last executing test programs: 2.621776804s ago: executing program 4 (id=108): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x10000}, 0x18) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[], 0x1, 0x2a8, &(0x7f0000000500)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r2, &(0x7f0000000140)='./file1\x00', r2, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 2.457807226s ago: executing program 4 (id=111): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba02000) 2.399493677s ago: executing program 4 (id=114): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff001, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) 1.549483009s ago: executing program 4 (id=129): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x9) close_range(r1, 0xffffffffffffffff, 0x0) 1.296077133s ago: executing program 0 (id=134): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) 1.269490183s ago: executing program 0 (id=136): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='cpu~\"\"\nt\x00') 1.202722914s ago: executing program 0 (id=138): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2}, 0x2}], 0x2, 0x2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x44) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x0) 1.085241765s ago: executing program 0 (id=140): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff001, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) 1.039181226s ago: executing program 2 (id=141): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='mm_page_alloc\x00', r0}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 870.564358ms ago: executing program 1 (id=143): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") clock_settime(0x0, 0x0) 870.273398ms ago: executing program 2 (id=144): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") socketpair(0x1, 0x0, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, r3, 0xc4fc9e906872338b, 0x70bd29, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 703.494301ms ago: executing program 4 (id=145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 702.61787ms ago: executing program 1 (id=155): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") socketpair(0x1, 0x0, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, r3, 0xc4fc9e906872338b, 0x70bd29, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 701.793221ms ago: executing program 2 (id=146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r2 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x800000009) 666.770321ms ago: executing program 3 (id=147): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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") r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) write$9p(r1, &(0x7f0000001400)="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", 0x200) sendfile(r1, r2, 0x0, 0xe065) 524.615473ms ago: executing program 4 (id=148): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 497.535563ms ago: executing program 1 (id=149): ioperm(0x0, 0x6, 0x2da3b9f3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x61) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) getxattr(0x0, &(0x7f0000000a40)=@random={'os2.', '\x00'}, 0x0, 0x0) 465.265573ms ago: executing program 3 (id=150): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) epoll_create1(0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) 438.555014ms ago: executing program 3 (id=151): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='ext4_ext_convert_to_initialized_enter\x00', 0xffffffffffffffff, 0x0, 0xaf55}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x41, &(0x7f0000000080), 0x64, 0x537, &(0x7f0000001540)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 427.139574ms ago: executing program 1 (id=152): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 346.485645ms ago: executing program 1 (id=153): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 346.336375ms ago: executing program 2 (id=154): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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") r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff5295e8cd6f55ce071b304aa0a588b3b7a2efa2f167dd9c1b8b016268d37d9a30983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402c76caf85d4569a75dde2f64", 0x200) sendfile(r1, r2, 0x0, 0xe065) 213.779247ms ago: executing program 0 (id=156): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="000200000000000007"], 0x20) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) 206.390447ms ago: executing program 2 (id=157): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x9) close_range(r1, 0xffffffffffffffff, 0x0) 205.776138ms ago: executing program 1 (id=167): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff001, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) 203.032978ms ago: executing program 3 (id=158): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000100)={0x0}) 104.565939ms ago: executing program 3 (id=159): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='cpu~\"\"\nt\x00') 3.63146ms ago: executing program 3 (id=160): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2}, 0x2}], 0x2, 0x2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x44) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x0) 584.41µs ago: executing program 0 (id=171): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x9) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=172): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000100)={0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.2' (ED25519) to the list of known hosts. [ 24.546750][ T29] audit: type=1400 audit(1747836016.854:65): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.547412][ T3304] cgroup: Unknown subsys name 'net' [ 24.569466][ T29] audit: type=1400 audit(1747836016.854:66): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.597055][ T29] audit: type=1400 audit(1747836016.884:67): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.747149][ T3304] cgroup: Unknown subsys name 'cpuset' [ 24.753204][ T3304] cgroup: Unknown subsys name 'rlimit' [ 24.891504][ T29] audit: type=1400 audit(1747836017.194:68): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.916300][ T29] audit: type=1400 audit(1747836017.194:69): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.936930][ T29] audit: type=1400 audit(1747836017.194:70): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.957319][ T29] audit: type=1400 audit(1747836017.194:71): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.964580][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.977616][ T29] audit: type=1400 audit(1747836017.204:72): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.011024][ T29] audit: type=1400 audit(1747836017.204:73): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.034570][ T29] audit: type=1400 audit(1747836017.294:74): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.069797][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.828409][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 26.896051][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.903258][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.910509][ T3316] bridge_slave_0: entered allmulticast mode [ 26.916869][ T3316] bridge_slave_0: entered promiscuous mode [ 26.936324][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.943497][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.950871][ T3316] bridge_slave_1: entered allmulticast mode [ 26.957401][ T3316] bridge_slave_1: entered promiscuous mode [ 26.985863][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.996047][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.017702][ T3316] team0: Port device team_slave_0 added [ 27.027335][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 27.036809][ T3316] team0: Port device team_slave_1 added [ 27.081001][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.088071][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.114256][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.126166][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.133299][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.159423][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.210642][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 27.246017][ T3316] hsr_slave_0: entered promiscuous mode [ 27.252071][ T3316] hsr_slave_1: entered promiscuous mode [ 27.260349][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.267450][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.274520][ T3314] bridge_slave_0: entered allmulticast mode [ 27.280887][ T3314] bridge_slave_0: entered promiscuous mode [ 27.288986][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.296096][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.303344][ T3314] bridge_slave_1: entered allmulticast mode [ 27.309797][ T3314] bridge_slave_1: entered promiscuous mode [ 27.318072][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 27.327268][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 27.380051][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.404279][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.431295][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.438473][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.445696][ T3325] bridge_slave_0: entered allmulticast mode [ 27.452109][ T3325] bridge_slave_0: entered promiscuous mode [ 27.479672][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.486827][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.494107][ T3325] bridge_slave_1: entered allmulticast mode [ 27.500477][ T3325] bridge_slave_1: entered promiscuous mode [ 27.511199][ T3314] team0: Port device team_slave_0 added [ 27.517143][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.524326][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.531451][ T3318] bridge_slave_0: entered allmulticast mode [ 27.537742][ T3318] bridge_slave_0: entered promiscuous mode [ 27.546108][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.553283][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.560517][ T3318] bridge_slave_1: entered allmulticast mode [ 27.566877][ T3318] bridge_slave_1: entered promiscuous mode [ 27.581909][ T3314] team0: Port device team_slave_1 added [ 27.598833][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.605891][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.613116][ T3323] bridge_slave_0: entered allmulticast mode [ 27.619452][ T3323] bridge_slave_0: entered promiscuous mode [ 27.643007][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.652259][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.659445][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.666692][ T3323] bridge_slave_1: entered allmulticast mode [ 27.673053][ T3323] bridge_slave_1: entered promiscuous mode [ 27.684658][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.691902][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.718031][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.732004][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.742022][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.752105][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.769616][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.776627][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.802723][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.824700][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.851723][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.861537][ T3318] team0: Port device team_slave_0 added [ 27.873599][ T3325] team0: Port device team_slave_0 added [ 27.880359][ T3325] team0: Port device team_slave_1 added [ 27.890433][ T3318] team0: Port device team_slave_1 added [ 27.901679][ T3323] team0: Port device team_slave_0 added [ 27.929544][ T3323] team0: Port device team_slave_1 added [ 27.937271][ T3314] hsr_slave_0: entered promiscuous mode [ 27.943152][ T3314] hsr_slave_1: entered promiscuous mode [ 27.949133][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.956749][ T3314] Cannot create hsr debugfs directory [ 27.962446][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.969498][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.995483][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.006617][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.013573][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.039526][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.054399][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.061490][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.087450][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.116200][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.124685][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.131669][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.157628][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.182895][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.194937][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.201970][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.228082][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.240823][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.247802][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.273783][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.288801][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.297805][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.318049][ T3325] hsr_slave_0: entered promiscuous mode [ 28.324173][ T3325] hsr_slave_1: entered promiscuous mode [ 28.330157][ T3325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.337785][ T3325] Cannot create hsr debugfs directory [ 28.364421][ T3318] hsr_slave_0: entered promiscuous mode [ 28.370538][ T3318] hsr_slave_1: entered promiscuous mode [ 28.376343][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.383896][ T3318] Cannot create hsr debugfs directory [ 28.405757][ T3323] hsr_slave_0: entered promiscuous mode [ 28.411822][ T3323] hsr_slave_1: entered promiscuous mode [ 28.417824][ T3323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.425362][ T3323] Cannot create hsr debugfs directory [ 28.565299][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.586593][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.595750][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.607625][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.627632][ T3325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.639555][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.647038][ T3325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.655978][ T3325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.671363][ T3325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.698746][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.707483][ T3323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.716575][ T3323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.725944][ T3323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.735002][ T3323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.752703][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.759834][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.782363][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.789859][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.830730][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.844543][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.855122][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.872477][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.882322][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.899626][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.930875][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.938200][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.947097][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.954161][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.976716][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.996052][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.007375][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.015658][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.030801][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.037949][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.052441][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.063748][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.070925][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.086631][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.093795][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.120116][ T3325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.130623][ T3325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.153085][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.160230][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.173269][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.181591][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.214960][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.235732][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.242850][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.256117][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.263250][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.284378][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.294852][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.314129][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.335804][ T3316] veth0_vlan: entered promiscuous mode [ 29.361231][ T3316] veth1_vlan: entered promiscuous mode [ 29.373419][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.400025][ T3316] veth0_macvtap: entered promiscuous mode [ 29.424484][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.444663][ T3316] veth1_macvtap: entered promiscuous mode [ 29.471743][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.509812][ T3325] veth0_vlan: entered promiscuous mode [ 29.528379][ T3325] veth1_vlan: entered promiscuous mode [ 29.536107][ T3323] veth0_vlan: entered promiscuous mode [ 29.545881][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.563595][ T3316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.572554][ T3316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.582050][ T3316] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.590927][ T3316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.601920][ T3323] veth1_vlan: entered promiscuous mode [ 29.621319][ T3314] veth0_vlan: entered promiscuous mode [ 29.635789][ T3314] veth1_vlan: entered promiscuous mode [ 29.658700][ T3323] veth0_macvtap: entered promiscuous mode [ 29.665454][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 29.665535][ T29] audit: type=1400 audit(1747836021.964:84): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.qZqGNF/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.673039][ T3325] veth0_macvtap: entered promiscuous mode [ 29.700835][ T29] audit: type=1400 audit(1747836022.004:85): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.709097][ T3325] veth1_macvtap: entered promiscuous mode [ 29.723575][ T29] audit: type=1400 audit(1747836022.004:86): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.qZqGNF/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.735444][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.754469][ T29] audit: type=1400 audit(1747836022.004:87): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.764227][ T3314] veth0_macvtap: entered promiscuous mode [ 29.783629][ T29] audit: type=1400 audit(1747836022.004:88): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.qZqGNF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 29.793881][ T3314] veth1_macvtap: entered promiscuous mode [ 29.816061][ T29] audit: type=1400 audit(1747836022.004:89): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.qZqGNF/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 29.829044][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.849174][ T29] audit: type=1400 audit(1747836022.004:90): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.879414][ T3323] veth1_macvtap: entered promiscuous mode [ 29.889252][ T29] audit: type=1400 audit(1747836022.184:91): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 29.893574][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.912248][ T29] audit: type=1400 audit(1747836022.184:92): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="gadgetfs" ino=4167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 29.926272][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.953770][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.962603][ T3325] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.971460][ T3325] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.980277][ T3325] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.989047][ T3325] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.002365][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.015497][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.032794][ T3318] veth0_vlan: entered promiscuous mode [ 30.041839][ T29] audit: type=1400 audit(1747836022.344:93): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.071038][ T3323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.079878][ T3323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.088626][ T3323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.097445][ T3323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.111378][ T3314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.120258][ T3314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.128996][ T3314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.137814][ T3314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.154924][ T3318] veth1_vlan: entered promiscuous mode [ 30.198272][ T3318] veth0_macvtap: entered promiscuous mode [ 30.218998][ T3318] veth1_macvtap: entered promiscuous mode [ 30.255448][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.274532][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.286626][ T3318] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.295410][ T3318] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.304204][ T3318] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.313118][ T3318] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.397895][ T3473] netlink: 'syz.1.8': attribute type 10 has an invalid length. [ 30.408783][ T3473] team0: Device hsr_slave_0 failed to register rx_handler [ 30.412108][ T3471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 30.425625][ T3474] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 30.433784][ T3473] syz.1.8 (3473) used greatest stack depth: 10352 bytes left [ 30.471638][ T3476] loop1: detected capacity change from 0 to 512 [ 30.479018][ T3476] ======================================================= [ 30.479018][ T3476] WARNING: The mand mount option has been deprecated and [ 30.479018][ T3476] and is ignored by this kernel. Remove the mand [ 30.479018][ T3476] option from the mount to silence this warning. [ 30.479018][ T3476] ======================================================= [ 30.551712][ T3476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.567272][ T3468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.575873][ T3476] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 30.584865][ T3468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.592304][ T3476] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.10: corrupted inode contents [ 30.608362][ T3476] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #2: comm syz.1.10: mark_inode_dirty error [ 30.620916][ T3476] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.10: corrupted inode contents [ 30.653273][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.687418][ T3493] loop1: detected capacity change from 0 to 512 [ 30.708720][ T3493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.721434][ T3493] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.743706][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.796121][ T3501] bridge0: entered promiscuous mode [ 30.802574][ T3501] bridge0: port 3(macvlan2) entered blocking state [ 30.809586][ T3501] bridge0: port 3(macvlan2) entered disabled state [ 30.816359][ T3501] macvlan2: entered allmulticast mode [ 30.821838][ T3501] bridge0: entered allmulticast mode [ 30.828672][ T3501] macvlan2: left allmulticast mode [ 30.834041][ T3501] bridge0: left allmulticast mode [ 30.841254][ T3501] bridge0: left promiscuous mode [ 30.933904][ T3510] netlink: 'syz.4.22': attribute type 4 has an invalid length. [ 30.960539][ T3512] loop0: detected capacity change from 0 to 512 [ 30.982650][ T3512] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.996184][ T3512] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 31.014468][ T3512] EXT4-fs (loop0): 1 truncate cleaned up [ 31.023423][ T3516] loop1: detected capacity change from 0 to 512 [ 31.023841][ T3512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.036885][ T3520] loop4: detected capacity change from 0 to 128 [ 31.044481][ T3512] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.091943][ T3516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.122532][ T3520] FAT-fs (loop4): Directory bread(block 32) failed [ 31.129110][ T3516] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.154635][ T3520] FAT-fs (loop4): Directory bread(block 33) failed [ 31.169110][ T3520] FAT-fs (loop4): Directory bread(block 34) failed [ 31.176011][ T3520] FAT-fs (loop4): Directory bread(block 35) failed [ 31.183048][ T3520] FAT-fs (loop4): Directory bread(block 36) failed [ 31.189961][ T3520] FAT-fs (loop4): Directory bread(block 37) failed [ 31.196837][ T3520] FAT-fs (loop4): Directory bread(block 38) failed [ 31.204907][ T3520] FAT-fs (loop4): Directory bread(block 39) failed [ 31.213305][ T3520] FAT-fs (loop4): Directory bread(block 40) failed [ 31.219973][ T3520] FAT-fs (loop4): Directory bread(block 41) failed [ 31.282630][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.339706][ T3542] loop2: detected capacity change from 0 to 256 [ 31.375830][ T3520] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 31.384652][ T3520] FAT-fs (loop4): Filesystem has been set read-only [ 31.474331][ T3550] hub 9-0:1.0: USB hub found [ 31.491818][ T3550] hub 9-0:1.0: 8 ports detected [ 31.603627][ T3556] loop2: detected capacity change from 0 to 512 [ 31.632462][ T3558] loop4: detected capacity change from 0 to 512 [ 31.649780][ T3556] ext4: Unknown parameter 'subj_role' [ 31.688017][ T3558] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.881175][ T3568] loop3: detected capacity change from 0 to 512 [ 32.076378][ T3568] EXT4-fs (loop3): 1 orphan inode deleted [ 32.082512][ T3568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.095489][ T3568] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.136763][ T41] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 32.201992][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.265860][ T3575] loop3: detected capacity change from 0 to 128 [ 32.266114][ T3577] loop4: detected capacity change from 0 to 256 [ 32.367648][ T3585] syz.3.49: attempt to access beyond end of device [ 32.367648][ T3585] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 32.406042][ T3587] loop1: detected capacity change from 0 to 256 [ 32.439287][ T3589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 32.452298][ T41] kworker/u8:2: attempt to access beyond end of device [ 32.452298][ T41] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 32.525529][ T3593] random: crng reseeded on system resumption [ 32.527858][ T3591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'. [ 32.724417][ T3608] loop4: detected capacity change from 0 to 128 [ 32.750154][ T3608] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.765515][ T3610] syz.2.65 (3610) used greatest stack depth: 10264 bytes left [ 32.788842][ T3608] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 32.871845][ T3619] loop0: detected capacity change from 0 to 512 [ 32.888224][ T3318] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.912170][ T3623] syz.1.71 uses obsolete (PF_INET,SOCK_PACKET) [ 32.925064][ T3619] EXT4-fs (loop0): orphan cleanup on readonly fs [ 32.937663][ T3619] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.70: bad orphan inode 13 [ 32.952177][ T3619] ext4_test_bit(bit=12, block=18) = 1 [ 32.957661][ T3619] is_bad_inode(inode)=0 [ 32.961866][ T3619] NEXT_ORPHAN(inode)=2130706432 [ 32.966829][ T3619] max_ino=32 [ 32.970074][ T3619] i_nlink=1 [ 33.036733][ T3619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.130835][ T3619] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 33.177015][ T3619] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.70: bg 0: block 248: padding at end of block bitmap is not set [ 33.194030][ T3619] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.70: Failed to acquire dquot type 1 [ 33.208116][ T3619] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 33.248947][ T3619] syz.0.70 (3619) used greatest stack depth: 9312 bytes left [ 33.258369][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.398610][ T3656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 33.435899][ T3660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'. [ 33.439168][ T3658] loop4: detected capacity change from 0 to 1024 [ 33.453005][ T3654] infiniband syz0: set active [ 33.457804][ T3654] infiniband syz0: added veth0_virt_wifi [ 33.466938][ T3658] EXT4-fs: Ignoring removed orlov option [ 33.480940][ T3658] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 33.496805][ T3654] RDS/IB: syz0: added [ 33.500486][ T3662] process 'syz.3.88' launched './file1' with NULL argv: empty string added [ 33.516127][ T3654] smc: adding ib device syz0 with port count 1 [ 33.524153][ T3654] smc: ib device syz0 port 1 has pnetid [ 33.540658][ T3658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.559316][ T3667] loop3: detected capacity change from 0 to 512 [ 33.575427][ T3667] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 33.575889][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.597992][ T3667] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.613085][ T3667] EXT4-fs (loop3): 1 truncate cleaned up [ 33.636842][ T3667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.667857][ T3672] capability: warning: `syz.4.91' uses 32-bit capabilities (legacy support in use) [ 33.717644][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.892868][ T3682] random: crng reseeded on system resumption [ 34.079035][ T3693] loop4: detected capacity change from 0 to 1024 [ 34.100436][ T3693] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 34.136700][ T3693] EXT4-fs error (device loop4): ext4_map_blocks:709: inode #3: block 1: comm syz.4.101: lblock 1 mapped to illegal pblock 1 (length 1) [ 34.163491][ T3693] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.101: Failed to acquire dquot type 0 [ 34.177870][ T3693] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.101: Freeing blocks not in datazone - block = 0, count = 4096 [ 34.192375][ T3693] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.101: Invalid inode bitmap blk 0 in block_group 0 [ 34.206392][ T3693] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 34.214995][ T41] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 34.229552][ T3693] EXT4-fs (loop4): 1 orphan inode deleted [ 34.235719][ T3693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.238361][ T41] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 0 [ 34.292064][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.310912][ T3699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'. [ 34.319820][ T3699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'. [ 34.365608][ T3699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'. [ 34.405304][ T3699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'. [ 34.414215][ T3699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'. [ 34.456137][ T3709] loop4: detected capacity change from 0 to 128 [ 34.711672][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 34.711690][ T29] audit: type=1326 audit(1747836027.014:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5af2225927 code=0x7ffc0000 [ 34.768544][ T29] audit: type=1326 audit(1747836027.054:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5af21cab39 code=0x7ffc0000 [ 34.790423][ T3796] SELinux: Context : is not valid (left unmapped). [ 34.791847][ T29] audit: type=1326 audit(1747836027.054:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5af2225927 code=0x7ffc0000 [ 34.822002][ T29] audit: type=1326 audit(1747836027.054:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5af21cab39 code=0x7ffc0000 [ 34.845319][ T29] audit: type=1326 audit(1747836027.054:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af222e969 code=0x7ffc0000 [ 34.868730][ T29] audit: type=1326 audit(1747836027.054:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af222e969 code=0x7ffc0000 [ 34.892173][ T29] audit: type=1326 audit(1747836027.054:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f5af222e969 code=0x7ffc0000 [ 34.915903][ T29] audit: type=1326 audit(1747836027.054:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af222e969 code=0x7ffc0000 [ 34.939565][ T29] audit: type=1326 audit(1747836027.054:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3785 comm="syz.0.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af222e969 code=0x7ffc0000 [ 34.996479][ T29] audit: type=1400 audit(1747836027.074:276): avc: denied { create } for pid=3791 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.502098][ T3817] random: crng reseeded on system resumption [ 35.523639][ T3819] loop2: detected capacity change from 0 to 1024 [ 35.567899][ T3819] EXT4-fs: Ignoring removed orlov option [ 35.583839][ T3819] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 35.634558][ T3819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.668674][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.722974][ T3834] loop2: detected capacity change from 0 to 512 [ 35.765509][ T3834] EXT4-fs (loop2): orphan cleanup on readonly fs [ 35.777196][ T3834] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.133: bad orphan inode 13 [ 35.788936][ T3834] ext4_test_bit(bit=12, block=18) = 1 [ 35.794385][ T3834] is_bad_inode(inode)=0 [ 35.798653][ T3834] NEXT_ORPHAN(inode)=2130706432 [ 35.803587][ T3834] max_ino=32 [ 35.806857][ T3834] i_nlink=1 [ 35.810737][ T3834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.837182][ T3845] __nla_validate_parse: 4 callbacks suppressed [ 35.837199][ T3845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 35.852305][ T3845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 35.861187][ T3834] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 35.861239][ T3845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 35.876769][ T3834] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.133: bg 0: block 248: padding at end of block bitmap is not set [ 35.895086][ T3834] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.133: Failed to acquire dquot type 1 [ 35.908505][ T3834] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 35.909797][ T3845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 35.932037][ T3845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 35.943894][ T3845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 35.969840][ T3845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 35.970620][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.978733][ T3845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 35.996691][ T3845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 36.167572][ T3860] loop2: detected capacity change from 0 to 512 [ 36.180878][ T3861] loop1: detected capacity change from 0 to 1024 [ 36.188797][ T3861] EXT4-fs: Ignoring removed orlov option [ 36.194746][ T3860] EXT4-fs (loop2): 1 orphan inode deleted [ 36.201721][ T3860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.202127][ T3861] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 36.214872][ T3860] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.224696][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 36.249558][ T3861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.274081][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.293974][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.334772][ T3868] loop2: detected capacity change from 0 to 128 [ 36.345762][ T3869] loop1: detected capacity change from 0 to 512 [ 36.379079][ T3869] EXT4-fs (loop1): 1 orphan inode deleted [ 36.391705][ T3873] loop3: detected capacity change from 0 to 256 [ 36.398408][ T3765] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:46: Failed to release dquot type 1 [ 36.410599][ T3869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.419135][ T3868] syz.2.146: attempt to access beyond end of device [ 36.419135][ T3868] loop2: rw=0, sector=121, nr_sectors = 120 limit=128 [ 36.441633][ T3869] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.529314][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.542571][ T51] kworker/u8:3: attempt to access beyond end of device [ 36.542571][ T51] loop2: rw=1, sector=241, nr_sectors = 800 limit=128 [ 36.607979][ T3883] loop3: detected capacity change from 0 to 512 [ 36.627222][ T3883] EXT4-fs (loop3): orphan cleanup on readonly fs [ 36.633832][ T3883] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.151: bad orphan inode 13 [ 36.644082][ T3883] ext4_test_bit(bit=12, block=18) = 1 [ 36.649528][ T3883] is_bad_inode(inode)=0 [ 36.653713][ T3883] NEXT_ORPHAN(inode)=2130706432 [ 36.658703][ T3883] max_ino=32 [ 36.661912][ T3883] i_nlink=1 [ 36.665902][ T3883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.684895][ T3883] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 36.698034][ T3883] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.151: bg 0: block 248: padding at end of block bitmap is not set [ 36.713796][ T3889] loop2: detected capacity change from 0 to 256 [ 36.732375][ T3883] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.151: Failed to acquire dquot type 1 [ 36.751663][ T3892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 36.776742][ T3883] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 36.823160][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.842760][ T3897] random: crng reseeded on system resumption [ 37.032954][ T3911] random: crng reseeded on system resumption [ 37.106226][ T3005] ================================================================== [ 37.114433][ T3005] BUG: KCSAN: data-race in dont_mount / lookup_fast [ 37.121032][ T3005] [ 37.123340][ T3005] read-write to 0xffff8881071fea80 of 4 bytes by task 3624 on cpu 1: [ 37.131578][ T3005] dont_mount+0x2a/0x40 [ 37.135726][ T3005] vfs_unlink+0x28f/0x420 [ 37.140051][ T3005] do_unlinkat+0x28e/0x4c0 [ 37.144453][ T3005] __x64_sys_unlink+0x2e/0x40 [ 37.149121][ T3005] x64_sys_call+0x22a6/0x2fb0 [ 37.153787][ T3005] do_syscall_64+0xd0/0x1a0 [ 37.158284][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.164169][ T3005] [ 37.166484][ T3005] read to 0xffff8881071fea80 of 4 bytes by task 3005 on cpu 0: [ 37.174021][ T3005] lookup_fast+0xf0/0x320 [ 37.178351][ T3005] walk_component+0x3f/0x220 [ 37.183021][ T3005] path_lookupat+0xfe/0x2a0 [ 37.187511][ T3005] filename_lookup+0x147/0x340 [ 37.192292][ T3005] do_readlinkat+0x7d/0x320 [ 37.196776][ T3005] __x64_sys_readlink+0x47/0x60 [ 37.201607][ T3005] x64_sys_call+0x2cf3/0x2fb0 [ 37.206282][ T3005] do_syscall_64+0xd0/0x1a0 [ 37.210809][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.216726][ T3005] [ 37.219092][ T3005] value changed: 0x00300008 -> 0x00004008 [ 37.224822][ T3005] [ 37.227159][ T3005] Reported by Kernel Concurrency Sanitizer on: [ 37.233320][ T3005] CPU: 0 UID: 0 PID: 3005 Comm: udevd Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 37.245309][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 37.255372][ T3005] ==================================================================