', 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 2m11.502816867s ago: executing program 2 (id=445): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x812}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "1b2fcb39a2d24a3f", "3176927120162c9891c2feb670bbea88", "2c2af280", "c367b1a8d1546100"}, 0x28) 2m10.637669873s ago: executing program 2 (id=443): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffb, 0x3, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000)="836bb66f", 0x5ac, 0x0, 0x0, 0xfffffffffffffec8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2m10.626604294s ago: executing program 33 (id=443): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffb, 0x3, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000)="836bb66f", 0x5ac, 0x0, 0x0, 0xfffffffffffffec8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m54.363211637s ago: executing program 6 (id=729): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x4) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000f9fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 1m53.980573289s ago: executing program 6 (id=732): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004084) 1m53.848829303s ago: executing program 6 (id=737): r0 = socket(0x1, 0x5, 0x0) close(r0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) socket(0x2, 0x80805, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m53.543049452s ago: executing program 6 (id=745): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507f, 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xacdd, 0x1000, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208280ff18f2ff0000000000000000000000008000", [0x4, 0x4]}) creat(&(0x7f0000000340)='./file1\x00', 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) 1m53.230963602s ago: executing program 6 (id=751): r0 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x14a) fallocate(r0, 0x10, 0x3, 0x400) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x2, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000000d141b012cbd7000fbdbdf250800"], 0x20}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) 1m52.826022984s ago: executing program 6 (id=754): ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000240)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) 1m52.825777864s ago: executing program 34 (id=754): ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000240)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) 1m27.864773622s ago: executing program 7 (id=1056): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000140)=':', 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)='@', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, r1, 0x0, 0xfffa83) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) 1m27.565487351s ago: executing program 7 (id=1062): socket$inet6_udp(0xa, 0x2, 0x0) epoll_create1(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100150008000500250000000000080004"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt(0xffffffffffffffff, 0x1, 0x4, 0x0, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0xa1, 0x0}, 0x40004) 1m27.411869096s ago: executing program 7 (id=1063): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 1m27.360295208s ago: executing program 7 (id=1064): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = syz_open_procfs(0x0, 0x0) readv(r0, &(0x7f0000001440)=[{0x0}], 0x1) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x65) memfd_create(&(0x7f0000000300)='\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001640)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfe, 0x55b, &(0x7f0000000980)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 1m27.208007422s ago: executing program 7 (id=1067): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, '\r\x00', "8a36c47a9c625dfaf08ace81c500", "f8ffffff", "362d3017f069109d"}, 0x28) close_range(r0, 0xffffffffffffffff, 0x0) 1m26.377633458s ago: executing program 7 (id=1078): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x2, 0xfffffffe, 0x7, 0x4b7e, 0x80}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065fffffc7f00302e4c0000"], 0x15) setns(0xffffffffffffffff, 0x24020000) mount(0x0, 0x0, 0x0, 0x20, 0x0) io_submit(0x0, 0x0, 0x0) 1m26.373451188s ago: executing program 35 (id=1078): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x2, 0xfffffffe, 0x7, 0x4b7e, 0x80}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065fffffc7f00302e4c0000"], 0x15) setns(0xffffffffffffffff, 0x24020000) mount(0x0, 0x0, 0x0, 0x20, 0x0) io_submit(0x0, 0x0, 0x0) 3.167855954s ago: executing program 5 (id=2159): socket(0x1f, 0x800, 0x80000001) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0xc0c0128e, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1000000000004, 0x1, 0x0, 0x6, 0x1d, 0x8, "faf98315e5a114998dfc8d0000000000000004503dc3bd3fe37db1ead4e1307aa633000000000000c8b534464c516bdd8a0f350000d35abd02000040f900", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "07000000fd40f7222239c0340200c7e4162e43ac00", [0x8, 0x8ca9]}}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xa, 0x100}, 0x204, 0x2, 0x43a1bd78, 0x7, 0x9, 0x3ff, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113c00000000008510000002000000720000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3c8, 0x0, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@broadcast, @multicast2, @private, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 2.683876529s ago: executing program 0 (id=2166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 2.580291602s ago: executing program 1 (id=2168): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa412, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.546751243s ago: executing program 0 (id=2170): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000000040)=""/114, 0x72}], 0x2}}, {{&(0x7f0000000180)=@xdp, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/70}, {&(0x7f0000000540)=""/17}, {&(0x7f0000000680)=""/251}, {&(0x7f0000000780)=""/193}, {&(0x7f0000000880)=""/208}], 0x0, &(0x7f0000000a00)=""/67}, 0x6}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000a80)=""/124}, {&(0x7f0000001b80)=""/192}, {&(0x7f0000001c40)=""/79}, {&(0x7f0000001cc0)=""/61}]}, 0x7}, {{&(0x7f0000001d40)=@alg, 0x0, &(0x7f0000002380)=[{&(0x7f0000001dc0)=""/108}, {&(0x7f0000001e80)=""/138}, {&(0x7f0000001f40)=""/252}, {&(0x7f0000002040)=""/65}, {&(0x7f00000020c0)=""/4}, {&(0x7f0000002100)}, {&(0x7f0000002140)=""/242}, {&(0x7f0000002240)=""/56}, {&(0x7f0000002280)=""/228}], 0x0, &(0x7f0000002440)=""/138}, 0x1}], 0x4000011, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) 2.34080403s ago: executing program 0 (id=2176): r0 = io_uring_setup(0x664b, &(0x7f0000000500)={0x0, 0x5e87, 0x0, 0x0, 0x337}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526894aa7fe5e68949a3b304723177d356c4604bca492ecec37e83efceefd78a2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bd43b5b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebcef5af469abe753314fae31a09c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa7000008000000000000117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d34264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5a71e0d7696caba172745c7dd919ffb631820420b75b6522c0e21c882c66f4f25ffb6d95e07e068000000000000eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6f0100000000000000f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e09d24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868db06fd892d68a547477f8ef686ff0dba7b8c18c94d5a89b0567a851750a35d9cc2217db890d89385fcaa00f0f2e524672e6f4c8bedfd5da5b157709b8265cf511dc5846ab1d85916c4a6b2d1b408575982e11230cbac0a9c6eaa03c945645581f678403c2a936c53ae72940aa92bcf22b82c6bc028e0acdddf9fef595f0f7a9f80c0e4c659ced769ec463d26a81e468846761a8e1efd6a031ab7adc8665e267be0065cc315aa23012423ec8b8492d9b50fa4d8c5891959b761eec6dc988532782fda13239c948e27853606e26225c796b79cc04f3d1a5a13000000001e301d82a27010d3ac6119d2b12caf282413672d20c852c50084d7b2d50754775ed63bc18023c31351af76e24788d96103455693b34e09a163a9f613a7e5530222cebd7fa0fbff32dc98088f9fab33648cc38e87dd2dd6ee157f5f018702696915661715c979b7796d4f101a257688af7c148e8615c938c4ca8a69f6fc585ec1dd1857a501f90b161eff23181a11a2b0da4c58d459cbf9db"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000, 0x0, 0x6, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) close_range(r0, 0xffffffffffffffff, 0x0) 2.136584426s ago: executing program 5 (id=2177): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x4008054) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$selinux_access(0xffffffffffffffff, 0x0, 0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000180), &(0x7f0000000240)=0x8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1410, 0x1, 0x70bd2d, 0x25dfdc01, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0xc0) 2.136008776s ago: executing program 0 (id=2187): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001614"], 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, 0x0, 0x0}, 0x94) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.013897099s ago: executing program 3 (id=2180): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000001440)=ANY=[@ANYBLOB='nodots,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB=',nodots,nfs=stale_rw,nocase,dots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',,nodots,\x00'/23], 0x1, 0x25f, &(0x7f0000000140)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.696147399s ago: executing program 1 (id=2181): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', 0x81c04a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2e1, &(0x7f0000000880)="$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") r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) recvmsg$qrtr(0xffffffffffffffff, 0x0, 0x0, 0x2022) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) pidfd_getfd(r3, r3, 0x0) 1.565112063s ago: executing program 3 (id=2182): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x4173, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.563872623s ago: executing program 1 (id=2193): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0x9, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.508383755s ago: executing program 1 (id=2183): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x2, 0x7fff7ffc}]}) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x20000001}, 0x995d, 0x6, 0x1, 0x0, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 1.397813708s ago: executing program 8 (id=2184): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) unshare(0x6020400) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(0xffffffffffffffff, 0x40086e81, 0x0) bind$802154_raw(r2, 0x0, 0x0) socket(0x1e, 0x2, 0x400) write$UHID_DESTROY(r0, &(0x7f00000001c0), 0x4) 1.32338349s ago: executing program 1 (id=2185): r0 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x196, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x200000200009, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 1.247964763s ago: executing program 3 (id=2186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x200, 0x4f0d, 0x5, 0x10001, 0x8, 0x10000, 0x80, 0x288, 0x9, 0x9, 0x2, 0xfff, 0xdfd, 0x1, 0x7887, 0x5, 0xdd16, 0x392, 0x31aa, 0x7fff, 0x2, 0xfffff98c, 0x4, 0x4e, 0x100, 0xa, 0x9, 0x2, 0xf, 0x7, 0x3, 0x4, 0x1000, 0x800, 0x7, 0x1, 0x9, 0xd, 0x7, 0xfffffffe, 0x2, 0xc, 0x3, 0x0, 0xffffffef, 0x74, 0x4, 0x4, 0xffffffff, 0x6, 0x3, 0x1000, 0x6, 0x5, 0x7, 0x2, 0xffff, 0x6, 0x6, 0x80000000, 0xce0, 0x9, 0xea5, 0x8, 0x200, 0x4, 0x8001, 0xa8, 0x9, 0x10, 0x9, 0x10000, 0x2, 0x7fff, 0xc, 0x7, 0x4800, 0x8, 0x6, 0xe87, 0x7f, 0x6, 0x0, 0x4800, 0x1, 0x12, 0x18b, 0x6, 0x2, 0x5, 0x1, 0x40, 0x5, 0x1, 0x6, 0x1da35084, 0x4, 0x1, 0x9, 0x7, 0x0, 0x4, 0x4, 0x800, 0x2, 0x0, 0x7, 0x200, 0x3, 0x8001, 0xfffffffc, 0x0, 0x7a69, 0x764064d2, 0x92, 0x2, 0xbdc9, 0x3, 0xff, 0x2, 0x10, 0x5, 0x10000, 0x100, 0x5, 0x1022075d, 0x8, 0x5, 0x5, 0x3, 0x7f, 0x101, 0x4, 0xb, 0x9, 0x27, 0xff, 0x1, 0xf64a, 0xa78c, 0x5, 0x6, 0x7, 0xffff4fc5, 0x8, 0x7f, 0x385, 0x400, 0x100, 0x2, 0x5, 0x4, 0x7, 0x2, 0x7, 0x1, 0xb8, 0xffffff2a, 0x6, 0x8001, 0x6, 0x8, 0x3ff, 0x2, 0x6, 0x0, 0x6, 0x1, 0x80, 0x2, 0x5aeb, 0xe, 0x80000001, 0x38, 0x5, 0xa05, 0x3, 0x9, 0x72, 0x5, 0x4, 0x9, 0xba, 0x3, 0xc3, 0x8, 0x6, 0x7f, 0x5, 0xe8f0, 0x55, 0x4000008, 0xfe13, 0x7, 0x2, 0x8, 0x410, 0xffff03a4, 0xa8, 0x39b5, 0x8, 0xf3, 0x4, 0x81, 0x0, 0x7f, 0x2, 0x7fff, 0x7, 0x401, 0x4, 0x0, 0x8, 0x2, 0x7, 0x2, 0x1, 0x2, 0xb, 0xffff, 0x0, 0x9, 0xc0e, 0x41, 0xf, 0xffff, 0xfffffff7, 0xffffff26, 0x7, 0x32a, 0xad95, 0x776, 0x9, 0xfffffffd, 0x8, 0x3, 0xa4c9, 0x1, 0x6, 0xb, 0x3, 0x101, 0x1, 0x0, 0x2, 0x3, 0x4, 0x0, 0x80000000, 0xfffffff8, 0x400, 0x5, 0x2, 0x40, 0xfffeffff, 0x541b]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 1.158651055s ago: executing program 5 (id=2188): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x830, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xcff5, 0xffffffffffffffff, 0x0, 0xf00000000000000}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffff8, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='6L\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.089678827s ago: executing program 3 (id=2189): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'dvmrp0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) 1.086316928s ago: executing program 0 (id=2190): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004055) getxattr(0x0, 0x0, 0x0, 0x0) 1.024271159s ago: executing program 3 (id=2191): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x454, &(0x7f0000000740)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 953.510812ms ago: executing program 0 (id=2192): r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r4 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r2) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) 757.643357ms ago: executing program 8 (id=2194): socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 681.03635ms ago: executing program 8 (id=2195): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000001440)=ANY=[@ANYBLOB='nodots,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB=',nodots,nfs=stale_rw,nocase,dots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',,nodots,\x00'/23], 0x1, 0x25f, &(0x7f0000000140)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 636.713261ms ago: executing program 5 (id=2196): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x200a}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f00006bf000/0x3000)=nil, &(0x7f00000f0000/0x1000)=nil, &(0x7f0000acb000/0x1000)=nil, &(0x7f0000907000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f3, 0x0, r0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 404.087148ms ago: executing program 3 (id=2197): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 328.37084ms ago: executing program 5 (id=2198): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x532, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x50000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$can_raw(0x1d, 0x3, 0x1) fchdir(0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x1c0082, 0x0, 0xbe, 0x0, &(0x7f0000000280)) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f00000a0000/0x1000)=nil, 0x1000, 0x3000001, 0x11, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 296.256881ms ago: executing program 8 (id=2199): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 142.949016ms ago: executing program 1 (id=2200): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000000)) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 64.666588ms ago: executing program 8 (id=2201): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xaad80) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt(r1, 0x4, 0x1ff, 0x0, 0x0) preadv(r1, &(0x7f0000000600), 0x0, 0xfffffff7, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_setup(0xbff, &(0x7f0000000000)={0x0, 0x1e78, 0x40, 0x2, 0x20b}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b, 0x0, 0x0, 0x0, 0x0) 197.31µs ago: executing program 8 (id=2202): sched_setscheduler(0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x2, 0x0, 0x0, 0xfffffffe) 0s ago: executing program 5 (id=2203): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000200)="c788a5", 0x3) sendfile(r1, r0, 0x0, 0x3ffff) kernel console output (not intermixed with test programs): 466][ T28] audit: type=1326 audit(1781049572.964:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7173 comm="syz.1.980" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a1e1ce59 code=0x7ffc0000 [ 120.981727][ T7193] netlink: 24 bytes leftover after parsing attributes in process `syz.1.989'. [ 121.008234][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.989'. [ 121.199242][ T7206] loop3: detected capacity change from 0 to 1024 [ 121.216472][ T7206] EXT4-fs: Ignoring removed bh option [ 121.248150][ T7206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.281737][ T7211] tipc: Enabling of bearer rejected, failed to enable media [ 121.321357][ T4325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.479795][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1001'. [ 121.787128][ T3605] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 121.788399][ T7148] Bluetooth: hci0: command 0x1003 tx timeout [ 121.799563][ T4293] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 121.805710][ T7148] Bluetooth: hci1: command 0x1003 tx timeout [ 122.266175][ T7237] loop5: detected capacity change from 0 to 512 [ 122.305065][ T7239] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 122.305814][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 122.305831][ T28] audit: type=1400 audit(1781049574.524:805): avc: denied { mac_admin } for pid=7238 comm="syz.7.1007" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.321621][ T7237] EXT4-fs: Ignoring removed i_version option [ 122.395094][ T28] audit: type=1400 audit(1781049574.534:806): avc: denied { relabelto } for pid=7238 comm="syz.7.1007" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 122.465890][ T7237] EXT4-fs: Ignoring removed nobh option [ 122.475848][ T7237] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 122.505331][ T7237] EXT4-fs (loop5): orphan cleanup on readonly fs [ 122.517338][ T28] audit: type=1400 audit(1781049574.534:807): avc: denied { associate } for pid=7238 comm="syz.7.1007" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=245 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ssh_exec_t:s0" [ 122.517772][ T7237] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.1005: corrupted in-inode xattr: overlapping e_value [ 122.601785][ T7237] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.605422][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 122.621054][ C1] EXT4-fs (loop5): initial error at time 1781049574: ext4_iget_extra_inode:5128: inode 15 [ 122.631027][ C1] EXT4-fs (loop5): last error at time 1781049574: ext4_iget_extra_inode:5128: inode 15 [ 122.645487][ T28] audit: type=1400 audit(1781049574.534:808): avc: denied { read } for pid=7238 comm="syz.7.1007" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 122.693525][ T7237] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1005: couldn't read orphan inode 15 (err -117) [ 122.706325][ T7237] loop5: lost filesystem error report for type 5 error -117 [ 122.706851][ T7237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 122.733570][ T28] audit: type=1400 audit(1781049574.534:809): avc: denied { open } for pid=7238 comm="syz.7.1007" path="/43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 122.795445][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1010'. [ 122.807910][ T28] audit: type=1400 audit(1781049574.604:810): avc: denied { unlink } for pid=6520 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 122.892307][ T28] audit: type=1400 audit(1781049575.114:811): avc: denied { append } for pid=7252 comm="syz.7.1013" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 122.941780][ T28] audit: type=1400 audit(1781049575.154:812): avc: denied { read } for pid=7260 comm="syz.7.1015" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 122.968833][ T5137] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.990060][ T28] audit: type=1400 audit(1781049575.154:813): avc: denied { open } for pid=7260 comm="syz.7.1015" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 123.072310][ T28] audit: type=1400 audit(1781049575.154:814): avc: denied { ioctl } for pid=7260 comm="syz.7.1015" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 123.417468][ T7288] netlink: 'syz.7.1024': attribute type 1 has an invalid length. [ 123.527315][ T7288] bond1: (slave veth3): Enslaving as an active interface with a down link [ 123.757751][ T7288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.807803][ T7295] bond1: (slave dummy0): making interface the new active one [ 123.872575][ T7295] dummy0: entered promiscuous mode [ 123.889988][ T7295] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 123.926195][ T290] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 123.976863][ T7315] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1034'. [ 124.532699][ T7334] syzkaller0: entered promiscuous mode [ 124.545578][ T7334] syzkaller0: entered allmulticast mode [ 124.657860][ T7339] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1044'. [ 124.923714][ T7359] loop1: detected capacity change from 0 to 512 [ 124.947961][ T7361] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1054'. [ 124.949301][ T7359] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 124.995482][ T7359] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1053: bad orphan inode 131083 [ 125.040899][ T7359] loop1: lost filesystem error report for type 5 error -117 [ 125.041513][ T7359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.067283][ T7367] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1055'. [ 125.095501][ T7367] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1055'. [ 125.293119][ T7377] loop5: detected capacity change from 0 to 512 [ 125.312687][ T7377] EXT4-fs: inline encryption not supported [ 125.349906][ T7377] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 125.393706][ T7377] EXT4-fs (loop5): 1 truncate cleaned up [ 125.404454][ T7377] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.432887][ T7383] loop3: detected capacity change from 0 to 128 [ 125.447275][ T7385] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1062'. [ 125.481576][ T7385] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.488784][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.540492][ T7386] Trying to write to read-only block-device loop3 [ 125.566722][ T7386] syz.3.1061: attempt to access beyond end of device [ 125.566722][ T7386] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 125.592743][ T7386] syz.3.1061: attempt to access beyond end of device [ 125.592743][ T7386] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 125.646286][ T7386] syz.3.1061: attempt to access beyond end of device [ 125.646286][ T7386] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 125.648603][ T5137] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.668580][ T7390] loop7: detected capacity change from 0 to 1024 [ 125.693196][ T7390] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.720179][ T7386] syz.3.1061: attempt to access beyond end of device [ 125.720179][ T7386] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 125.786755][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.819050][ T6520] EXT4-fs error (device loop7): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 125.836887][ T7386] syz.3.1061: attempt to access beyond end of device [ 125.836887][ T7386] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 125.882885][ T6520] EXT4-fs error (device loop7): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 125.892452][ T7386] syz.3.1061: attempt to access beyond end of device [ 125.892452][ T7386] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 125.930366][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1068'. [ 125.994423][ T7386] syz.3.1061: attempt to access beyond end of device [ 125.994423][ T7386] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 126.056892][ T7386] syz.3.1061: attempt to access beyond end of device [ 126.056892][ T7386] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 126.077968][ T7386] syz.3.1061: attempt to access beyond end of device [ 126.077968][ T7386] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 126.093049][ T7386] syz.3.1061: attempt to access beyond end of device [ 126.093049][ T7386] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 126.145481][ T4325] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 126.154162][ T4325] FAT-fs (loop3): Filesystem has been set read-only [ 126.167784][ T7408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1073'. [ 126.409953][ T7419] loop3: detected capacity change from 0 to 764 [ 126.432545][ T7420] SET target dimension over the limit! [ 126.445899][ T7419] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 126.556668][ T6520] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.026578][ T7427] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.033873][ T7427] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.041769][ T7427] bridge_slave_0: entered allmulticast mode [ 127.048971][ T7427] bridge_slave_0: entered promiscuous mode [ 127.059567][ T7427] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.069560][ T7427] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.077779][ T7427] bridge_slave_1: entered allmulticast mode [ 127.087152][ T7427] bridge_slave_1: entered promiscuous mode [ 127.108809][ T7427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.119708][ T7427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.151566][ T7427] team0: Port device team_slave_0 added [ 127.158836][ T7427] team0: Port device team_slave_1 added [ 127.163384][ T7465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1091'. [ 127.174408][ T7427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.181615][ T7427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.209168][ T7427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.238982][ T7427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.251515][ T7427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.277907][ T7427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.299885][ T7469] tipc: Started in network mode [ 127.304829][ T7469] tipc: Node identity 3e1ce118dbb9, cluster identity 4711 [ 127.314216][ T7469] tipc: Enabled bearer , priority 0 [ 127.378367][ T7469] syzkaller0: entered promiscuous mode [ 127.383914][ T7469] syzkaller0: entered allmulticast mode [ 127.390666][ T7469] tipc: Resetting bearer [ 127.398947][ T7427] hsr_slave_0: entered promiscuous mode [ 127.405319][ T7427] hsr_slave_1: entered promiscuous mode [ 127.411565][ T7427] debugfs: 'hsr0' already exists in 'hsr' [ 127.417559][ T7427] Cannot create hsr debugfs directory [ 127.423628][ T7468] tipc: Resetting bearer [ 127.438114][ T7468] tipc: Disabling bearer [ 127.588646][ T7486] syzkaller0: entered promiscuous mode [ 127.594295][ T7486] syzkaller0: entered allmulticast mode [ 127.610027][ T7427] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 127.619455][ T7427] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 127.651574][ T7427] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 127.662191][ T7427] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 127.678367][ T7427] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 127.687394][ T7427] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 127.696518][ T7427] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 127.707226][ T7427] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 127.798710][ T7427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.832304][ T7427] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.842590][ T3955] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.849717][ T3955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.864144][ T3962] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.871241][ T3962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.932504][ T7495] loop3: detected capacity change from 0 to 128 [ 128.127917][ T7513] netlink: 'syz.5.1102': attribute type 1 has an invalid length. [ 128.138269][ T7427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.171406][ T7513] netlink: 'syz.5.1102': attribute type 2 has an invalid length. [ 128.380341][ T7427] veth0_vlan: entered promiscuous mode [ 128.414481][ T7427] veth1_vlan: entered promiscuous mode [ 128.449713][ T7427] veth0_macvtap: entered promiscuous mode [ 128.467950][ T7427] veth1_macvtap: entered promiscuous mode [ 128.487201][ T7427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.506948][ T7427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.540495][ T3964] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.555352][ T3964] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.589395][ T7540] bond4: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 128.598361][ T7540] bond4: entered allmulticast mode [ 128.603719][ T3964] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.612600][ T3964] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.630090][ T7540] ip6gretap1: entered promiscuous mode [ 128.637217][ T7540] ip6gretap1: entered allmulticast mode [ 128.643071][ T7540] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 128.682642][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 128.682659][ T28] audit: type=1400 audit(1781049580.904:840): avc: denied { mount } for pid=7427 comm="syz-executor" name="/" dev="gadgetfs" ino=4834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 128.720831][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1112'. [ 128.778972][ T28] audit: type=1400 audit(1781049581.004:841): avc: denied { create } for pid=7549 comm="syz.8.1079" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 128.857778][ T7553] tipc: Enabled bearer , priority 0 [ 128.931496][ T7553] syzkaller0: entered promiscuous mode [ 128.937192][ T7553] syzkaller0: entered allmulticast mode [ 128.951077][ T7553] tipc: Resetting bearer [ 128.960810][ T7560] batadv_slave_1: entered promiscuous mode [ 128.982961][ T7560] tc_dump_action: action bad kind [ 129.004034][ T7560] batadv_slave_1: left promiscuous mode [ 129.025691][ T7552] tipc: Resetting bearer [ 129.045773][ T7552] tipc: Disabling bearer [ 129.341380][ T7592] __nla_validate_parse: 1 callbacks suppressed [ 129.341542][ T7592] netlink: 2044 bytes leftover after parsing attributes in process `syz.3.1130'. [ 129.475556][ T7592] loop3: detected capacity change from 0 to 256 [ 129.988622][ T7604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.018982][ T7604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.601936][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1136'. [ 131.033109][ T28] audit: type=1400 audit(1781049583.254:842): avc: denied { sqpoll } for pid=7633 comm="syz.8.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 131.412236][ T28] audit: type=1400 audit(1781049583.634:843): avc: denied { setopt } for pid=7654 comm="syz.8.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 131.437490][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1151'. [ 131.450155][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1151'. [ 131.598482][ T7667] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1157'. [ 131.939460][ T7678] syzkaller0: entered promiscuous mode [ 131.945140][ T7678] syzkaller0: entered allmulticast mode [ 132.230230][ T7688] netlink: 'syz.3.1164': attribute type 21 has an invalid length. [ 132.300107][ T28] audit: type=1400 audit(1781049584.524:844): avc: denied { getopt } for pid=7690 comm="syz.1.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.552751][ T7702] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 132.630835][ T28] audit: type=1400 audit(1781049584.854:845): avc: denied { map } for pid=7706 comm="syz.8.1171" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 132.668848][ T28] audit: type=1400 audit(1781049584.854:846): avc: denied { read write } for pid=7706 comm="syz.8.1171" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 132.847045][ T7725] loop5: detected capacity change from 0 to 4096 [ 132.861036][ T7725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.875866][ T28] audit: type=1400 audit(1781049585.104:847): avc: denied { write } for pid=7720 comm="syz.5.1176" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.946641][ T28] audit: type=1326 audit(1781049585.174:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.8.1179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf92b3ce59 code=0x0 [ 133.055409][ T28] audit: type=1326 audit(1781049585.274:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.8.1179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf92b3ce59 code=0x7ffc0000 [ 133.263353][ T7747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1184'. [ 133.314232][ T7747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1184'. [ 133.325321][ T7747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1184'. [ 133.376577][ T7747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1184'. [ 133.419586][ T7747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1184'. [ 133.633879][ T5137] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.685634][ T28] kauditd_printk_skb: 314 callbacks suppressed [ 133.685651][ T28] audit: type=1326 audit(1781049585.914:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.8.1179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf92afd68e code=0x7ffc0000 [ 133.726840][ T28] audit: type=1326 audit(1781049585.944:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.8.1179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf92afd68e code=0x7ffc0000 [ 133.809696][ T7767] pimreg: entered allmulticast mode [ 133.816295][ T28] audit: type=1326 audit(1781049585.944:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.8.1179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf92afd68e code=0x7ffc0000 [ 133.843007][ T28] audit: type=1326 audit(1781049585.944:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.8.1179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf92afd68e code=0x7ffc0000 [ 133.869332][ T28] audit: type=1326 audit(1781049585.944:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.8.1179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf92afd68e code=0x7ffc0000 [ 133.895345][ T28] audit: type=1326 audit(1781049585.954:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.8.1179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf92afd68e code=0x7ffc0000 [ 133.921185][ T28] audit: type=1326 audit(1781049585.954:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.8.1179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf92afd68e code=0x7ffc0000 [ 133.947613][ T28] audit: type=1326 audit(1781049585.974:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.8.1179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf92afd68e code=0x7ffc0000 [ 133.973602][ T28] audit: type=1326 audit(1781049585.974:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.8.1179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf92afd68e code=0x7ffc0000 [ 133.999356][ T28] audit: type=1326 audit(1781049585.984:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.8.1179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf92afd68e code=0x7ffc0000 [ 134.030289][ T7766] pimreg: left allmulticast mode [ 134.540571][ T7783] loop3: detected capacity change from 0 to 1024 [ 134.612968][ T7783] EXT4-fs: Ignoring removed orlov option [ 134.636555][ T7783] EXT4-fs: inline encryption not supported [ 134.822651][ T7792] __nla_validate_parse: 4 callbacks suppressed [ 134.822744][ T7792] netlink: 184 bytes leftover after parsing attributes in process `syz.8.1202'. [ 135.275699][ T3968] dummy0: left promiscuous mode [ 135.293925][ T7816] netlink: 'syz.8.1208': attribute type 11 has an invalid length. [ 135.303441][ T7816] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1208'. [ 135.536787][ T7824] loop3: detected capacity change from 0 to 512 [ 135.711174][ T7838] SET target dimension over the limit! [ 136.308096][ T7752] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.885162][ T7869] Cannot find del_set index 0 as target [ 136.954420][ T35] Process accounting resumed [ 137.089626][ T7882] loop8: detected capacity change from 0 to 512 [ 137.120399][ T7882] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 137.145196][ T7882] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.1237: bad orphan inode 131083 [ 137.193542][ T7856] loop1: detected capacity change from 0 to 512 [ 137.208031][ T7882] loop8: lost filesystem error report for type 5 error -117 [ 137.208638][ T7882] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.338334][ T7856] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1225: bad orphan inode 13 [ 137.401024][ T7856] loop1: lost filesystem error report for type 5 error -117 [ 137.415419][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 137.429356][ C1] EXT4-fs (loop1): initial error at time 1781049589: ext4_orphan_get:1423 [ 137.437942][ C1] EXT4-fs (loop1): last error at time 1781049589: ext4_orphan_get:1423 [ 137.462730][ T7856] ext4_test_bit(bit=12, block=4) = 1 [ 137.463587][ T7427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.487476][ T7856] is_bad_inode(inode)=0 [ 137.496805][ T7856] NEXT_ORPHAN(inode)=0 [ 137.605286][ T7856] max_ino=32 [ 137.633575][ T7856] i_nlink=1 [ 137.902240][ T7856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.936304][ T7912] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1246'. [ 138.039981][ T7920] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 138.055999][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.088020][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1250'. [ 138.125121][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1250'. [ 138.269668][ T7923] loop1: detected capacity change from 0 to 128 [ 138.371223][ T7923] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 138.500637][ T7923] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 138.552474][ T7923] FAT-fs (loop1): Filesystem has been set read-only [ 138.622868][ T7923] FAT-fs (loop1): error, clusters badly computed (3 != 2) [ 138.645940][ T7928] loop8: detected capacity change from 0 to 512 [ 138.669251][ T7923] FAT-fs (loop1): error, clusters badly computed (4 != 3) [ 138.698597][ T7928] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.1253: inode has both inline data and extents flags [ 138.700935][ T7923] FAT-fs (loop1): error, clusters badly computed (5 != 4) [ 138.712823][ T7928] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 138.713388][ T7928] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.1253: couldn't read orphan inode 15 (err -117) [ 138.713616][ T7928] loop8: lost filesystem error report for type 5 error -117 [ 138.717197][ T7928] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.740999][ T28] kauditd_printk_skb: 464 callbacks suppressed [ 138.741016][ T28] audit: type=1400 audit(1781049590.954:1638): avc: denied { write } for pid=7927 comm="syz.8.1253" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.765273][ T7923] FAT-fs (loop1): error, clusters badly computed (6 != 5) [ 138.823114][ T7923] FAT-fs (loop1): error, clusters badly computed (7 != 6) [ 138.839055][ T28] audit: type=1400 audit(1781049591.064:1639): avc: denied { write } for pid=7927 comm="syz.8.1253" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.840368][ T7923] FAT-fs (loop1): error, clusters badly computed (8 != 7) [ 138.905480][ T7923] FAT-fs (loop1): error, clusters badly computed (9 != 8) [ 138.924778][ T7923] FAT-fs (loop1): error, clusters badly computed (10 != 9) [ 138.955412][ T7923] FAT-fs (loop1): error, clusters badly computed (11 != 10) [ 139.067370][ T3298] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 139.171140][ T7944] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 139.305202][ T7427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.457551][ T28] audit: type=1400 audit(1781049591.684:1640): avc: denied { read } for pid=7974 comm="syz.8.1269" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 139.480724][ T28] audit: type=1400 audit(1781049591.684:1641): avc: denied { open } for pid=7974 comm="syz.8.1269" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 140.379517][ T28] audit: type=1400 audit(1781049592.604:1642): avc: denied { read } for pid=7995 comm="syz.1.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 141.466397][ T28] audit: type=1400 audit(1781049593.694:1643): avc: denied { mount } for pid=8006 comm="syz.1.1279" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 141.778331][ T28] audit: type=1326 audit(1781049594.004:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8016 comm="syz.1.1283" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a1e1ce59 code=0x7ffc0000 [ 141.804520][ T28] audit: type=1326 audit(1781049594.004:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8016 comm="syz.1.1283" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a1e1ce59 code=0x7ffc0000 [ 141.833004][ T28] audit: type=1326 audit(1781049594.004:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8016 comm="syz.1.1283" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a1e1ce59 code=0x7ffc0000 [ 141.858665][ T28] audit: type=1326 audit(1781049594.004:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8016 comm="syz.1.1283" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a1e1ce59 code=0x7ffc0000 [ 142.222777][ T8031] loop8: detected capacity change from 0 to 512 [ 142.241956][ T8031] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.255031][ T8031] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.324831][ T7954] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.350321][ T7427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.618569][ T8053] loop5: detected capacity change from 0 to 512 [ 142.802534][ T8053] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 142.975891][ T8053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.997071][ T8053] ext4 filesystem being mounted at /170/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.162123][ T8053] pimreg: entered allmulticast mode [ 143.178975][ T8052] pimreg: left allmulticast mode [ 143.267357][ T5137] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.719038][ T8111] loop1: detected capacity change from 0 to 1024 [ 143.751146][ T8111] EXT4-fs: Ignoring removed orlov option [ 143.778150][ T8111] EXT4-fs: inline encryption not supported [ 143.824100][ T8111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.860568][ T8110] loop3: detected capacity change from 0 to 512 [ 143.962660][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 143.962677][ T28] audit: type=1400 audit(1781049596.174:1710): avc: denied { write } for pid=8104 comm="syz.1.1315" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.195029][ T8110] pimreg: entered allmulticast mode [ 144.226704][ T8111] EXT4-fs error (device loop1): __ext4_new_inode:1285: comm syz.1.1315: failed to insert inode 12: doubly allocated? [ 144.228255][ T28] audit: type=1400 audit(1781049596.454:1711): avc: denied { write } for pid=8104 comm="syz.1.1315" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.262509][ T8109] pimreg: left allmulticast mode [ 144.285139][ T28] audit: type=1400 audit(1781049596.454:1712): avc: denied { write } for pid=8104 comm="syz.1.1315" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.307000][ T28] audit: type=1400 audit(1781049596.454:1713): avc: denied { rename } for pid=8104 comm="syz.1.1315" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.331835][ T28] audit: type=1400 audit(1781049596.454:1714): avc: denied { rmdir } for pid=8104 comm="syz.1.1315" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 144.333014][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.402766][ T8121] veth0_vlan: entered allmulticast mode [ 144.483462][ T8125] sctp: [Deprecated]: syz.0.1320 (pid 8125) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.483462][ T8125] Use struct sctp_sack_info instead [ 144.501030][ T8121] veth0_vlan: left promiscuous mode [ 144.575059][ T8121] veth0_vlan: entered promiscuous mode [ 145.340477][ T28] audit: type=1326 audit(1781049597.564:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8155 comm="syz.0.1331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3d03ce59 code=0x7ffc0000 [ 145.415112][ T28] audit: type=1326 audit(1781049597.564:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8155 comm="syz.0.1331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3d03ce59 code=0x7ffc0000 [ 145.479836][ T28] audit: type=1326 audit(1781049597.564:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8155 comm="syz.0.1331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3d03ce59 code=0x7ffc0000 [ 145.508287][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1333'. [ 145.531782][ T28] audit: type=1326 audit(1781049597.564:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8155 comm="syz.0.1331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3d03ce59 code=0x7ffc0000 [ 145.539782][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1333'. [ 145.588053][ T28] audit: type=1326 audit(1781049597.564:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8155 comm="syz.0.1331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3d03ce59 code=0x7ffc0000 [ 145.658737][ T8162] syzkaller0: entered promiscuous mode [ 145.686817][ T8162] syzkaller0: entered allmulticast mode [ 145.701889][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1335'. [ 145.722947][ T3962] Bluetooth: hci0: Frame reassembly failed (-84) [ 146.124898][ T8171] loop3: detected capacity change from 0 to 512 [ 146.447045][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'. [ 146.456795][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'. [ 146.829563][ T8221] netlink: 830 bytes leftover after parsing attributes in process `syz.8.1356'. [ 147.012086][ T8211] loop1: detected capacity change from 0 to 512 [ 147.204162][ T8211] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 147.230725][ T8241] futex_wake_op: syz.0.1361 tries to shift op by 32; fix this program [ 147.246059][ T8211] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 147.293303][ T8211] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 147.327634][ T8211] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 147.351749][ T8211] System zones: 0-2, 18-18, 34-35 [ 147.444044][ T8211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.702842][ T8257] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 147.750257][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.786680][ T4293] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 147.789781][ T7148] Bluetooth: hci0: command 0x1003 tx timeout [ 147.918530][ T8259] loop1: detected capacity change from 0 to 512 [ 147.979779][ T8259] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 148.057216][ T8259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.077873][ T8259] ext4 filesystem being mounted at /258/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.244955][ T8259] pimreg: entered allmulticast mode [ 148.259893][ T8258] pimreg: left allmulticast mode [ 148.318472][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.381986][ T8268] loop1: detected capacity change from 0 to 512 [ 148.401624][ T8268] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.438968][ T8268] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1369: bad orphan inode 131083 [ 148.469437][ T8268] loop1: lost filesystem error report for type 5 error -117 [ 148.470263][ T8268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.549509][ T8274] netlink: 'syz.3.1372': attribute type 10 has an invalid length. [ 148.618044][ T8274] team0: Device wg2 is of different type [ 148.667708][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.710798][ T8284] syz_tun: entered allmulticast mode [ 148.734430][ T8284] pimreg: entered allmulticast mode [ 148.753636][ T8284] pimreg: left allmulticast mode [ 148.774396][ T8288] netlink: 'syz.3.1377': attribute type 1 has an invalid length. [ 148.817535][ T8284] syz_tun: left allmulticast mode [ 148.874338][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1378'. [ 148.901819][ T8293] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1379'. [ 148.922630][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1378'. [ 149.114283][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1382'. [ 149.211847][ T8301] loop8: detected capacity change from 0 to 512 [ 149.310782][ T8301] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 149.457717][ T8301] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.504076][ T8301] ext4 filesystem being mounted at /72/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.559831][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 149.559850][ T28] audit: type=1400 audit(1781049601.784:1777): avc: denied { write } for pid=8300 comm="syz.8.1381" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.644552][ T8305] pimreg: entered allmulticast mode [ 149.691217][ T8300] pimreg: left allmulticast mode [ 149.763821][ T7427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.816112][ T8313] xt_hashlimit: size too large, truncated to 1048576 [ 149.894862][ T28] audit: type=1400 audit(1781049602.114:1778): avc: denied { write } for pid=4325 comm="syz-executor" name="249" dev="tmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 149.969347][ T28] audit: type=1400 audit(1781049602.114:1779): avc: denied { write } for pid=4325 comm="syz-executor" name="249" dev="tmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 150.042323][ T28] audit: type=1400 audit(1781049602.114:1780): avc: denied { write } for pid=4325 comm="syz-executor" name="249" dev="tmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 150.102042][ T28] audit: type=1400 audit(1781049602.114:1781): avc: denied { write } for pid=4325 comm="syz-executor" name="249" dev="tmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 150.618429][ T8345] __nla_validate_parse: 1 callbacks suppressed [ 150.618450][ T8345] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1398'. [ 150.643137][ T8345] netlink: 'syz.1.1398': attribute type 1 has an invalid length. [ 150.652049][ T8345] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1398'. [ 151.559550][ T28] audit: type=1400 audit(1781049603.784:1782): avc: denied { ioctl } for pid=8353 comm="syz.3.1401" path="socket:[24196]" dev="sockfs" ino=24196 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 151.621935][ T28] audit: type=1400 audit(1781049603.844:1783): avc: denied { open } for pid=8360 comm="syz.3.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 151.664632][ T8359] tipc: Enabling of bearer rejected, failed to enable media [ 151.674522][ T28] audit: type=1400 audit(1781049603.844:1784): avc: denied { kernel } for pid=8360 comm="syz.3.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 151.718910][ T28] audit: type=1400 audit(1781049603.884:1785): avc: denied { write } for pid=8360 comm="syz.3.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 151.777633][ T8373] syzkaller0: entered promiscuous mode [ 151.782446][ T8372] netlink: 'syz.0.1407': attribute type 10 has an invalid length. [ 151.793384][ T8373] syzkaller0: entered allmulticast mode [ 152.191761][ T28] audit: type=1400 audit(1781049604.414:1786): avc: denied { name_bind } for pid=8393 comm="syz.1.1418" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 152.238697][ T8396] loop5: detected capacity change from 0 to 1024 [ 152.266992][ T8396] EXT4-fs: Ignoring removed orlov option [ 152.279720][ T8396] EXT4-fs: inline encryption not supported [ 152.286748][ T8399] loop3: detected capacity change from 0 to 512 [ 152.303830][ T8396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.409307][ T8396] EXT4-fs error (device loop5): __ext4_new_inode:1285: comm syz.5.1416: failed to insert inode 12: doubly allocated? [ 152.484293][ T5137] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.509037][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1425'. [ 152.568011][ T8428] loop8: detected capacity change from 0 to 256 [ 152.584417][ T8424] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 152.618692][ T8424] syzkaller0: entered promiscuous mode [ 152.625709][ T8424] syzkaller0: entered allmulticast mode [ 152.665307][ T8428] bio_check_eod: 93 callbacks suppressed [ 152.665325][ T8428] syz.8.1440: attempt to access beyond end of device [ 152.665325][ T8428] loop8: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 152.826526][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1430'. [ 152.838403][ T8437] loop8: detected capacity change from 0 to 256 [ 152.894964][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1434'. [ 152.956472][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1430'. [ 152.975013][ T8437] FAT-fs (loop8): Directory bread(block 64) failed [ 152.981721][ T8437] FAT-fs (loop8): Directory bread(block 65) failed [ 152.992602][ T8437] FAT-fs (loop8): Directory bread(block 66) failed [ 153.004006][ T8437] FAT-fs (loop8): Directory bread(block 67) failed [ 153.026068][ T8437] FAT-fs (loop8): Directory bread(block 68) failed [ 153.032749][ T8437] FAT-fs (loop8): Directory bread(block 69) failed [ 153.039496][ T8437] FAT-fs (loop8): Directory bread(block 70) failed [ 153.046190][ T8437] FAT-fs (loop8): Directory bread(block 71) failed [ 153.054181][ T8437] FAT-fs (loop8): Directory bread(block 72) failed [ 153.060809][ T8437] FAT-fs (loop8): Directory bread(block 73) failed [ 153.225384][ T8426] ipvlan0: entered promiscuous mode [ 153.326798][ T8426] bridge0: port 1(ipvlan0) entered blocking state [ 153.349912][ T8426] bridge0: port 1(ipvlan0) entered disabled state [ 153.390755][ T8426] ipvlan0: entered allmulticast mode [ 153.440969][ T8426] bridge0: entered allmulticast mode [ 153.455060][ T8426] ipvlan0: left allmulticast mode [ 153.460206][ T8426] bridge0: left allmulticast mode [ 153.472163][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1434'. [ 153.535074][ T8445] syzkaller0: entered promiscuous mode [ 153.542424][ T8445] syzkaller0: entered allmulticast mode [ 153.550950][ T3968] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.559948][ T3968] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.568966][ T3968] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.577869][ T3968] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.762155][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1449'. [ 153.808372][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1449'. [ 154.202603][ T8454] loop8: detected capacity change from 0 to 1024 [ 154.220420][ T8460] loop5: detected capacity change from 0 to 512 [ 154.238209][ T8460] EXT4-fs: Ignoring removed mblk_io_submit option [ 154.286922][ T8454] EXT4-fs: Ignoring removed orlov option [ 154.308614][ T8454] EXT4-fs: inline encryption not supported [ 154.368540][ T8460] EXT4-fs (loop5): orphan cleanup on readonly fs [ 154.378278][ T8460] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 154.411237][ T8460] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1443: attempt to clear invalid blocks 2 len 1 [ 154.460488][ T8460] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 154.475373][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 154.488319][ T8460] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, [ 154.491040][ C0] EXT4-fs (loop5): initial error at time 1781049606: ext4_clear_blocks:876: inode 13 [ 154.491082][ C0] EXT4-fs (loop5): last error at time 1781049606: ext4_clear_blocks:876: inode 13 [ 154.521399][ T8460] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 154.550630][ T8460] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1443: invalid indirect mapped block 1819239214 (level 0) [ 154.588757][ T8460] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 154.593213][ T8460] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1443: invalid indirect mapped block 1819239214 (level 1) [ 154.621943][ T8460] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 154.624659][ T8454] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.661039][ T8460] EXT4-fs (loop5): 1 truncate cleaned up [ 154.703459][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 154.703477][ T28] audit: type=1400 audit(1781049606.924:1808): avc: denied { write } for pid=8453 comm="syz.8.1437" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.741981][ T8460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 154.807638][ T5137] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.834879][ T8482] EXT4-fs error (device loop8): __ext4_new_inode:1285: comm syz.8.1437: failed to insert inode 12: doubly allocated? [ 154.847788][ T28] audit: type=1400 audit(1781049607.054:1809): avc: denied { write } for pid=8453 comm="syz.8.1437" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.882018][ T28] audit: type=1400 audit(1781049607.054:1810): avc: denied { write } for pid=8453 comm="syz.8.1437" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.935271][ T7427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.184789][ T8496] tipc: Failed to remove unknown binding: 66,0,0/0:2818392864/2818392865 [ 155.620547][ T8505] netlink: 'syz.1.1458': attribute type 1 has an invalid length. [ 155.642807][ T8505] 8021q: adding VLAN 0 to HW filter on device bond4 [ 155.686387][ T8505] bond4: (slave veth3): Enslaving as an active interface with a down link [ 155.743963][ T8505] batman_adv: batadv0: Removing interface: dummy0 [ 155.758884][ T8505] bond4: (slave dummy0): making interface the new active one [ 155.781528][ T8505] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 155.814329][ T8505] netlink: 'syz.1.1458': attribute type 10 has an invalid length. [ 155.835423][ T8505] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1458'. [ 155.844635][ T8505] dummy0: entered promiscuous mode [ 155.851057][ T8481] syz.3.1450 (8481) used greatest stack depth: 8544 bytes left [ 155.861059][ T8505] bond4: (slave dummy0): Releasing active interface [ 156.069987][ T28] audit: type=1400 audit(1781049608.294:1811): avc: denied { connect } for pid=8513 comm="syz.3.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 156.119348][ T28] audit: type=1400 audit(1781049608.294:1812): avc: denied { getopt } for pid=8513 comm="syz.3.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 156.160863][ T8524] netlink: 'syz.1.1466': attribute type 4 has an invalid length. [ 156.171236][ T8524] netlink: 'syz.1.1466': attribute type 4 has an invalid length. [ 156.184108][ T8524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.218689][ T8528] loop1: detected capacity change from 0 to 128 [ 156.229290][ T8528] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 156.242152][ T8528] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.255319][ T28] audit: type=1400 audit(1781049608.474:1813): avc: denied { write } for pid=8527 comm="syz.1.1468" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.314043][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.932399][ T8487] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.016758][ T8545] syzkaller1: entered promiscuous mode [ 158.027432][ T8545] syzkaller1: entered allmulticast mode [ 158.220078][ T28] audit: type=1400 audit(1781049610.444:1814): avc: denied { read write } for pid=8561 comm="syz.1.1481" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 158.249374][ T3539] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 158.275287][ T3539] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 158.302830][ T28] audit: type=1400 audit(1781049610.444:1815): avc: denied { open } for pid=8561 comm="syz.1.1481" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 158.605471][ T8562] loop1: detected capacity change from 0 to 512 [ 158.641133][ T8562] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.666417][ T28] audit: type=1400 audit(1781049610.894:1816): avc: denied { accept } for pid=8572 comm="syz.0.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 158.701544][ T8562] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 158.717209][ T8562] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.780312][ T8562] EXT4-fs (loop1): failed to initialize system zone (-117) [ 158.823956][ T8562] EXT4-fs (loop1): mount failed [ 159.053150][ T28] audit: type=1400 audit(1781049611.274:1817): avc: denied { execmod } for pid=8584 comm="syz.1.1487" path="/292/file0" dev="tmpfs" ino=1546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 161.343207][ T8585] uprobe: syz.1.1487:8585 failed to unregister, leaking uprobe [ 161.371882][ T28] audit: type=1400 audit(1781049613.594:1818): avc: denied { tracepoint } for pid=8587 comm="syz.8.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 161.474589][ T8596] loop5: detected capacity change from 0 to 512 [ 161.497354][ T8596] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 161.510560][ T8596] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.1491: bad orphan inode 131083 [ 161.521261][ T8596] loop5: lost filesystem error report for type 5 error -117 [ 161.521978][ T8596] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.712500][ T5137] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.257822][ T8631] loop8: detected capacity change from 0 to 512 [ 162.302806][ T8631] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.1506: inode has both inline data and extents flags [ 162.347411][ T8631] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 162.347530][ T28] audit: type=1400 audit(1781049614.554:1819): avc: denied { read } for pid=8635 comm="syz.5.1509" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 162.356821][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 162.356845][ C0] EXT4-fs (loop8): initial error at time 1781049614: ext4_orphan_get:1397: inode 15 [ 162.356887][ C0] EXT4-fs (loop8): last error at time 1781049614: ext4_orphan_get:1397: inode 15 [ 162.375701][ T8631] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.1506: couldn't read orphan inode 15 (err -117) [ 162.381489][ T28] audit: type=1400 audit(1781049614.554:1820): avc: denied { open } for pid=8635 comm="syz.5.1509" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 162.406381][ T8631] loop8: lost filesystem error report for type 5 error -117 [ 162.406582][ T28] audit: type=1400 audit(1781049614.554:1821): avc: denied { ioctl } for pid=8635 comm="syz.5.1509" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 162.424072][ T8631] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.522207][ T28] audit: type=1400 audit(1781049614.744:1822): avc: denied { write } for pid=8630 comm="syz.8.1506" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.598274][ T7427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.745619][ T28] audit: type=1326 audit(1781049614.964:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.8.1512" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf92b3ce59 code=0x7ffc0000 [ 162.790534][ T28] audit: type=1326 audit(1781049614.964:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.8.1512" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf92b3ce59 code=0x7ffc0000 [ 162.827417][ T8652] loop5: detected capacity change from 0 to 512 [ 162.854454][ T8654] tipc: Failed to remove unknown binding: 66,0,0/0:995887986/995887987 [ 162.866760][ T8652] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 162.877121][ T28] audit: type=1326 audit(1781049614.964:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.8.1512" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf92b3ce59 code=0x7ffc0000 [ 162.913837][ T8652] EXT4-fs (loop5): 1 truncate cleaned up [ 162.920409][ T8652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.934497][ T28] audit: type=1326 audit(1781049614.964:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.8.1512" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcf92b3ce59 code=0x7ffc0000 [ 162.961201][ T28] audit: type=1326 audit(1781049615.044:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.8.1512" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf92afd68e code=0x7ffc0000 [ 163.116525][ T5137] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.683246][ T8717] loop3: detected capacity change from 0 to 512 [ 165.042065][ T8746] netlink: 'syz.0.1547': attribute type 1 has an invalid length. [ 165.059935][ T8746] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.101831][ T8746] vlan0: entered allmulticast mode [ 165.114113][ T8746] bond2: entered allmulticast mode [ 165.136087][ T8746] bond2: (slave geneve2): making interface the new active one [ 165.144146][ T8746] geneve2: entered allmulticast mode [ 165.151892][ T8746] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 165.191709][ T8751] netlink: 'syz.0.1550': attribute type 1 has an invalid length. [ 165.226204][ T8751] 8021q: adding VLAN 0 to HW filter on device bond4 [ 165.239953][ T8751] bond3: (slave bond4): making interface the new active one [ 165.259360][ T8751] bond3: (slave bond4): Enslaving as an active interface with an up link [ 165.367389][ T8751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1550'. [ 165.414009][ T8751] 8021q: adding VLAN 0 to HW filter on device bond3 [ 166.039817][ T8745] loop5: detected capacity change from 0 to 1024 [ 166.184705][ T8745] EXT4-fs: Ignoring removed orlov option [ 166.216500][ T8745] EXT4-fs: inline encryption not supported [ 166.669241][ T8745] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.848905][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 166.848923][ T28] audit: type=1400 audit(1781049619.064:1928): avc: denied { write } for pid=8744 comm="syz.5.1548" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.955838][ T8795] EXT4-fs error (device loop5): __ext4_new_inode:1285: comm syz.5.1548: failed to insert inode 12: doubly allocated? [ 166.968745][ T28] audit: type=1400 audit(1781049619.184:1929): avc: denied { write } for pid=8744 comm="syz.5.1548" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.992749][ T28] audit: type=1400 audit(1781049619.184:1930): avc: denied { write } for pid=8744 comm="syz.5.1548" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.048042][ T5137] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.214304][ T3384] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 167.227207][ T3384] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 167.455925][ T8808] loop8: detected capacity change from 0 to 512 [ 167.504085][ T8808] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.540097][ T8808] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 167.592311][ T28] audit: type=1400 audit(1781049619.804:1931): avc: denied { ioctl } for pid=8823 comm="syz.0.1577" path="socket:[25922]" dev="sockfs" ino=25922 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 167.656401][ T8808] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 167.700621][ T8805] loop5: detected capacity change from 0 to 512 [ 167.714939][ T28] audit: type=1400 audit(1781049619.934:1932): avc: denied { read } for pid=8828 comm="syz.0.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 167.748118][ T8805] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.770124][ T8808] EXT4-fs (loop8): failed to initialize system zone (-117) [ 167.786152][ T8805] EXT4-fs: journaled quota format not specified [ 167.798053][ T8808] EXT4-fs (loop8): mount failed [ 167.841666][ T28] audit: type=1400 audit(1781049620.064:1933): avc: denied { bind } for pid=8834 comm="syz.1.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 167.983866][ T28] audit: type=1400 audit(1781049620.204:1934): avc: denied { write } for pid=8804 comm="syz.5.1569" path="socket:[25931]" dev="sockfs" ino=25931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 168.144690][ T28] audit: type=1400 audit(1781049620.364:1935): avc: denied { getopt } for pid=8846 comm="syz.1.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.206527][ T28] audit: type=1400 audit(1781049621.434:1936): avc: denied { cpu } for pid=8862 comm="syz.8.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 169.301031][ T3384] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 169.314174][ T3384] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.351399][ T8878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1596'. [ 169.388131][ T8878] vlan1: entered promiscuous mode [ 169.404233][ T8878] syz_tun: entered promiscuous mode [ 169.554337][ T8875] loop3: detected capacity change from 0 to 512 [ 169.570389][ T8875] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.761177][ T28] audit: type=1326 audit(1781049621.984:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8889 comm="syz.8.1599" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf92b3ce59 code=0x7fc00000 [ 170.262136][ T8879] infiniband syz1: set down [ 170.273151][ T8879] infiniband syz1: added syz_tun [ 170.286304][ T8879] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 170.286483][ T8879] infiniband syz1: Couldn't open port 1 [ 170.321351][ T8907] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1605'. [ 170.341660][ T8879] RDS/IB: syz1: added [ 170.355195][ T8879] smc: adding ib device syz1 with port count 1 [ 170.371492][ T8879] smc: ib device syz1 port 1 has no pnetid [ 171.412811][ T8959] loop5: detected capacity change from 0 to 128 [ 171.678301][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b7e6200: rx timeout, send abort [ 171.745445][ T8969] io-wq is not configured for unbound workers [ 171.968548][ T8988] netlink: 'syz.5.1636': attribute type 4 has an invalid length. [ 172.163956][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 172.163975][ T28] audit: type=1326 audit(1781049624.384:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9002 comm="syz.1.1643" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a1e1ce59 code=0x7ffc0000 [ 172.195737][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b7e6200: abort rx timeout. Force session deactivation [ 172.218376][ T28] audit: type=1326 audit(1781049624.434:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9002 comm="syz.1.1643" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a1e1ce59 code=0x7ffc0000 [ 172.250707][ T28] audit: type=1326 audit(1781049624.434:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9002 comm="syz.1.1643" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a1e1ce59 code=0x7ffc0000 [ 172.278145][ T28] audit: type=1326 audit(1781049624.434:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9002 comm="syz.1.1643" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f56a1e1ce59 code=0x7ffc0000 [ 172.303997][ T28] audit: type=1326 audit(1781049624.434:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9002 comm="syz.1.1643" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a1e1ce59 code=0x7ffc0000 [ 172.330154][ T28] audit: type=1326 audit(1781049624.434:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9002 comm="syz.1.1643" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a1e1ce59 code=0x7ffc0000 [ 172.355927][ T28] audit: type=1326 audit(1781049624.434:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9002 comm="syz.1.1643" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a1e1ce59 code=0x7ffc0000 [ 172.405966][ T28] audit: type=1326 audit(1781049624.434:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9002 comm="syz.1.1643" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f56a1e1ce59 code=0x7ffc0000 [ 172.440664][ T28] audit: type=1326 audit(1781049624.434:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9002 comm="syz.1.1643" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a1e1ce59 code=0x7ffc0000 [ 172.466842][ T28] audit: type=1326 audit(1781049624.434:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9002 comm="syz.1.1643" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a1e1ce59 code=0x7ffc0000 [ 172.504965][ T9015] loop5: detected capacity change from 0 to 512 [ 172.528867][ T9015] EXT4-fs: test_dummy_encryption option not supported [ 172.917665][ T9027] 9p: Unknown Cache mode or invalid value 0 [ 173.069594][ T9031] loop8: detected capacity change from 0 to 512 [ 173.104802][ T9031] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 173.142867][ T9031] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.1666: iget: bad i_size value: 38620345925642 [ 173.156455][ T9031] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 173.157560][ T9031] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.1666: couldn't read orphan inode 15 (err -117) [ 173.166931][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 173.166967][ C1] EXT4-fs (loop8): initial error at time 1781049625: ext4_orphan_get:1397: inode 15 [ 173.167082][ C1] EXT4-fs (loop8): last error at time 1781049625: ext4_orphan_get:1397: inode 15 [ 173.205850][ T9031] loop8: lost filesystem error report for type 5 error -117 [ 173.216698][ T9031] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.435902][ T3962] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm kworker/u8:21: bg 0: block 5: invalid block bitmap [ 173.450003][ T3962] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 108 with error 28 [ 173.482239][ T3962] EXT4-fs (loop8): This should not happen!! Data will be lost [ 173.482239][ T3962] [ 173.506645][ T3962] EXT4-fs (loop8): Total free blocks count 0 [ 173.520076][ T3962] EXT4-fs (loop8): Free/Dirty block details [ 173.533181][ T3962] EXT4-fs (loop8): free_blocks=0 [ 173.544445][ T3962] EXT4-fs (loop8): dirty_blocks=112 [ 173.556489][ T3962] EXT4-fs (loop8): Block reservation details [ 173.567878][ T3962] EXT4-fs (loop8): i_reserved_data_blocks=112 [ 173.580032][ T7427] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 173.597483][ T7427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.664862][ T9053] netlink: 'syz.5.1662': attribute type 13 has an invalid length. [ 173.850556][ T9053] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.857780][ T9053] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.039769][ T9053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.065176][ T9053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.260153][ T3962] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.300574][ T3962] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.340978][ T3962] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.384501][ T3962] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.783775][ T9110] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 175.394492][ T3297] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 175.434039][ T3297] CPU: 0 UID: 0 PID: 3297 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 175.434114][ T3297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 175.434126][ T3297] Call Trace: [ 175.434133][ T3297] [ 175.434141][ T3297] __dump_stack+0x1d/0x30 [ 175.434167][ T3297] dump_stack_lvl+0x95/0xd0 [ 175.434192][ T3297] dump_stack+0x15/0x1b [ 175.434214][ T3297] dump_header+0x80/0x240 [ 175.434304][ T3297] oom_kill_process+0x295/0x350 [ 175.434377][ T3297] out_of_memory+0x97d/0xb80 [ 175.434407][ T3297] try_charge_memcg+0x62f/0xa10 [ 175.434442][ T3297] charge_memcg+0x6d/0x120 [ 175.434547][ T3297] __mem_cgroup_charge+0x28/0xb0 [ 175.434644][ T3297] filemap_add_folio+0x110/0x350 [ 175.434752][ T3297] __filemap_get_folio_mpol+0x326/0x680 [ 175.434794][ T3297] filemap_fault+0x462/0xb70 [ 175.434966][ T3297] ? __pfx_filemap_map_pages+0x10/0x10 [ 175.434990][ T3297] handle_mm_fault+0x16cd/0x2e70 [ 175.435026][ T3297] ? __pfx_filemap_fault+0x10/0x10 [ 175.435070][ T3297] do_user_addr_fault+0x62f/0x1050 [ 175.435163][ T3297] ? trace_page_fault_user+0x1f/0xa0 [ 175.435196][ T3297] exc_page_fault+0x62/0xa0 [ 175.435226][ T3297] asm_exc_page_fault+0x26/0x30 [ 175.435282][ T3297] RIP: 0033:0x7feb3cf0ae74 [ 175.435312][ T3297] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 a8 ed 00 48 01 d1 [ 175.435333][ T3297] RSP: 002b:00007ffc0f82a140 EFLAGS: 00010202 [ 175.435432][ T3297] RAX: 0000001b32724000 RBX: 000000000000039f RCX: 000000000002ab98 [ 175.435494][ T3297] RDX: 0000000005585fa9 RSI: 00007ffc0f82a1d0 RDI: 0000000000000001 [ 175.435512][ T3297] RBP: 00007ffc0f82a17c R08: 000000001463ee6c R09: 3fffffffffffffff [ 175.435536][ T3297] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 175.435554][ T3297] R13: 00000000000927c0 R14: 000000000002ab56 R15: 00007ffc0f82a1d0 [ 175.435577][ T3297] [ 175.677157][ T3297] memory: usage 273400kB, limit 307200kB, failcnt 2813 [ 175.696056][ T3297] memory+swap: usage 256396kB, limit 9007199254740988kB, failcnt 0 [ 175.713880][ T3297] kmem: usage 242940kB, limit 9007199254740988kB, failcnt 0 [ 175.749000][ T3297] Memory cgroup stats for /syz0: [ 175.749237][ T3297] cache 524288 [ 175.768774][ T3297] rss 65536 [ 175.775913][ T3297] shmem 0 [ 175.782338][ T3297] mapped_file 0 [ 175.796528][ T3297] dirty 0 [ 175.812719][ T3297] writeback 0 [ 175.827455][ T3297] workingset_refault_anon 18 [ 175.842307][ T3297] workingset_refault_file 128 [ 175.869069][ T3297] swap 413696 [ 175.884270][ T3297] swapcached 7172096 [ 175.903990][ T3297] pgpgin 103024 [ 175.915544][ T3297] pgpgout 102866 [ 175.934978][ T3297] pgfault 116539 [ 175.988311][ T3297] pgmajfault 19 [ 176.006361][ T3297] inactive_anon 32768 [ 176.030263][ T3297] active_anon 81920 [ 176.048571][ T3297] inactive_file 0 [ 176.072740][ T3297] active_file 503808 [ 176.097917][ T3297] unevictable 8192 [ 176.117360][ T3297] hierarchical_memory_limit 314572800 [ 176.136598][ T3297] hierarchical_memsw_limit 9223372036854771712 [ 176.176036][ T3297] total_cache 524288 [ 176.190822][ T3297] total_rss 65536 [ 176.200993][ T3297] total_shmem 0 [ 176.204553][ T3297] total_mapped_file 0 [ 176.208818][ T3297] total_dirty 0 [ 176.212353][ T3297] total_writeback 0 [ 176.216412][ T3297] total_workingset_refault_anon 18 [ 176.221804][ T3297] total_workingset_refault_file 128 [ 176.236813][ T3297] total_swap 413696 [ 176.251881][ T3297] total_swapcached 7172096 [ 176.256631][ T3297] total_pgpgin 103024 [ 176.260724][ T3297] total_pgpgout 102866 [ 176.264864][ T3297] total_pgfault 116539 [ 176.269303][ T3297] total_pgmajfault 19 [ 176.273334][ T3297] total_inactive_anon 32768 [ 176.278207][ T3297] total_active_anon 81920 [ 176.282659][ T3297] total_inactive_file 0 [ 176.286968][ T3297] total_active_file 503808 [ 176.291441][ T3297] total_unevictable 8192 [ 176.295786][ T3297] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1683,pid=9121,uid=0 [ 176.310722][ T3297] Memory cgroup out of memory: OOM victim 9121 (syz.0.1683) is already exiting. Skip killing the task [ 176.356285][ T9164] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1701'. [ 176.491152][ T9179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1706'. [ 176.728436][ T9196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.740048][ T9196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.253930][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 177.253948][ T28] audit: type=1326 audit(1781049629.474:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.5.1723" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032814ce59 code=0x7ffc0000 [ 177.285808][ T28] audit: type=1326 audit(1781049629.494:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.5.1723" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032814ce59 code=0x7ffc0000 [ 177.317401][ T28] audit: type=1326 audit(1781049629.494:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.5.1723" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032814ce59 code=0x7ffc0000 [ 177.344014][ T28] audit: type=1326 audit(1781049629.494:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.5.1723" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032814ce59 code=0x7ffc0000 [ 177.369652][ T28] audit: type=1326 audit(1781049629.504:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.5.1723" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f032814ce59 code=0x7ffc0000 [ 177.398528][ T28] audit: type=1326 audit(1781049629.504:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.5.1723" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032814ce59 code=0x7ffc0000 [ 177.424145][ T28] audit: type=1326 audit(1781049629.504:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.5.1723" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f032814ce59 code=0x7ffc0000 [ 177.449724][ T28] audit: type=1326 audit(1781049629.514:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.5.1723" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032814ce59 code=0x7ffc0000 [ 177.522504][ T28] audit: type=1326 audit(1781049629.734:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9215 comm="syz.5.1723" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f032814ce59 code=0x7ffc0000 [ 177.750870][ T28] audit: type=1326 audit(1781049629.974:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9236 comm="syz.5.1732" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032814ce59 code=0x7ffc0000 [ 177.812267][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1733'. [ 177.839704][ T9237] loop5: detected capacity change from 0 to 512 [ 177.858493][ T9237] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 177.880508][ T9237] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.1732: iget: bad i_size value: 38620345925642 [ 177.893847][ T9237] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 177.895369][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 177.911036][ C1] EXT4-fs (loop5): initial error at time 1781049630: ext4_orphan_get:1397: inode 15 [ 177.916659][ T9237] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1732: couldn't read orphan inode 15 (err -117) [ 177.920468][ C1] EXT4-fs (loop5): last error at time 1781049630: ext4_orphan_get:1397: inode 15 [ 177.944034][ T9237] loop5: lost filesystem error report for type 5 error -117 [ 177.945688][ T9258] : renamed from vlan0 (while UP) [ 177.959305][ T9237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.110440][ T9269] loop3: detected capacity change from 0 to 512 [ 178.111440][ T9263] syzkaller0: entered promiscuous mode [ 178.119391][ T9269] EXT4-fs: Ignoring removed bh option [ 178.124399][ T9263] syzkaller0: entered allmulticast mode [ 178.127899][ T9271] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1741'. [ 178.156439][ T3967] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:24: bg 0: block 5: invalid block bitmap [ 178.184741][ T3967] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 372 with error 28 [ 178.200089][ T3967] EXT4-fs (loop5): This should not happen!! Data will be lost [ 178.200089][ T3967] [ 178.211062][ T3967] EXT4-fs (loop5): Total free blocks count 0 [ 178.217152][ T3967] EXT4-fs (loop5): Free/Dirty block details [ 178.228376][ T3967] EXT4-fs (loop5): free_blocks=0 [ 178.235932][ T3967] EXT4-fs (loop5): dirty_blocks=376 [ 178.249831][ T3967] EXT4-fs (loop5): Block reservation details [ 178.255921][ T3967] EXT4-fs (loop5): i_reserved_data_blocks=376 [ 178.273520][ T5137] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 178.288473][ T5137] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.401824][ T9286] netlink: 'syz.1.1750': attribute type 13 has an invalid length. [ 178.499657][ T9288] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1749'. [ 178.664795][ T9306] loop5: detected capacity change from 0 to 128 [ 178.756541][ T9308] syz.5.1758: attempt to access beyond end of device [ 178.756541][ T9308] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 178.800631][ T9308] syz.5.1758: attempt to access beyond end of device [ 178.800631][ T9308] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 178.846508][ T9308] syz.5.1758: attempt to access beyond end of device [ 178.846508][ T9308] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 178.894142][ T9308] syz.5.1758: attempt to access beyond end of device [ 178.894142][ T9308] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 178.940379][ T9308] syz.5.1758: attempt to access beyond end of device [ 178.940379][ T9308] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 178.980556][ T9308] syz.5.1758: attempt to access beyond end of device [ 178.980556][ T9308] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 179.028562][ T9308] syz.5.1758: attempt to access beyond end of device [ 179.028562][ T9308] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 179.037812][ T9302] rdma_rxe: rxe_newlink: failed to add syz_tun [ 179.066102][ T9308] syz.5.1758: attempt to access beyond end of device [ 179.066102][ T9308] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 179.093472][ T9308] syz.5.1758: attempt to access beyond end of device [ 179.093472][ T9308] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 179.135805][ T9308] syz.5.1758: attempt to access beyond end of device [ 179.135805][ T9308] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 179.419762][ T35] IPVS: starting estimator thread 0... [ 179.431241][ T9317] IPVS: lc: FWM 3 0x00000003 - no destination available [ 179.527214][ T9321] IPVS: using max 2640 ests per chain, 132000 per kthread [ 179.697907][ T3384] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 179.709240][ T3384] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 180.106807][ T290] IPVS: stop unused estimator thread 0... [ 180.129311][ T9339] syzkaller0: entered promiscuous mode [ 180.146731][ T9339] syzkaller0: entered allmulticast mode [ 180.360359][ T9325] loop5: detected capacity change from 0 to 512 [ 180.462387][ T9325] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.499307][ T9325] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 180.522718][ T9325] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 180.623698][ T9325] EXT4-fs (loop5): failed to initialize system zone (-117) [ 180.668862][ T9325] EXT4-fs (loop5): mount failed [ 181.504831][ T9389] netlink: 'syz.3.1790': attribute type 13 has an invalid length. [ 181.597254][ T9395] tipc: Failed to remove unknown binding: 66,0,0/0:3086219864/3086219866 [ 181.609394][ T9395] tipc: Failed to remove unknown binding: 66,0,0/0:3086219864/3086219865 [ 181.624432][ T9395] tipc: Failed to remove unknown binding: 66,0,0/0:3086219864/3086219866 [ 181.651012][ T9395] tipc: Failed to remove unknown binding: 66,0,0/0:3086219864/3086219865 [ 181.698566][ T290] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.708049][ T290] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.759409][ T290] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.787036][ T290] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.026764][ T9415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1798'. [ 182.068424][ T9415] ip6gre1: entered promiscuous mode [ 182.086816][ T9415] ip6gre1: entered allmulticast mode [ 182.120874][ T9415] netlink: 'syz.0.1798': attribute type 6 has an invalid length. [ 182.140978][ T9415] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1798'. [ 182.174145][ T3539] IPVS: starting estimator thread 0... [ 182.234271][ T9428] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1803'. [ 182.285789][ T9423] IPVS: using max 2736 ests per chain, 136800 per kthread [ 182.340846][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1803'. [ 182.618928][ T9445] netlink: 'syz.1.1810': attribute type 10 has an invalid length. [ 182.861544][ T9470] bond5: (slave ip6gretap1): making interface the new active one [ 182.869877][ T9470] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 182.900484][ T9473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1819'. [ 183.062468][ T28] kauditd_printk_skb: 349 callbacks suppressed [ 183.062486][ T28] audit: type=1400 audit(1781049635.284:2388): avc: denied { mount } for pid=9474 comm="syz.0.1821" name="/" dev="rpc_pipefs" ino=27200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 183.562901][ T9487] loop3: detected capacity change from 0 to 512 [ 183.609402][ T9487] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.649462][ T9499] syzkaller0: entered promiscuous mode [ 183.660057][ T9499] syzkaller0: entered allmulticast mode [ 184.266232][ T3539] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 184.275833][ T3539] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 184.384093][ T28] audit: type=1400 audit(1781049636.604:2389): avc: denied { mounton } for pid=9534 comm="syz.1.1847" path=2F3336332FE91F7189591E9233614B dev="tmpfs" ino=1909 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 184.427730][ T9532] loop3: detected capacity change from 0 to 512 [ 184.453891][ T9532] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.605705][ T9545] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1849'. [ 184.698123][ T9549] loop3: detected capacity change from 0 to 2048 [ 185.050090][ T9560] loop5: detected capacity change from 0 to 512 [ 185.066053][ T9560] EXT4-fs: Ignoring removed oldalloc option [ 185.079400][ T9567] xt_hashlimit: size too large, truncated to 1048576 [ 185.106338][ T9560] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 185.117234][ T9560] EXT4-fs (loop5): orphan cleanup on readonly fs [ 185.137298][ T9560] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 185.177729][ T9560] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 185.190783][ T9560] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #13: comm syz.5.1854: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 185.209268][ T9560] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 185.211234][ T9560] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1854: couldn't read orphan inode 13 (err -117) [ 185.220636][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 185.220717][ C1] EXT4-fs (loop5): last error at time 1781049637: ext4_ext_check_inode:521: inode 13 [ 185.252392][ T9560] loop5: lost filesystem error report for type 5 error -117 [ 185.256137][ T9560] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 185.312753][ T9560] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.459507][ T9079] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 185.470563][ T9079] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 185.518509][ T9593] loop5: detected capacity change from 0 to 512 [ 185.518935][ T9593] EXT4-fs: Ignoring removed bh option [ 185.530085][ T9593] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 185.541652][ T9593] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.1866: corrupted in-inode xattr: e_value size too large [ 185.541687][ T9593] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 185.541922][ T9593] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1866: couldn't read orphan inode 15 (err -117) [ 185.541949][ T9593] loop5: lost filesystem error report for type 5 error -117 [ 185.542572][ T9593] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.075814][ T5137] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.346083][ T9610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1874'. [ 186.395738][ T9610] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9610 comm=syz.3.1874 [ 186.424250][ T28] audit: type=1400 audit(1781049638.644:2390): avc: denied { create } for pid=9615 comm="syz.5.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 186.771164][ T28] audit: type=1400 audit(1781049638.994:2391): avc: denied { create } for pid=9623 comm="syz.3.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 186.991681][ T9636] loop8: detected capacity change from 0 to 512 [ 187.027924][ T9636] EXT4-fs: Ignoring removed nobh option [ 187.135514][ T9636] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #3: comm syz.8.1882: corrupted inode contents [ 187.160863][ T9636] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 187.163785][ T9636] EXT4-fs (loop8): Remounting filesystem read-only [ 187.172885][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 187.172907][ C0] EXT4-fs (loop8): initial error at time 1781049639: ext4_do_update_inode:5690: inode 3 [ 187.172960][ C0] EXT4-fs (loop8): last error at time 1781049639: ext4_do_update_inode:5690: inode 3 [ 187.206818][ T9636] Quota error (device loop8): write_blk: dquota write failed [ 187.214239][ T9636] Quota error (device loop8): qtree_write_dquot: Error -30 occurred while creating quota [ 187.225000][ T9636] EXT4-fs (loop8): 1 truncate cleaned up [ 187.232040][ T9636] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.244642][ T9636] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.256508][ T9636] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.311543][ T9648] batadv0: entered promiscuous mode [ 187.340075][ T9648] macvlan0: entered allmulticast mode [ 187.376484][ T9648] batadv0: entered allmulticast mode [ 187.377939][ T9655] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 187.390214][ T3384] IPVS: starting estimator thread 0... [ 187.392107][ T9648] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 187.454872][ T9648] batadv0: left allmulticast mode [ 187.461626][ T9648] batadv0: left promiscuous mode [ 187.486255][ T9656] IPVS: using max 2544 ests per chain, 127200 per kthread [ 187.537635][ T28] audit: type=1326 audit(1781049639.764:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.1.1891" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a1e1ce59 code=0x7ffc0000 [ 187.587411][ T28] audit: type=1326 audit(1781049639.764:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.1.1891" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a1e1ce59 code=0x7ffc0000 [ 187.631423][ T9664] IPVS: Scheduler module ip_vs_ not found [ 187.652181][ T28] audit: type=1326 audit(1781049639.764:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.1.1891" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f56a1e1ce59 code=0x7ffc0000 [ 187.740238][ T28] audit: type=1326 audit(1781049639.764:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9663 comm="syz.1.1891" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a1e1ce59 code=0x7ffc0000 [ 187.906436][ T9679] loop3: detected capacity change from 0 to 512 [ 188.107830][ T9654] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.116053][ T9654] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.463531][ T9654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.504700][ T9654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.596412][ T9654] veth0_vlan: left allmulticast mode [ 188.723917][ T9677] netlink: 'syz.5.1895': attribute type 12 has an invalid length. [ 188.741330][ T9677] netlink: 'syz.5.1895': attribute type 29 has an invalid length. [ 188.749879][ T9677] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1895'. [ 188.759308][ T9677] netlink: 51 bytes leftover after parsing attributes in process `syz.5.1895'. [ 188.795727][ T3955] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.806504][ T3955] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.819999][ T3964] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.852072][ T3964] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.915650][ T9703] netlink: 'syz.1.1904': attribute type 11 has an invalid length. [ 188.979905][ T9708] tipc: Failed to remove unknown binding: 66,0,0/0:3813876961/3813876963 [ 188.988742][ T9708] tipc: Failed to remove unknown binding: 66,0,0/0:3813876961/3813876962 [ 188.997849][ T9708] tipc: Failed to remove unknown binding: 66,0,0/0:3813876961/3813876963 [ 189.006479][ T9708] tipc: Failed to remove unknown binding: 66,0,0/0:3813876961/3813876962 [ 189.271273][ T9074] IPVS: starting estimator thread 0... [ 189.277654][ T9701] IPVS: lc: FWM 3 0x00000003 - no destination available [ 189.387075][ T9723] IPVS: using max 2736 ests per chain, 136800 per kthread [ 189.961413][ T9722] syz.8.1913 (9722): /proc/9720/oom_adj is deprecated, please use /proc/9720/oom_score_adj instead. [ 189.981747][ T3962] IPVS: stop unused estimator thread 0... [ 190.031332][ T9737] loop5: detected capacity change from 0 to 512 [ 190.082066][ T9737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.096240][ T9737] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.188113][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 190.188132][ T28] audit: type=1400 audit(1781049642.404:2422): avc: denied { connect } for pid=9745 comm="syz.3.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 190.223942][ T28] audit: type=1400 audit(1781049642.404:2421): avc: denied { setattr } for pid=9733 comm="syz.5.1916" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 190.250603][ T5137] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.417291][ T9757] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.1926'. [ 190.461544][ T9753] rdma_rxe: rxe_newlink: failed to add syz_tun [ 190.540182][ T28] audit: type=1400 audit(1781049642.764:2423): avc: denied { ioctl } for pid=9768 comm="syz.8.1931" path="socket:[28780]" dev="sockfs" ino=28780 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 190.694663][ T9782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1935'. [ 190.875945][ T9786] loop8: detected capacity change from 0 to 512 [ 190.891880][ T9786] EXT4-fs: Ignoring removed oldalloc option [ 190.915725][ T9786] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 190.939325][ T9786] EXT4-fs (loop8): orphan cleanup on readonly fs [ 190.963089][ T9786] EXT4-fs warning (device loop8): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 191.015866][ T9786] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 191.039734][ T9786] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #13: comm syz.8.1937: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 191.066209][ T9786] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 191.068597][ T9786] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.1937: couldn't read orphan inode 13 (err -117) [ 191.078051][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 191.078085][ C0] EXT4-fs (loop8): last error at time 1781049643: ext4_ext_check_inode:521: inode 13 [ 191.107002][ T9786] loop8: lost filesystem error report for type 5 error -117 [ 191.110443][ T9786] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 191.159808][ T9786] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.299211][ T9801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1944'. [ 191.508765][ T9818] loop8: detected capacity change from 0 to 1024 [ 191.552617][ T9818] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 191.571967][ T9818] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.375319][ T7427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 192.479739][ T9849] loop8: detected capacity change from 0 to 512 [ 192.513915][ T9849] EXT4-fs: Ignoring removed bh option [ 192.524539][ T9851] syzkaller0: entered promiscuous mode [ 192.543532][ T9849] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 192.558457][ T9849] EXT4-fs (loop8): 1 truncate cleaned up [ 192.579224][ T9849] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.743312][ T7427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.923813][ T9871] loop5: detected capacity change from 0 to 1024 [ 193.970531][ T9871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 193.982739][ T9871] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.156331][ T9894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1974'. [ 194.198898][ T9894] bond0: (slave bond_slave_0): Releasing backup interface [ 194.279070][ T9894] bond_slave_0: entered promiscuous mode [ 194.289039][ T9894] bond_slave_0: entered allmulticast mode [ 194.498906][ T28] audit: type=1400 audit(1781049646.724:2424): avc: denied { write } for pid=9901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.541173][ T9906] SELinux: security_context_str_to_sid (}ob?3blG;oxodigU) failed with errno=-22 [ 194.615799][ T28] audit: type=1400 audit(1781049646.834:2425): avc: denied { write } for pid=9921 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.790296][ T5137] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 194.952048][ T28] audit: type=1400 audit(1781049647.174:2426): avc: denied { write } for pid=9930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.039612][ T28] audit: type=1400 audit(1781049647.254:2427): avc: denied { write } for pid=9953 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.145043][ T9888] loop8: detected capacity change from 0 to 512 [ 195.182213][ T9888] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.209227][ T9888] EXT4-fs: journaled quota format not specified [ 195.226027][ T28] audit: type=1400 audit(1781049647.444:2428): avc: denied { connect } for pid=9956 comm="syz.0.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 195.512515][ T9965] cgroup: Setting release_agent not allowed [ 195.512524][ T28] audit: type=1400 audit(1781049647.734:2429): avc: denied { mounton } for pid=9964 comm="syz.0.1988" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.756162][ T28] audit: type=1326 audit(1781049647.984:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.3.1993" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97bad8ce59 code=0x7ffc0000 [ 195.826529][ T28] audit: type=1326 audit(1781049648.004:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.3.1993" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f97bad8ce59 code=0x7ffc0000 [ 195.888843][ T28] audit: type=1326 audit(1781049648.014:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.3.1993" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97bad8ce59 code=0x7ffc0000 [ 195.914926][ T9975] IPVS: Scheduler module ip_vs_ not found [ 195.956434][ T28] audit: type=1326 audit(1781049648.024:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.3.1993" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97bad8ce59 code=0x7ffc0000 [ 196.023984][ T9989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=9989 comm=syz.8.1997 [ 196.033231][ T28] audit: type=1326 audit(1781049648.034:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.3.1993" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f97bad8ce59 code=0x7ffc0000 [ 196.071918][ T28] audit: type=1326 audit(1781049648.044:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.3.1993" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97bad8ce59 code=0x7ffc0000 [ 196.109841][ T28] audit: type=1326 audit(1781049648.044:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.3.1993" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97bad8ce59 code=0x7ffc0000 [ 196.137687][ T9992] loop3: detected capacity change from 0 to 512 [ 196.143339][ T28] audit: type=1326 audit(1781049648.074:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9974 comm="syz.3.1993" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f97bad8ce59 code=0x7ffc0000 [ 196.234375][ T9998] syzkaller0: entered promiscuous mode [ 196.250695][ T9998] syzkaller0: entered allmulticast mode [ 196.287050][T10004] loop5: detected capacity change from 0 to 512 [ 196.298492][T10004] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.325563][T10004] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043e01c, mo2=0002] [ 196.339174][T10004] System zones: 1-12 [ 196.364024][T10004] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2004: invalid indirect mapped block 8 (level 2) [ 196.384127][T10004] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 196.384466][T10004] EXT4-fs (loop5): 1 truncate cleaned up [ 196.393670][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 196.393693][ C0] EXT4-fs (loop5): initial error at time 1781049648: ext4_free_branches:1023: inode 11 [ 196.393730][ C0] EXT4-fs (loop5): last error at time 1781049648: ext4_free_branches:1023: inode 11 [ 196.430299][T10004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.523648][T10021] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2008'. [ 196.549303][T10025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2006'. [ 196.562316][ T5137] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.970813][T10048] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2018'. [ 197.462733][T10061] syzkaller0: entered allmulticast mode [ 197.960718][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2034'. [ 197.988617][T10091] netlink: 'syz.5.2034': attribute type 5 has an invalid length. [ 198.019253][T10091] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2034'. [ 198.056683][T10091] geneve2: entered promiscuous mode [ 198.068244][T10091] geneve2: entered allmulticast mode [ 198.086698][ T3962] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 198.100097][ T3962] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 198.123697][ T3962] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 198.152409][ T3962] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 198.221090][T10105] netlink: 'syz.0.2038': attribute type 4 has an invalid length. [ 198.256713][T10105] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2038'. [ 198.519112][T10124] tipc: Failed to remove unknown binding: 66,0,0/0:159629860/159629861 [ 198.534038][T10124] tipc: Failed to remove unknown binding: 66,0,0/0:159629860/159629861 [ 199.353176][T10142] netlink: 'syz.1.2051': attribute type 1 has an invalid length. [ 199.380912][T10142] 8021q: adding VLAN 0 to HW filter on device bond5 [ 199.730574][T10142] vlan0: entered allmulticast mode [ 199.741797][T10142] bond5: entered allmulticast mode [ 199.763985][T10144] bond5: (slave geneve2): making interface the new active one [ 199.799691][T10144] geneve2: entered allmulticast mode [ 199.830841][T10144] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 199.866954][ T3960] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.876142][ T3960] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.901378][ T3960] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.919805][ T3960] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.020702][T10136] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 200.079069][T10153] loop5: detected capacity change from 0 to 512 [ 200.136108][T10157] syzkaller0: entered promiscuous mode [ 200.208833][T10153] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 200.231739][T10153] EXT4-fs (loop5): 1 truncate cleaned up [ 200.261222][T10153] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.806894][ T5137] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.013468][T10177] loop3: detected capacity change from 0 to 1024 [ 201.172831][T10184] tipc: Started in network mode [ 201.188478][T10184] tipc: Node identity 4, cluster identity 4711 [ 201.203987][T10184] tipc: Node number set to 4 [ 201.864380][T10212] syzkaller0: entered promiscuous mode [ 201.881129][T10212] syzkaller0: entered allmulticast mode [ 201.911346][T10216] netlink: 'syz.5.2076': attribute type 21 has an invalid length. [ 201.934638][T10216] IPv6: NLM_F_CREATE should be specified when creating new route [ 201.959386][T10216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.966791][T10216] IPv6: NLM_F_CREATE should be set when creating new route [ 201.974145][T10216] IPv6: NLM_F_CREATE should be set when creating new route [ 201.981545][T10216] IPv6: NLM_F_CREATE should be set when creating new route [ 201.992462][T10217] netlink: 'syz.5.2076': attribute type 21 has an invalid length. [ 202.000665][T10217] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.046727][T10216] vlan3: entered promiscuous mode [ 202.056699][T10216] bridge0: entered promiscuous mode [ 202.108169][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 202.108259][ T28] audit: type=1400 audit(1781049654.334:2449): avc: denied { bind } for pid=10222 comm="syz.3.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 202.663909][T10229] loop3: detected capacity change from 0 to 512 [ 202.720039][T10229] EXT4-fs: Ignoring removed bh option [ 202.990041][T10242] netlink: 'syz.3.2084': attribute type 1 has an invalid length. [ 203.013447][T10240] loop5: detected capacity change from 0 to 1024 [ 203.017266][T10242] 8021q: adding VLAN 0 to HW filter on device bond5 [ 203.049951][T10242] bond5: (slave geneve3): making interface the new active one [ 203.077789][T10240] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 203.090312][T10242] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 203.099588][ T3962] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.109886][ T290] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.124480][ T290] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.127242][T10240] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.156792][ T3962] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.205138][T10256] capability: warning: `syz.0.2090' uses deprecated v2 capabilities in a way that may be insecure [ 203.287946][T10261] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2091'. [ 203.294407][T10262] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2088'. [ 203.431285][T10269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2094'. [ 204.000828][ T5137] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 204.290184][T10276] loop8: detected capacity change from 0 to 512 [ 204.415474][T10276] EXT4-fs: Ignoring removed bh option [ 204.507650][T10287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2099'. [ 204.533090][T10287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2099'. [ 204.567491][T10276] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 204.814175][T10276] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.2096: corrupted in-inode xattr: e_value size too large [ 204.896352][T10276] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 204.903685][T10276] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.2096: couldn't read orphan inode 15 (err -117) [ 204.906112][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 204.906142][ C1] EXT4-fs (loop8): initial error at time 1781049657: ext4_iget_extra_inode:5128: inode 15 [ 204.906411][ C1] EXT4-fs (loop8): last error at time 1781049657: ext4_iget_extra_inode:5128: inode 15 [ 205.069437][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2119'. [ 205.196306][T10276] loop8: lost filesystem error report for type 5 error -117 [ 205.307663][T10312] hsr_slave_0 (unregistering): left promiscuous mode [ 205.519128][T10276] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.043668][ T7427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.062740][T10330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2114'. [ 206.150662][ T28] audit: type=1400 audit(1781049658.324:2450): avc: denied { write } for pid=10321 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.204912][T10341] loop5: detected capacity change from 0 to 512 [ 206.226783][ T28] audit: type=1400 audit(1781049658.344:2451): avc: denied { write } for pid=10336 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.250209][T10341] EXT4-fs: Ignoring removed bh option [ 206.307716][T10341] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 206.352308][T10341] EXT4-fs (loop5): 1 truncate cleaned up [ 206.371629][T10341] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.773281][ T5137] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.804994][T10357] netlink: 'syz.8.2123': attribute type 1 has an invalid length. [ 206.821949][T10357] bond1: entered promiscuous mode [ 206.828366][T10357] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.853126][T10357] bond1: (slave bridge2): making interface the new active one [ 206.860794][T10357] bridge2: entered promiscuous mode [ 206.868119][T10357] bridge2: left promiscuous mode [ 206.879534][T10360] loop5: detected capacity change from 0 to 2048 [ 206.907025][T10360] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.101216][T10366] SELinux: security_context_str_to_sid (}ob?3blG;oxodigU) failed with errno=-22 [ 207.221965][T10381] tipc: Enabling of bearer rejected, media not registered [ 207.232058][T10381] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.2131'. [ 207.248089][T10381] netlink: zone id is out of range [ 207.261464][T10381] netlink: zone id is out of range [ 207.278308][T10381] netlink: zone id is out of range [ 207.283640][T10381] netlink: zone id is out of range [ 207.290329][T10381] netlink: zone id is out of range [ 207.299395][T10381] netlink: zone id is out of range [ 207.308992][T10385] loop8: detected capacity change from 0 to 1024 [ 207.317466][T10387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10387 comm=syz.0.2131 [ 207.343402][T10385] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.355386][T10381] netlink: set zone limit has 8 unknown bytes [ 207.370459][T10385] EXT4-fs error (device loop8): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.8.2132: path /198/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=80 fake=0 [ 207.407680][ T28] audit: type=1400 audit(1781049659.594:2452): avc: denied { write } for pid=10383 comm="syz.8.2132" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 207.456022][T10379] loop3: detected capacity change from 0 to 512 [ 207.541908][ T28] audit: type=1400 audit(1781049659.594:2453): avc: denied { create } for pid=10383 comm="syz.8.2132" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 207.584603][ T7427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.595845][ T28] audit: type=1400 audit(1781049659.814:2454): avc: denied { append } for pid=10378 comm="syz.3.2130" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 207.712278][ T5137] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.728486][ T28] audit: type=1400 audit(1781049659.924:2455): avc: denied { ioctl } for pid=10378 comm="syz.3.2130" path="/dev/usbmon9" dev="devtmpfs" ino=169 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 208.371801][T10398] loop3: detected capacity change from 0 to 256 [ 208.779714][T10386] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 208.804745][ T28] audit: type=1400 audit(1781049661.014:2456): avc: denied { connect } for pid=10415 comm="syz.0.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 208.847406][T10417] SELinux: security_context_str_to_sid (}ob?3blG;oxodigU) failed with errno=-22 [ 209.396286][ T28] audit: type=1326 audit(1781049661.624:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10455 comm="syz.8.2156" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf92b3ce59 code=0x0 [ 209.503583][ T28] audit: type=1326 audit(1781049661.724:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10455 comm="syz.8.2156" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf92b3ce59 code=0x7ffc0000 [ 209.521086][T10452] rdma_rxe: rxe_newlink: failed to add syz_tun [ 209.550835][ T28] audit: type=1326 audit(1781049661.724:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10455 comm="syz.8.2156" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf92b3ce59 code=0x7ffc0000 [ 209.591998][T10465] loop3: detected capacity change from 0 to 512 [ 209.622650][ T28] audit: type=1326 audit(1781049661.724:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10455 comm="syz.8.2156" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf92b3ce59 code=0x7ffc0000 [ 209.660052][ T28] audit: type=1326 audit(1781049661.724:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10455 comm="syz.8.2156" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcf92b3ce59 code=0x7ffc0000 [ 209.687272][T10466] SELinux: security_context_str_to_sid (}ob?3blG;oxodigU) failed with errno=-22 [ 210.686453][T10515] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 210.749582][T10509] loop8: detected capacity change from 0 to 512 [ 210.762344][T10509] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 210.788314][T10509] EXT4-fs (loop8): 1 truncate cleaned up [ 210.801556][T10509] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.832339][ T9071] IPVS: starting estimator thread 0... [ 210.871130][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2187'. [ 210.881588][ T7427] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.925727][T10518] IPVS: using max 2544 ests per chain, 127200 per kthread [ 211.017287][T10530] loop3: detected capacity change from 0 to 512 [ 211.515374][T10527] rdma_rxe: rxe_newlink: failed to add syz_tun [ 211.605687][ T9686] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.615199][ T9686] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 212.168262][T10563] loop3: detected capacity change from 0 to 512 [ 212.193097][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2192'. [ 212.279572][T10572] loop8: detected capacity change from 0 to 512 [ 212.482839][ T28] kauditd_printk_skb: 372 callbacks suppressed [ 212.482859][ T28] audit: type=1326 audit(1781049664.704:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10573 comm="syz.5.2196" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032814ce59 code=0x7ffc0000 [ 212.535521][ T28] audit: type=1326 audit(1781049664.744:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10573 comm="syz.5.2196" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032814ce59 code=0x7ffc0000 [ 212.609962][ T28] audit: type=1326 audit(1781049664.744:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10573 comm="syz.5.2196" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032814ce59 code=0x7ffc0000 [ 212.668997][ T28] audit: type=1326 audit(1781049664.744:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10573 comm="syz.5.2196" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032814ce59 code=0x7ffc0000 [ 212.713457][ T28] audit: type=1326 audit(1781049664.744:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10573 comm="syz.5.2196" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f032814ce59 code=0x7ffc0000 [ 212.739933][ T28] audit: type=1326 audit(1781049664.744:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10573 comm="syz.5.2196" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032814ce59 code=0x7ffc0000 [ 212.766048][ T28] audit: type=1326 audit(1781049664.794:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10573 comm="syz.5.2196" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f032810d68e code=0x7ffc0000 [ 212.791658][ T28] audit: type=1326 audit(1781049664.814:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10573 comm="syz.5.2196" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f032810d68e code=0x7ffc0000 [ 212.819423][ T28] audit: type=1326 audit(1781049664.814:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10573 comm="syz.5.2196" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f032810d68e code=0x7ffc0000 [ 212.860013][T10589] bond0: (slave bond_slave_0): Releasing backup interface [ 212.875683][T10589] bond0: (slave bond_slave_1): Releasing backup interface [ 212.882930][ T28] audit: type=1326 audit(1781049664.814:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10573 comm="syz.5.2196" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f032810d68e code=0x7ffc0000 [ 212.918016][T10589] team0: Port device team_slave_0 removed [ 212.932342][T10589] team0: Port device team_slave_1 removed [ 212.941671][T10589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.964961][T10589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.972694][T10589] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 212.988907][T10597] loop5: detected capacity change from 0 to 4096 [ 213.002452][T10597] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.448830][T10597] ================================================================== [ 213.456968][T10597] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 213.465008][T10597] [ 213.467359][T10597] write to 0xffff88811b250674 of 4 bytes by task 10599 on cpu 1: [ 213.475102][T10597] xas_set_mark+0x12b/0x140 [ 213.479652][T10597] tag_pages_for_writeback+0xe3/0x2e0 [ 213.485245][T10597] ext4_do_writepages+0x6a8/0x2770 [ 213.490413][T10597] ext4_writepages+0x18f/0x320 [ 213.495219][T10597] do_writepages+0x1c6/0x310 [ 213.499861][T10597] file_write_and_wait_range+0x178/0x2f0 [ 213.505551][T10597] mmb_fsync_noflush+0x48/0x140 [ 213.510470][T10597] ext4_sync_file+0x1f1/0x6b0 [ 213.515267][T10597] vfs_fsync_range+0xc5/0xe0 [ 213.519987][T10597] ext4_buffered_write_iter+0x447/0x4c0 [ 213.525940][T10597] ext4_file_write_iter+0x380/0xfa0 [ 213.531184][T10597] iter_file_splice_write+0x6c4/0xa80 [ 213.536861][T10597] direct_splice_actor+0x156/0x2a0 [ 213.542018][T10597] splice_direct_to_actor+0x311/0x670 [ 213.547441][T10597] do_splice_direct+0x119/0x1a0 [ 213.552428][T10597] do_sendfile+0x382/0x650 [ 213.556924][T10597] __x64_sys_sendfile64+0x105/0x150 [ 213.562155][T10597] x64_sys_call+0x2dc4/0x3020 [ 213.566963][T10597] do_syscall_64+0x12c/0x3b0 [ 213.571598][T10597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.577714][T10597] [ 213.580069][T10597] read to 0xffff88811b250674 of 4 bytes by task 10597 on cpu 0: [ 213.587735][T10597] file_write_and_wait_range+0x130/0x2f0 [ 213.593402][T10597] mmb_fsync_noflush+0x48/0x140 [ 213.598326][T10597] ext4_sync_file+0x1f1/0x6b0 [ 213.603130][T10597] vfs_fsync_range+0xc5/0xe0 [ 213.607937][T10597] ext4_buffered_write_iter+0x447/0x4c0 [ 213.613676][T10597] ext4_file_write_iter+0x380/0xfa0 [ 213.618931][T10597] iter_file_splice_write+0x6c4/0xa80 [ 213.624416][T10597] direct_splice_actor+0x156/0x2a0 [ 213.629579][T10597] splice_direct_to_actor+0x311/0x670 [ 213.635011][T10597] do_splice_direct+0x119/0x1a0 [ 213.639933][T10597] do_sendfile+0x382/0x650 [ 213.644362][T10597] __x64_sys_sendfile64+0x105/0x150 [ 213.649924][T10597] x64_sys_call+0x2dc4/0x3020 [ 213.654804][T10597] do_syscall_64+0x12c/0x3b0 [ 213.659430][T10597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.665346][T10597] [ 213.667675][T10597] value changed: 0x02000021 -> 0x04000021 [ 213.673401][T10597] [ 213.675764][T10597] Reported by Kernel Concurrency Sanitizer on: [ 213.682023][T10597] CPU: 0 UID: 0 PID: 10597 Comm: syz.5.2203 Not tainted syzkaller #0 PREEMPT(lazy) [ 213.691794][T10597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 213.701956][T10597] ================================================================== [ 213.909404][ T5137] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.600030][T10578] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512