last executing test programs: 10.224096669s ago: executing program 4 (id=458): socket$unix(0x1, 0x1, 0x0) r0 = syz_io_uring_setup(0x2501, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x3, 0x1, 0x8, 0xc7, 0x0, 0xa, 0x8279, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x12462, 0xcf, 0x1, 0x1, 0x0, 0xffff, 0x5, 0x0, 0x493, 0x0, 0x3d}, 0x0, 0x2, 0xffffffffffffffff, 0x1) r5 = getpgrp(0x0) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, r5, 0xffffffffffffffff, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r3) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x80) sync() 7.000151731s ago: executing program 4 (id=466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) 6.256713095s ago: executing program 2 (id=470): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) 6.256338704s ago: executing program 1 (id=471): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x101}, 0x100000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_void(r2, 0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000e00)="39000000140081ae00002c000500015601618575e285af01800000000d1300883795c04a31ba377a1b2cc37fffffffffffffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0000e3}, 0x4054) 6.065298602s ago: executing program 4 (id=473): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 5.999336751s ago: executing program 0 (id=474): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0001000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.856499437s ago: executing program 0 (id=475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0xd48a, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000022c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x14}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2, 0xd55}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x3}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@lu, {0x3, 0x3, 0x3, 0x4, 0x9}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.93882921s ago: executing program 4 (id=476): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x640, 0x5, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000340)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x2b4, &(0x7f0000000e40)="$eJzs3cFr024YwPFn7bZ2HVt7GIPfD8QHveglbPUvKLKBWFDmOqYHIXOplsZmNLVSEbeb1/0dw6MnBfUf2GU38SpeiiB42UGsrEm2rqu4ztVM8/1Aydv3fZ/kTd60PAk0bS5vPiwXXaNo1iSWVImJbMiuSGav5Bvyl7F2eVQ6bcjl8a/vz926fed6Lp+fW1Cdzy1eyarq5Pk3j5++uPCuNr70cvJ1QrYzd5tfsh+3p7f/a35fDNbuiJi64jg1c8W2dLXklg3Vm7ZlupaWKq5VrWlHe9F21tYaalZWJ1JrVct11aw0tGw1tOZordpQ875ZqqhhGDqRkqiJ9x1R2FpYMHMDGQzCMNarslrNmfGejYWtPzEoAABwtjSXN+Nh5P8PSq6WXK04h/L7o/l/TPrI/0Uinf/3j/w/Cvby/5T/+T2M/B8AAAAAAAAAAAAAAAAAAAAAgL/BbquVbrVa6WAZvBIikhSR4H3Y48RgMP/R1vHDvaSI/bxeqBe8pdeeK0pJbLFkZkTkW/t88Hnl+Wv5uRltm5a39rofv14vxCURxAcyveNnvXjtjF+XEUl1bj8raZnqHZ/tEV8vjMqli62Ev2VLDEnLzj1xxJbV9nl9EP9sVvXqjXxX/Fi7HwAAAAAA/wJD92W6r9/b7YYGjw3pavcqD+4PSPoX9we6rq+H5f/h8PYbAAAAAIAocRtPyqZtW9UIFIL/PziVFYZ/6JLH7TwsIn7Nq7MyFweFoQ1vVo42xUTkpGuO/94sfxaRQzVToU/3aRQ+PfKO9X7Nh593XpoI7UsJAAAAwEAESf9Q35GFnYEMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACACDruw8OC/id59ljH5uLh7CUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwNvwIAAD//5jbFjk=") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/38) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r5, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) 3.261191364s ago: executing program 0 (id=477): r0 = msgget$private(0x0, 0x0) msgsnd(r0, 0x0, 0x2000, 0x800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r2, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82040, 0x170) fcntl$setlease(r3, 0x400, 0x0) 3.23626992s ago: executing program 1 (id=478): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb1, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x7, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000000c0)=[{0x1, 0x1, {0x1, 0x0, 0x4}, {0x95d3957c306c7534, 0xf0, 0x1}, 0x2, 0xfe}], 0x20) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x100000000005, 0x10000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0xc408, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x20, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x74, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xc5, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x74}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3.199374344s ago: executing program 2 (id=479): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0x300001a, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0xfc, 0x2c6, &(0x7f0000000240)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x7800}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0xff000000, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x230, 0x250, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x0, 0x7, 0x0, 0x0, 0x9}}, @common=@inet=@hashlimit2={{0x150}, {'vxcan1\x00', {0x8, 0xcc5, 0x1a, 0x7, 0x17f2, 0x3, 0x38, 0xb0, 0x8}, {0x5}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa4, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {0x0, 0x6}, {0xffe0, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x300}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 3.179765811s ago: executing program 3 (id=480): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 3.121273851s ago: executing program 3 (id=481): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x4) 3.106694918s ago: executing program 1 (id=482): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x78, 0x6}, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000002c0), 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000280)) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.989463459s ago: executing program 3 (id=483): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x16) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2.395057357s ago: executing program 4 (id=484): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x78df03, 0x1c3) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x31}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a3, &(0x7f0000000080)) kexec_load(0xfffffffffffffffc, 0x3e00, 0x0, 0x0) 1.871300908s ago: executing program 0 (id=485): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socket(0xa, 0x3, 0x3a) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0xffffffff, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@ipv6={0x86dd, @icmpv6={0x6, 0x6, "4e4106", 0x8, 0x3a, 0x1, @remote, @empty, {[], @echo_request={0x80, 0x0, 0x0, 0x3, 0x8001}}}}}}, 0x0) 1.76613391s ago: executing program 3 (id=486): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80) r2 = socket$kcm(0x1e, 0x4, 0x0) close(r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x804c050) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r3, 0x0, 0x11e1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0xfdef) 1.715913692s ago: executing program 2 (id=487): socket$inet(0x2, 0x1, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1c9) lseek(r0, 0x7f, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 1.659070182s ago: executing program 2 (id=488): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x4) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) recvfrom$inet_nvme(r3, 0x0, 0x0, 0x40000002, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x8034) 1.658375782s ago: executing program 3 (id=489): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xe000000000000002, 0xffffffffffffffff, 0x1) sync() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x54f, &(0x7f0000000a00)="$eJzs3c9vHFcdAPDvbLxufji1SzlAJUqBoqSC7MY1bS0OJUgITpUQ5R6MvbGsrL2Rd93GViScvwAJIUBwggsXJP4AJBSJC0eEFAnOIBWBEDhwQAIy1cyOHdeZ3WzSza5/fD7SZN68+fF9bzYznjfzNBPAifVSRFyJiPtpmr4SEdNFfqUYYrs7ZMvd27m1mA1JpOnb/0giKfJ2t5UU43PFaqcj4htfi/h28nDc9ubW9YVms7FeTNc7qzfq7c2tSyurC8uN5cba3Nzs6/NvzL82f3ko9TwfEW9+5S8/+O7Pv/rmrz//7p+v/u1iVu2YKubvr8djyHbRRL8FulWv5vtiV7bC+hMEO6wm8hoWzpQtkaZpej+d3pdzeyQlAwDgoOwC9iMR8emIeCWm41T/y1kAAADgCEq/NBX/S7pPaEpM9sgHAAAAjpBK3gc2qdSKvgBTUanUat0+vB+Ns5Vmq9353LXWxtrS3R9PRcRMVCvXVpqNy0Vf4ZmoJtn0bJ5+MP3qgem5iHguIr4/fSafri22mkvjvvkBAAAAJ8S5A+3/f0932/8AAADAMTPzcFZlHOUAAAAAnp6S9j8AAABwzGj/AwAAwLH29bfeyoZ09/vXS+9sblxvvXNpqdG+XlvdWKwtttZv1JZbreX8nX2r+9c9VbK9Zqt14wuxtnGz3mm0O/X25tbV1dbGWufqygc+gQ0AAACM0HOfvPPHJCK2v3gmHzKT4y4UMBITe6mkGJcc/X96tjt+b0SFAkai7B7+Qe89M4KCACM38URrpYOcNoBDrjruAgBjlzxifs/OO78rxp8abnkAAIDhu/Dx3s//+38DYNsnAuCIcxDDyXXgQV46Pa6CACOXP/8ftMOviwU4VqoD9QAEjrMP/fz/kdL0sQoEAAAM3VQ+JJVacXtvKiqVWi3ifP5ZgGpybaXZuBwRz0bEH6arz2TTs/maySPbDAAAAAAAAAAAAAAAAAAAAAAAAABAV5omkfZzpe9cAAAA4AiIqPw1+U33Xf4Xpl+eOnh/YDL5T/5J4MmIePcnb//w5kKnsz6b5f9zL7/zoyL/1XHcwQAAAAAO2m2n77bjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCY7u3cWry3cyv9786txVHG/fuXI2JmL34+dOdMxOl8fDqqEXH2X0lM7FsviYhTQ4i/fTsiPlYWP8mKtReyLP6Zpx8/Zoq9UBb/3BDiw0l2Jzv/XCk7/irxUj4uP/4mIj4w/aR6n/9i7/x3qsfxf37AGC/c/WW9Z/zbES9MlJ9/duMnD8VPinFloPjf+ubWVq956U8jLkR5/P3R6p3VG/X25talldWF5cZyY21ubvb1+TfmX5u/XL+20mwU/5bG+N4nfnW/X/3P9og/07P+3TK9PFDtI/5/9+bO8z3+XmXxL36mJP5vf1Ys8XD8SrGtzxbpbP6F3fR2N73fi7/4/Yv96r/0oP7VwX7/bsyL/av94AccxoECAAxNe3Pr+kKz2Vg/Conqk6yVtdLLZj1f7IEPX7DJw7J/JB4z8Z2hbjBN07TH/6g7ETHIdpI4DLslT4z3vAQAAAzfg4v+cZcEAAAAAAAAAAAAAAAAAAAATq4hvjNssvQ1eyVvFtjeSyXeDAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBrvBwAA//9pfNv4") sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) 1.595953841s ago: executing program 0 (id=490): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r0, 0x1000000}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xa8]}, 0x8, 0x800) r2 = syz_io_uring_setup(0xbd7, &(0x7f0000000040)={0x0, 0xe14f, 0x8, 0x1, 0x4000032f, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000d40)="7da18017110b397d", &(0x7f0000000e00)}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r1, 0x7, &(0x7f0000000500)=[{&(0x7f0000001800)=""/201, 0xc9}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) socket(0x1d, 0x2, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mknodat$loop(0xffffffffffffffff, 0x0, 0x40, 0x1) r5 = syz_create_resource$binfmt(0x0) execveat$binfmt(0xffffffffffffffff, r5, 0x0, 0x0, 0x1000) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f00000000c0)={0xbe, "15889e670a03540745f2710647b1425e1290d27871d25f560a910aaa344d9641ef7b7b2ebb7e6ff6c875cd2defb88c327e15ff6cde30280c3f36679f476e9219536de39e84a31aa2b8378ccd880e9b843eedd53800500faa98f7756dd03b43a19cd989d52e57e67f57f7af15c950bb8b4ce17175ff836de1c8a080ebfc460cdd4b8cc9b139894bc95c8e6c8b1dbbedcde1103bfc1325d64423deb31a10463e00a33a5cf81d8bc093a7a64435722dfe7ab1e47ace29c9090c328dc4fe8686"}) 1.541120332s ago: executing program 4 (id=491): r0 = syz_io_uring_setup(0x315b, &(0x7f00000001c0)={0x0, 0x70a1, 0x1040, 0x2, 0x21}, &(0x7f0000000100), &(0x7f0000000180)) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mremap(&(0x7f00007f5000/0x4000)=nil, 0x52e000, 0x4000, 0x0, &(0x7f0000ec0000/0x4000)=nil) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0xf5, 0xfffff010}, {0x20, 0x0, 0x0, 0xfbfff00c}, {0x6}]}, 0x10) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, 0x0, 0x1) 1.254706263s ago: executing program 2 (id=492): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 1.254213563s ago: executing program 2 (id=493): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) ioperm(0x0, 0x7, 0x80006) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000001100)) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000340)=[{}], 0x1, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40088c5) sendmsg$nl_route(r1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.210386326s ago: executing program 0 (id=494): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f00000000c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.1739111s ago: executing program 1 (id=495): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x4) 1.128917902s ago: executing program 3 (id=496): r0 = msgget$private(0x0, 0x0) msgsnd(r0, 0x0, 0x2000, 0x800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r2, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82040, 0x170) fcntl$setlease(r3, 0x400, 0x0) 1.077476823s ago: executing program 1 (id=497): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x4) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvfrom$inet_nvme(r3, 0x0, 0x0, 0x40000002, 0x0, 0x0) 0s ago: executing program 1 (id=498): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=@base={0x1, 0x3, 0x8, 0x8, 0x40}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='io.stat\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000010000)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x60}, 0x2160) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 0 r/w. [ 40.556587][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.656309][ T3643] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm syz.2.43: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.772750][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.784479][ T3644] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.43: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.837757][ T3634] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.43: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.859945][ T3644] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.43: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.874655][ T3634] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.43: lblock 0 mapped to illegal pblock 0 (length 1) [ 40.892947][ T3640] syz.1.40 (3640) used greatest stack depth: 9632 bytes left [ 40.901505][ T3644] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.43: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.140929][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.192739][ T3644] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.43: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.246721][ T3644] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.43: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.270633][ T3644] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.43: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.285641][ T3644] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.43: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.613244][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 41.613278][ T28] audit: type=1400 audit(1772582381.297:185): avc: denied { mount } for pid=3649 comm="syz.1.46" name="/" dev="ramfs" ino=5015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 42.500305][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 42.509679][ T3659] loop1: detected capacity change from 0 to 1024 [ 42.516432][ T3659] EXT4-fs: Ignoring removed orlov option [ 42.542781][ T3660] loop3: detected capacity change from 0 to 512 [ 42.587024][ T3659] EXT4-fs: Ignoring removed nobh option [ 42.659735][ T3664] EXT4-fs: inline encryption not supported [ 42.665665][ T3664] EXT4-fs: Ignoring removed nobh option [ 42.671743][ T3664] EXT4-fs: Ignoring removed nobh option [ 42.677540][ T3664] EXT4-fs: Ignoring removed bh option [ 42.698115][ T3660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.740139][ T3664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.799092][ T3663] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.47: Allocating blocks 497-513 which overlap fs metadata [ 42.815417][ T3663] EXT4-fs (loop0): pa ffff888107b8e310: logic 131104, phys. 177, len 21 [ 42.823953][ T3663] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 42.931989][ T3659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.001881][ T3660] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.165073][ T28] audit: type=1400 audit(1772582382.857:186): avc: denied { execute } for pid=3656 comm="syz.1.48" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=6173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 43.544952][ T28] audit: type=1400 audit(1772582383.237:187): avc: denied { map } for pid=3656 comm="syz.1.48" path="/14/file1/cpu.stat" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.658747][ T28] audit: type=1400 audit(1772582383.297:188): avc: denied { bind } for pid=3656 comm="syz.1.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.759767][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.784408][ T28] audit: type=1400 audit(1772582383.297:189): avc: denied { node_bind } for pid=3656 comm="syz.1.48" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 43.881668][ T28] audit: type=1400 audit(1772582383.297:190): avc: denied { connect } for pid=3656 comm="syz.1.48" laddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.953931][ T28] audit: type=1400 audit(1772582383.297:191): avc: denied { write } for pid=3656 comm="syz.1.48" laddr=172.20.20.187 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.993714][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.247456][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.303038][ T3688] bridge_slave_0: left allmulticast mode [ 44.312701][ T3688] bridge_slave_0: left promiscuous mode [ 44.321036][ T3688] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.329401][ T3695] set_capacity_and_notify: 1 callbacks suppressed [ 44.329416][ T3695] loop0: detected capacity change from 0 to 128 [ 44.360489][ T3688] bridge_slave_1: left allmulticast mode [ 44.366390][ T3688] bridge_slave_1: left promiscuous mode [ 44.438695][ T3688] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.452569][ T3703] loop4: detected capacity change from 0 to 512 [ 44.471427][ T3703] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.58: inode has both inline data and extents flags [ 44.493040][ T3703] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.498732][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 44.516192][ C0] EXT4-fs (loop4): initial error at time 1772582384: ext4_orphan_get:1391: inode 15 [ 44.527427][ C0] EXT4-fs (loop4): last error at time 1772582384: ext4_orphan_get:1391: inode 15 [ 44.538988][ T3703] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.58: couldn't read orphan inode 15 (err -117) [ 44.571923][ T3688] bond0: (slave bond_slave_0): Releasing backup interface [ 44.604592][ T3688] bond0: (slave bond_slave_1): Releasing backup interface [ 44.607689][ T3703] loop4: lost filesystem error report for type 5 error -117 [ 44.626072][ T3703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.708004][ T3688] team0: Port device team_slave_0 removed [ 44.732560][ T3688] team0: Port device team_slave_1 removed [ 44.879784][ T3688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.887382][ T3688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.279727][ T355] kworker/u8:6: attempt to access beyond end of device [ 45.279727][ T355] loop0: rw=1, sector=129, nr_sectors = 8 limit=128 [ 45.413957][ T355] kworker/u8:6: attempt to access beyond end of device [ 45.413957][ T355] loop0: rw=1, sector=145, nr_sectors = 8 limit=128 [ 45.427439][ T355] kworker/u8:6: attempt to access beyond end of device [ 45.427439][ T355] loop0: rw=1, sector=161, nr_sectors = 8 limit=128 [ 45.451434][ T355] kworker/u8:6: attempt to access beyond end of device [ 45.451434][ T355] loop0: rw=1, sector=177, nr_sectors = 8 limit=128 [ 45.451784][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.465336][ T355] kworker/u8:6: attempt to access beyond end of device [ 45.465336][ T355] loop0: rw=1, sector=193, nr_sectors = 8 limit=128 [ 45.488860][ T355] kworker/u8:6: attempt to access beyond end of device [ 45.488860][ T355] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 45.500252][ T3688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.502863][ T355] kworker/u8:6: attempt to access beyond end of device [ 45.502863][ T355] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 45.528891][ T3688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.539645][ T355] kworker/u8:6: attempt to access beyond end of device [ 45.539645][ T355] loop0: rw=1, sector=241, nr_sectors = 8 limit=128 [ 45.553749][ T355] kworker/u8:6: attempt to access beyond end of device [ 45.553749][ T355] loop0: rw=1, sector=257, nr_sectors = 8 limit=128 [ 45.601737][ T3688] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 45.763935][ T28] audit: type=1400 audit(1772582385.457:192): avc: denied { bind } for pid=3712 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.803952][ T28] audit: type=1400 audit(1772582385.487:193): avc: denied { listen } for pid=3712 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.904604][ T28] audit: type=1400 audit(1772582385.487:194): avc: denied { connect } for pid=3712 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.911425][ T3743] loop2: detected capacity change from 0 to 1024 [ 46.924221][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 46.924239][ T28] audit: type=1400 audit(1772582386.617:199): avc: denied { execute } for pid=3744 comm="syz.4.69" path="/13/pids.events" dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 46.957854][ T3743] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 46.990133][ T3743] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 47.003765][ T3742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'. [ 47.013182][ T3742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'. [ 47.025613][ T28] audit: type=1400 audit(1772582386.717:200): avc: denied { create } for pid=3746 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.045587][ T3743] EXT4-fs error (device loop2): ext4_get_journal_inode:5863: inode #8: comm syz.2.67: inode has both inline data and extents flags [ 47.076209][ T3742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'. [ 47.085280][ T3742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'. [ 47.087801][ T28] audit: type=1400 audit(1772582386.747:201): avc: denied { write } for pid=3746 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.098568][ T3743] loop2: lost file I/O error report for ino 8 type 5 pos 0x0 len 0x0 error -117 [ 47.142187][ T3743] EXT4-fs (loop2): no journal found [ 47.152454][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 47.152474][ C1] EXT4-fs (loop2): initial error at time 1772582386: ext4_get_journal_inode:5863: inode 8 [ 47.152532][ C1] EXT4-fs (loop2): last error at time 1772582386: ext4_get_journal_inode:5863: inode 8 [ 47.189496][ T3742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'. [ 47.198276][ T3742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'. [ 47.437264][ T3753] loop0: detected capacity change from 0 to 1764 [ 47.451600][ T28] audit: type=1400 audit(1772582387.147:202): avc: denied { mount } for pid=3752 comm="syz.0.72" name="/" dev="loop0" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 47.538360][ T28] audit: type=1400 audit(1772582387.227:203): avc: denied { write } for pid=3754 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 47.581151][ T28] audit: type=1400 audit(1772582387.267:204): avc: denied { bind } for pid=3754 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.630431][ T28] audit: type=1400 audit(1772582387.267:205): avc: denied { ioctl } for pid=3754 comm="syz.4.73" path="socket:[7196]" dev="sockfs" ino=7196 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.516945][ T3762] loop4: detected capacity change from 0 to 512 [ 48.530815][ T3763] loop1: detected capacity change from 0 to 512 [ 49.798611][ T3762] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.824243][ T3762] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 49.834890][ T3763] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.868596][ T3763] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 50.868628][ T3763] EXT4-fs: failed to create workqueue [ 50.883819][ T3763] EXT4-fs (loop1): mount failed [ 51.139118][ T3762] EXT4-fs: error -4 creating inode table initialization thread [ 51.147316][ T3762] EXT4-fs (loop4): mount failed [ 51.238595][ T28] audit: type=1400 audit(1772582390.917:206): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 51.290726][ T3771] tipc: Started in network mode [ 51.321016][ T3771] tipc: Node identity baa8fb361c0c, cluster identity 4711 [ 51.340360][ T3771] tipc: Enabled bearer , priority 0 [ 51.348208][ T3778] syzkaller0: entered promiscuous mode [ 51.354953][ T3778] syzkaller0: entered allmulticast mode [ 51.516776][ T3770] tipc: Resetting bearer [ 51.590150][ T3770] tipc: Disabling bearer [ 51.919501][ T3785] sctp: [Deprecated]: syz.3.81 (pid 3785) Use of int in maxseg socket option. [ 51.919501][ T3785] Use struct sctp_assoc_value instead [ 51.969836][ T3785] IPVS: set_ctl: invalid protocol: 60 10.1.1.4:20257 [ 51.977308][ T23] IPVS: starting estimator thread 0... [ 51.987711][ T3785] process 'syz.3.81' launched './file0' with NULL argv: empty string added [ 51.988316][ T3787] loop2: detected capacity change from 0 to 128 [ 52.018449][ T28] audit: type=1400 audit(1772582391.707:207): avc: denied { execute_no_trans } for pid=3783 comm="syz.3.81" path="/10/file0" dev="tmpfs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 52.078634][ T3789] IPVS: using max 3456 ests per chain, 172800 per kthread [ 52.199734][ T3792] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3792 comm=syz.3.83 [ 52.812805][ T28] audit: type=1400 audit(1772582392.487:208): avc: denied { bind } for pid=3800 comm="syz.4.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.911404][ T3777] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.018043][ T28] audit: type=1400 audit(1772582392.647:209): avc: denied { write } for pid=3800 comm="syz.4.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 53.297959][ T28] audit: type=1400 audit(1772582392.987:210): avc: denied { mount } for pid=3814 comm="syz.1.90" name="/" dev="configfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 53.359685][ T3815] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.483869][ T28] audit: type=1400 audit(1772582393.177:211): avc: denied { cmd } for pid=3820 comm="syz.2.92" path="socket:[7309]" dev="sockfs" ino=7309 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 53.486655][ T3815] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.669619][ T3815] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.762566][ T28] audit: type=1400 audit(1772582393.457:212): avc: denied { create } for pid=3822 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 53.804263][ T3810] Set syz1 is full, maxelem 65536 reached [ 53.819175][ T28] audit: type=1400 audit(1772582393.457:213): avc: denied { bpf } for pid=3822 comm="syz.4.93" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.861079][ T3815] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.887758][ T28] audit: type=1400 audit(1772582393.457:214): avc: denied { perfmon } for pid=3822 comm="syz.4.93" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.910991][ T28] audit: type=1400 audit(1772582393.597:215): avc: denied { write } for pid=3807 comm="syz.3.87" name="mcfilter" dev="proc" ino=4026532912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 53.935109][ T28] audit: type=1400 audit(1772582393.607:216): avc: denied { create } for pid=3825 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 53.998640][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.030092][ T355] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.049416][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.092587][ T30] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.136998][ T3819] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.200440][ T3843] loop0: detected capacity change from 0 to 512 [ 54.233817][ T3843] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal [ 54.337633][ T3819] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.672594][ T3819] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.761039][ T3819] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.135337][ T3869] loop2: detected capacity change from 0 to 512 [ 55.183050][ T3869] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 55.191160][ T3869] EXT4-fs (loop2): orphan cleanup on readonly fs [ 55.203969][ T3869] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.108: Failed to acquire dquot type 1 [ 55.215761][ T3869] loop2: lost filesystem error report for type 5 error -117 [ 55.218558][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 55.228947][ T3869] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.108: corrupted inode contents [ 55.232309][ C1] EXT4-fs (loop2): initial error at time 1772582394: ext4_acquire_dquot:7001 [ 55.232351][ C1] EXT4-fs (loop2): last error at time 1772582394: ext4_acquire_dquot:7001 [ 55.244905][ T3869] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.253765][ C1] [ 55.304865][ T3869] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #16: comm syz.2.108: mark_inode_dirty error [ 55.317529][ T3869] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.318623][ T3869] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.108: corrupted inode contents [ 55.340226][ T3869] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.340972][ T3869] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.108: mark_inode_dirty error [ 55.362771][ T3869] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.363083][ T3869] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.108: corrupted inode contents [ 55.386073][ T3869] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.386257][ T3869] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 55.406912][ T3869] loop2: lost filesystem error report for type 5 error -117 [ 55.407107][ T3869] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.108: corrupted inode contents [ 55.429909][ T3869] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.430101][ T3869] EXT4-fs error (device loop2): ext4_truncate:4587: inode #16: comm syz.2.108: mark_inode_dirty error [ 55.451457][ T3869] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.451700][ T3869] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 55.467261][ T3876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'. [ 55.472409][ T3869] loop2: lost filesystem error report for type 5 error -117 [ 55.481246][ T3869] EXT4-fs (loop2): 1 truncate cleaned up [ 55.495639][ T3869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 55.549599][ T3876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'. [ 55.607513][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 56.299176][ T3879] loop2: detected capacity change from 0 to 1024 [ 56.368142][ T3879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.649632][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.936261][ T3905] loop2: detected capacity change from 0 to 512 [ 57.000322][ T3905] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.059976][ T3905] EXT4-fs (loop2): 1 truncate cleaned up [ 57.067178][ T3905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.524472][ T3909] loop3: detected capacity change from 0 to 2048 [ 57.877239][ T3909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.031369][ T3913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.120'. [ 58.060383][ T3913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.072163][ T3909] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.119: bg 0: block 234: padding at end of block bitmap is not set [ 58.147415][ T3909] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 306 with error 28 [ 58.200193][ T3913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.218730][ T3909] EXT4-fs (loop3): This should not happen!! Data will be lost [ 58.218730][ T3909] [ 58.538676][ T3909] EXT4-fs (loop3): Total free blocks count 0 [ 58.572591][ T3909] EXT4-fs (loop3): Free/Dirty block details [ 58.589458][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.029597][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 59.029671][ T28] audit: type=1400 audit(1772582398.327:233): avc: denied { bind } for pid=3917 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.071649][ T3909] EXT4-fs (loop3): free_blocks=0 [ 59.079917][ T3909] EXT4-fs (loop3): dirty_blocks=320 [ 59.085573][ T3909] EXT4-fs (loop3): Block reservation details [ 59.091708][ T3909] EXT4-fs (loop3): i_reserved_data_blocks=20 [ 59.125528][ T28] audit: type=1400 audit(1772582398.807:234): avc: denied { read write } for pid=3921 comm="syz.2.123" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 59.195693][ T28] audit: type=1400 audit(1772582398.807:235): avc: denied { open } for pid=3921 comm="syz.2.123" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 59.259876][ T28] audit: type=1400 audit(1772582398.877:236): avc: denied { mount } for pid=3925 comm="syz.2.125" name="/" dev="autofs" ino=6625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 59.451139][ T3908] syz.3.119 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 59.466069][ T3908] CPU: 0 UID: 0 PID: 3908 Comm: syz.3.119 Not tainted syzkaller #0 PREEMPT(full) [ 59.466096][ T3908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 59.466162][ T3908] Call Trace: [ 59.466169][ T3908] [ 59.466177][ T3908] __dump_stack+0x1d/0x30 [ 59.466203][ T3908] dump_stack_lvl+0x95/0xd0 [ 59.466224][ T3908] dump_stack+0x15/0x1b [ 59.466338][ T3908] dump_header+0x80/0x240 [ 59.466359][ T3908] oom_kill_process+0x295/0x350 [ 59.466380][ T3908] out_of_memory+0x97d/0xb80 [ 59.466465][ T3908] try_charge_memcg+0x62e/0xa10 [ 59.466545][ T3908] obj_cgroup_charge_pages+0x23/0xc0 [ 59.466571][ T3908] __memcg_kmem_charge_page+0x9e/0x170 [ 59.466596][ T3908] __alloc_frozen_pages_noprof+0x18a/0x360 [ 59.466684][ T3908] alloc_pages_mpol+0xb3/0x260 [ 59.466710][ T3908] alloc_pages_noprof+0x8f/0x130 [ 59.466794][ T3908] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 59.466883][ T3908] __kvmalloc_node_noprof+0x3d4/0x650 [ 59.466906][ T3908] ? ip_set_alloc+0x24/0x30 [ 59.466998][ T3908] ? ip_set_alloc+0x24/0x30 [ 59.467019][ T3908] ? __kmalloc_cache_noprof+0x18a/0x410 [ 59.467078][ T3908] ip_set_alloc+0x24/0x30 [ 59.467099][ T3908] hash_netiface_create+0x282/0x740 [ 59.467123][ T3908] ? __pfx_hash_netiface_create+0x10/0x10 [ 59.467146][ T3908] ip_set_create+0x3cf/0x970 [ 59.467308][ T3908] ? __nla_parse+0x40/0x60 [ 59.467331][ T3908] nfnetlink_rcv_msg+0x509/0x5d0 [ 59.467366][ T3908] netlink_rcv_skb+0x123/0x220 [ 59.467453][ T3908] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 59.467523][ T3908] nfnetlink_rcv+0x167/0x1720 [ 59.467544][ T3908] ? __kfree_skb+0x109/0x150 [ 59.467566][ T3908] ? nlmon_xmit+0x4f/0x60 [ 59.467603][ T3908] ? consume_skb+0x4b/0x160 [ 59.467696][ T3908] ? nlmon_xmit+0x4f/0x60 [ 59.467761][ T3908] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 59.467824][ T3908] ? __dev_queue_xmit+0x136c/0x1f20 [ 59.467914][ T3908] ? __dev_queue_xmit+0x148/0x1f20 [ 59.467939][ T3908] ? ref_tracker_free+0x37d/0x3e0 [ 59.467969][ T3908] ? __netlink_deliver_tap+0x4dc/0x500 [ 59.468061][ T3908] netlink_unicast+0x5c0/0x690 [ 59.468099][ T3908] netlink_sendmsg+0x5c8/0x6f0 [ 59.468126][ T3908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.468151][ T3908] ____sys_sendmsg+0x5af/0x600 [ 59.468266][ T3908] ___sys_sendmsg+0x195/0x1e0 [ 59.468372][ T3908] __x64_sys_sendmsg+0xd4/0x160 [ 59.468401][ T3908] x64_sys_call+0x194c/0x3020 [ 59.468432][ T3908] do_syscall_64+0x12c/0x370 [ 59.468452][ T3908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.468547][ T3908] RIP: 0033:0x7f4bce4bc799 [ 59.468616][ T3908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.468633][ T3908] RSP: 002b:00007f4bccf17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.468653][ T3908] RAX: ffffffffffffffda RBX: 00007f4bce735fa0 RCX: 00007f4bce4bc799 [ 59.468666][ T3908] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 59.468678][ T3908] RBP: 00007f4bce552bd9 R08: 0000000000000000 R09: 0000000000000000 [ 59.468690][ T3908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.468752][ T3908] R13: 00007f4bce736038 R14: 00007f4bce735fa0 R15: 00007ffc4c652f78 [ 59.468769][ T3908] [ 59.903845][ T3908] memory: usage 115788kB, limit 307200kB, failcnt 397 [ 59.913561][ T3908] memory+swap: usage 117424kB, limit 9007199254740988kB, failcnt 0 [ 59.922676][ T3908] kmem: usage 115068kB, limit 9007199254740988kB, failcnt 0 [ 59.937079][ T3908] Memory cgroup stats for /syz3: [ 59.937380][ T3908] cache 671744 [ 59.948840][ T3908] rss 20480 [ 59.952110][ T3908] shmem 0 [ 59.955638][ T3908] mapped_file 61440 [ 59.964717][ T3908] dirty 24576 [ 59.974371][ T3908] writeback 0 [ 59.978051][ T3908] workingset_refault_anon 108 [ 60.070876][ T3908] workingset_refault_file 972 [ 60.076383][ T3908] swap 1146880 [ 60.080204][ T3908] swapcached 2400256 [ 60.084501][ T3908] pgpgin 18294 [ 60.088306][ T3908] pgpgout 18105 [ 60.092254][ T3908] pgfault 20355 [ 60.096122][ T3908] pgmajfault 75 [ 60.100101][ T3908] inactive_anon 90112 [ 60.104150][ T3908] active_anon 8192 [ 60.107949][ T3908] inactive_file 61440 [ 60.115346][ T3908] active_file 610304 [ 60.119630][ T3908] unevictable 0 [ 60.123154][ T3908] hierarchical_memory_limit 314572800 [ 60.129317][ T3908] hierarchical_memsw_limit 9223372036854771712 [ 60.135811][ T3908] total_cache 671744 [ 60.140061][ T3908] total_rss 20480 [ 60.143788][ T3908] total_shmem 0 [ 60.147381][ T3908] total_mapped_file 61440 [ 60.152134][ T3908] total_dirty 24576 [ 60.156107][ T3908] total_writeback 0 [ 60.160142][ T3908] total_workingset_refault_anon 108 [ 60.165494][ T3908] total_workingset_refault_file 972 [ 60.171088][ T3908] total_swap 1146880 [ 60.175081][ T3908] total_swapcached 2400256 [ 60.179942][ T3908] total_pgpgin 18321 [ 60.183986][ T3908] total_pgpgout 18132 [ 60.187973][ T3908] total_pgfault 20411 [ 60.192157][ T3908] total_pgmajfault 75 [ 60.196324][ T3908] total_inactive_anon 90112 [ 60.201096][ T3908] total_active_anon 8192 [ 60.205471][ T3908] total_inactive_file 61440 [ 60.243509][ T3908] total_active_file 610304 [ 60.248176][ T3908] total_unevictable 0 [ 60.262044][ T3908] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.119,pid=3907,uid=0 [ 60.305582][ T3908] Memory cgroup out of memory: Killed process 3908 (syz.3.119) total-vm:96340kB, anon-rss:1336kB, file-rss:22484kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 60.398935][ T3908] syz.3.119 (3908) used greatest stack depth: 5880 bytes left [ 60.419813][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.828114][ T3948] ipvlan2: entered allmulticast mode [ 60.838114][ T3948] dummy0: entered allmulticast mode [ 62.179775][ T3951] loop2: detected capacity change from 0 to 512 [ 62.238572][ T28] audit: type=1400 audit(1772582401.927:237): avc: denied { create } for pid=3952 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.261490][ T3951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 62.318664][ T3951] ext4 filesystem being mounted at /27/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.360802][ T28] audit: type=1400 audit(1772582402.057:238): avc: denied { ioctl } for pid=3946 comm="syz.2.131" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.361094][ T3951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.414895][ T3961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.134'. [ 62.418785][ T3951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.428668][ T28] audit: type=1400 audit(1772582402.107:239): avc: denied { ioctl } for pid=3960 comm="syz.4.134" path="socket:[7649]" dev="sockfs" ino=7649 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.474552][ T3964] loop4: detected capacity change from 0 to 1024 [ 62.491561][ T3965] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 62.538718][ T3964] EXT4-fs: Ignoring removed orlov option [ 62.609404][ T3964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.669553][ T3958] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 62.680421][ T3958] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8) [ 62.687064][ T3958] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 62.695183][ T3958] vhci_hcd vhci_hcd.0: Device attached [ 62.729843][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.799444][ T28] audit: type=1400 audit(1772582402.497:240): avc: denied { create } for pid=3952 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 62.848590][ T28] audit: type=1400 audit(1772582402.517:241): avc: denied { module_request } for pid=3952 comm="syz.3.132" kmod="net-pf-16-proto-21" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 62.873494][ T3977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.139'. [ 62.888594][ T1507] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 62.988579][ T1507] usb 7-3: new full-speed USB device number 2 using vhci_hcd [ 63.008412][ T28] audit: type=1400 audit(1772582402.697:242): avc: denied { listen } for pid=3952 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 63.201377][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 63.256751][ T3971] vhci_hcd: connection reset by peer [ 63.266975][ T3986] netlink: 'syz.4.137': attribute type 1 has an invalid length. [ 63.376124][ T3986] loop4: detected capacity change from 0 to 1024 [ 63.441927][ T3986] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 63.454087][ T3986] System zones: 0-1, 3-36 [ 63.489348][ T3986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.553966][ T36] vhci_hcd vhci_hcd.3: stop threads [ 63.570097][ T36] vhci_hcd vhci_hcd.3: release socket [ 63.607017][ T3989] loop2: detected capacity change from 0 to 1024 [ 63.618309][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 63.988956][ T3981] loop0: detected capacity change from 0 to 512 [ 64.123506][ T3981] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 64.409818][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 64.409836][ T28] audit: type=1400 audit(1772582404.107:244): avc: denied { create } for pid=3994 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 64.464970][ T4002] loop1: detected capacity change from 0 to 512 [ 64.511966][ T4002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.587586][ T28] audit: type=1400 audit(1772582404.147:245): avc: denied { write } for pid=3994 comm="syz.3.143" path="socket:[6798]" dev="sockfs" ino=6798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 64.618948][ T4002] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.699589][ T4004] syzkaller0: entered promiscuous mode [ 64.721032][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.721293][ T4004] syzkaller0: entered allmulticast mode [ 64.741667][ T28] audit: type=1400 audit(1772582404.437:246): avc: denied { relabelfrom } for pid=4003 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 64.767248][ T28] audit: type=1400 audit(1772582404.437:247): avc: denied { relabelto } for pid=4003 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 64.804541][ T4002] SELinux: failed to load policy [ 64.864921][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.888046][ T28] audit: type=1400 audit(1772582404.487:248): avc: denied { load_policy } for pid=4000 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 65.199649][ T28] audit: type=1400 audit(1772582404.867:249): avc: denied { setopt } for pid=4040 comm="syz.0.152" lport=37685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.630064][ T28] audit: type=1400 audit(1772582404.977:250): avc: denied { read } for pid=4040 comm="syz.0.152" path="socket:[6852]" dev="sockfs" ino=6852 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.687426][ T28] audit: type=1400 audit(1772582405.377:251): avc: denied { watch watch_reads } for pid=4047 comm="syz.4.154" path="/33" dev="tmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.085980][ T4054] loop3: detected capacity change from 0 to 1024 [ 66.151318][ T4054] EXT4-fs: Ignoring removed nobh option [ 66.229415][ T4054] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.282168][ T4054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.383325][ T28] audit: type=1400 audit(1772582406.067:252): avc: denied { link } for pid=4053 comm="syz.3.156" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.465718][ T28] audit: type=1400 audit(1772582406.067:253): avc: denied { execute } for pid=4053 comm="syz.3.156" path="/23/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.094564][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.894330][ T4074] Set syz1 is full, maxelem 65536 reached [ 68.038656][ T1507] usb 7-3: enqueue for inactive port 2 [ 68.066565][ T1507] usb 7-3: enqueue for inactive port 2 [ 68.158631][ T1507] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 68.267972][ T3318] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 68.382801][ T3318] CPU: 0 UID: 0 PID: 3318 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 68.382868][ T3318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 68.382881][ T3318] Call Trace: [ 68.382888][ T3318] [ 68.382896][ T3318] __dump_stack+0x1d/0x30 [ 68.382921][ T3318] dump_stack_lvl+0x95/0xd0 [ 68.382944][ T3318] dump_stack+0x15/0x1b [ 68.383266][ T3318] dump_header+0x80/0x240 [ 68.383295][ T3318] oom_kill_process+0x295/0x350 [ 68.383331][ T3318] out_of_memory+0x97d/0xb80 [ 68.383353][ T3318] try_charge_memcg+0x62e/0xa10 [ 68.383419][ T3318] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 68.383527][ T3318] __swap_cache_prepare_and_add+0x386/0x530 [ 68.383566][ T3318] swap_cache_alloc_folio+0xa2/0x120 [ 68.383599][ T3318] swap_cluster_readahead+0x26e/0x3d0 [ 68.383694][ T3318] swapin_readahead+0xde/0x840 [ 68.383724][ T3318] ? __rcu_read_unlock+0x4e/0x70 [ 68.383748][ T3318] ? __perf_event_task_sched_in+0xa65/0xad0 [ 68.383775][ T3318] ? __list_add_valid_or_report+0x38/0xe0 [ 68.383890][ T3318] ? __rcu_read_unlock+0x4e/0x70 [ 68.383914][ T3318] ? swap_cache_get_folio+0x26f/0x280 [ 68.383944][ T3318] do_swap_page+0x309/0x2210 [ 68.384031][ T3318] ? __schedule+0x93c/0xd40 [ 68.384059][ T3318] ? __rcu_read_lock+0x36/0x50 [ 68.384082][ T3318] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 68.384111][ T3318] handle_mm_fault+0xb40/0x3020 [ 68.384185][ T3318] ? vma_start_read+0x1c7/0x2c0 [ 68.384227][ T3318] do_user_addr_fault+0x62f/0x1050 [ 68.384258][ T3318] ? trace_page_fault_user+0x1f/0xe0 [ 68.384374][ T3318] exc_page_fault+0x62/0xa0 [ 68.384404][ T3318] asm_exc_page_fault+0x26/0x30 [ 68.384428][ T3318] RIP: 0033:0x7f4bce477917 [ 68.384447][ T3318] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 68.384468][ T3318] RSP: 002b:00007ffc4c653270 EFLAGS: 00010202 [ 68.384514][ T3318] RAX: 0000000000000000 RBX: 0000555585159500 RCX: 00007f4bce477917 [ 68.384527][ T3318] RDX: 00007ffc4c6532b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.384540][ T3318] RBP: 00007ffc4c65331c R08: 0000000000000000 R09: 0000000000000000 [ 68.384555][ T3318] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 68.384572][ T3318] R13: 00000000000927c0 R14: 0000000000010809 R15: 00007ffc4c653370 [ 68.384613][ T3318] [ 68.666616][ T4094] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 68.700039][ T4094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.168'. [ 68.712626][ T3318] memory: usage 80740kB, limit 307200kB, failcnt 688 [ 68.720319][ T3318] memory+swap: usage 81036kB, limit 9007199254740988kB, failcnt 0 [ 68.728795][ T3318] kmem: usage 80684kB, limit 9007199254740988kB, failcnt 0 [ 68.737455][ T3318] Memory cgroup stats for /syz3: [ 68.737891][ T3318] cache 0 [ 68.747975][ T3318] rss 24576 [ 68.752162][ T3318] shmem 0 [ 68.755596][ T3318] mapped_file 0 [ 68.767203][ T4094] bond1: entered promiscuous mode [ 68.789422][ T4094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.799514][ T3318] dirty 0 [ 68.802648][ T3318] writeback 0 [ 68.805939][ T3318] workingset_refault_anon 320 [ 68.858419][ T3318] workingset_refault_file 974 [ 68.861954][ T4098] bridge1: entered promiscuous mode [ 68.863396][ T3318] swap 303104 [ 68.877351][ T3318] swapcached 5451776 [ 68.882744][ T3318] pgpgin 27687 [ 68.889966][ T4077] loop3: detected capacity change from 0 to 512 [ 68.890272][ T4098] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 68.934887][ T3318] pgpgout 27681 [ 68.935461][ T4100] bond_slave_0: entered promiscuous mode [ 68.938918][ T3318] pgfault 28253 [ 68.944488][ T4100] bond_slave_1: entered promiscuous mode [ 68.949032][ T3318] pgmajfault 151 [ 68.959388][ T3318] inactive_anon 24576 [ 68.965543][ T3318] active_anon 0 [ 68.969770][ T3318] inactive_file 0 [ 68.973607][ T3318] active_file 0 [ 68.977504][ T3318] unevictable 0 [ 68.979484][ T4105] netlink: 14 bytes leftover after parsing attributes in process `syz.2.169'. [ 68.981970][ T3318] hierarchical_memory_limit 314572800 [ 68.997785][ T3318] hierarchical_memsw_limit 9223372036854771712 [ 69.004105][ T4100] vlan2: entered promiscuous mode [ 69.004362][ T3318] total_cache 0 [ 69.011935][ T4077] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.014540][ T3318] total_rss 24576 [ 69.014601][ T3318] total_shmem 0 [ 69.014610][ T3318] total_mapped_file 0 [ 69.014617][ T3318] total_dirty 0 [ 69.014625][ T3318] total_writeback 0 [ 69.014634][ T3318] total_workingset_refault_anon 320 [ 69.014643][ T3318] total_workingset_refault_file 974 [ 69.014653][ T3318] total_swap 303104 [ 69.014662][ T3318] total_swapcached 5451776 [ 69.014726][ T3318] total_pgpgin 27714 [ 69.014734][ T3318] total_pgpgout 27708 [ 69.028677][ T4100] bond0: entered promiscuous mode [ 69.039497][ T3318] total_pgfault 28309 [ 69.039591][ T3318] total_pgmajfault 151 [ 69.054961][ T4100] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 69.059532][ T3318] total_inactive_anon 24576 [ 69.100810][ T3318] total_active_anon 0 [ 69.103647][ T4102] vlan2: entered allmulticast mode [ 69.105136][ T3318] total_inactive_file 0 [ 69.110674][ T4102] bond0: entered allmulticast mode [ 69.115852][ T3318] total_active_file 0 [ 69.124921][ T4102] bond_slave_0: entered allmulticast mode [ 69.127696][ T3318] total_unevictable 0 [ 69.132201][ T4102] bond_slave_1: entered allmulticast mode [ 69.136672][ T3318] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.161,pid=4075,uid=0 [ 69.152568][ T4102] bridge_slave_1: entered allmulticast mode [ 69.158990][ T3318] Memory cgroup out of memory: Killed process 4075 (syz.3.161) total-vm:96208kB, anon-rss:1260kB, file-rss:22212kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 69.257522][ T4077] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.161: invalid indirect mapped block 4294967295 (level 1) [ 69.285614][ T4077] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 69.292390][ T4077] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.161: invalid indirect mapped block 4294967295 (level 1) [ 69.303379][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 69.303520][ C1] EXT4-fs (loop3): initial error at time 1772582408: ext4_free_branches:1023: inode 11 [ 69.303938][ C1] EXT4-fs (loop3): last error at time 1772582408: ext4_free_branches:1023: inode 11 [ 69.352755][ T4077] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 69.355164][ T4105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.362792][ T4077] EXT4-fs (loop3): 2 truncates cleaned up [ 69.382281][ T4105] bond_slave_0: left allmulticast mode [ 69.393513][ T4105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.402425][ T4105] bond_slave_1: left allmulticast mode [ 69.402483][ T4077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.423608][ T4105] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 69.435276][ T4105] bridge_slave_1: left allmulticast mode [ 69.444376][ T4105] bond0 (unregistering): Released all slaves [ 69.460783][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.600569][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 69.600651][ T28] audit: type=1400 audit(1772582409.297:265): avc: denied { mac_admin } for pid=4113 comm="syz.3.173" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 69.600945][ T4114] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 69.630500][ T4109] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.676630][ T28] audit: type=1400 audit(1772582409.347:266): avc: denied { relabelto } for pid=4113 comm="syz.3.173" name="25" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 69.714308][ T28] audit: type=1400 audit(1772582409.367:267): avc: denied { associate } for pid=4113 comm="syz.3.173" name="25" dev="tmpfs" ino=152 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 69.747540][ T28] audit: type=1400 audit(1772582409.377:268): avc: denied { write } for pid=4113 comm="syz.3.173" name="25" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 69.783163][ T28] audit: type=1400 audit(1772582409.377:269): avc: denied { add_name } for pid=4113 comm="syz.3.173" name="cpuacct.usage_all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 69.812802][ T28] audit: type=1400 audit(1772582409.377:270): avc: denied { associate } for pid=4113 comm="syz.3.173" name="cpuacct.usage_all" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.841355][ T28] audit: type=1400 audit(1772582409.397:271): avc: denied { mounton } for pid=4115 comm="syz.1.174" path="/33/file0" dev="tmpfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.876716][ T28] audit: type=1400 audit(1772582409.407:272): avc: denied { wake_alarm } for pid=4118 comm="syz.2.175" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 69.905842][ T28] audit: type=1400 audit(1772582409.507:273): avc: denied { remove_name } for pid=3318 comm="syz-executor" name="cpuacct.usage_all" dev="tmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 69.973331][ T4128] loop2: detected capacity change from 0 to 512 [ 69.975181][ T4125] vlan2: entered promiscuous mode [ 70.002883][ T28] audit: type=1400 audit(1772582409.507:274): avc: denied { unlink } for pid=3318 comm="syz-executor" name="cpuacct.usage_all" dev="tmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 70.028776][ T4128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.032163][ T4125] vlan2: entered allmulticast mode [ 70.061788][ T4125] hsr_slave_1: entered allmulticast mode [ 70.063195][ T4128] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.338686][ T4132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.177'. [ 70.358357][ T4109] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.605355][ T4109] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.696543][ T4109] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.774845][ T50] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.973576][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.044815][ T50] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.075828][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.148972][ T30] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.522166][ T4147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 72.326181][ T4160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 72.435700][ T4160] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.547762][ T4162] tipc: Enabled bearer , priority 0 [ 72.557202][ T4162] syzkaller0: entered promiscuous mode [ 72.683606][ T4162] syzkaller0: entered allmulticast mode [ 72.771395][ T4165] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 72.881396][ T4162] tipc: Resetting bearer [ 73.127541][ T4161] tipc: Resetting bearer [ 73.157553][ T4161] tipc: Disabling bearer [ 74.152465][ T4182] loop0: detected capacity change from 0 to 256 [ 74.181489][ T4179] xt_CT: No such helper "snmp_trap" [ 74.758688][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 74.758708][ T28] audit: type=1400 audit(1772582414.397:285): avc: denied { read write } for pid=4181 comm="syz.0.191" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 74.915571][ T28] audit: type=1400 audit(1772582414.407:286): avc: denied { open } for pid=4181 comm="syz.0.191" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.003523][ T28] audit: type=1400 audit(1772582414.427:287): avc: denied { ioctl } for pid=4181 comm="syz.0.191" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.190458][ T4194] loop0: detected capacity change from 0 to 512 [ 76.722017][ T4206] loop4: detected capacity change from 0 to 128 [ 76.746124][ T4206] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.814581][ T4206] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.311789][ T28] audit: type=1400 audit(1772582417.007:288): avc: denied { ioctl } for pid=4212 comm="syz.0.200" path="pid:[4026532376]" dev="nsfs" ino=4026532376 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.367256][ T28] audit: type=1400 audit(1772582417.037:289): avc: denied { read } for pid=4212 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.531063][ T28] audit: type=1400 audit(1772582417.197:290): avc: denied { write } for pid=4217 comm="syz.3.201" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 77.675011][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.727273][ T4223] loop4: detected capacity change from 0 to 256 [ 78.031291][ T4223] netlink: 16 bytes leftover after parsing attributes in process `syz.4.203'. [ 78.124585][ T28] audit: type=1400 audit(1772582417.807:291): avc: denied { accept } for pid=4234 comm="syz.4.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.192003][ T28] audit: type=1400 audit(1772582417.807:292): avc: denied { shutdown } for pid=4234 comm="syz.4.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.265917][ T28] audit: type=1400 audit(1772582417.837:293): avc: denied { getopt } for pid=4232 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.285856][ T28] audit: type=1400 audit(1772582417.877:294): avc: denied { create } for pid=4232 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.688624][ T3399] IPVS: starting estimator thread 0... [ 78.717276][ T4254] loop3: detected capacity change from 0 to 256 [ 78.752484][ T4254] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 78.788580][ T4252] IPVS: using max 2880 ests per chain, 144000 per kthread [ 78.811668][ T4258] loop4: detected capacity change from 0 to 1024 [ 79.000567][ T4258] EXT4-fs: Ignoring removed oldalloc option [ 79.008190][ T4258] EXT4-fs: Ignoring removed bh option [ 79.031837][ T4258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.707571][ T4270] syz.1.220 uses obsolete (PF_INET,SOCK_PACKET) [ 79.877744][ T4268] loop2: detected capacity change from 0 to 512 [ 79.931011][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.996031][ T4275] syzkaller0: entered promiscuous mode [ 80.016381][ T4268] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 80.029755][ T4275] syzkaller0: entered allmulticast mode [ 80.061261][ T4275] 0: reclassify loop, rule prio 0, protocol 800 [ 80.241709][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 80.241727][ T28] audit: type=1400 audit(1772582419.937:297): avc: denied { sqpoll } for pid=4269 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 80.272329][ T30] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 80.401564][ T4268] EXT4-fs (loop2): 1 truncate cleaned up [ 80.463292][ T4268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.053302][ T4289] syzkaller0: entered promiscuous mode [ 81.068751][ T4289] syzkaller0: entered allmulticast mode [ 81.107755][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.286234][ T28] audit: type=1400 audit(1772582420.977:298): avc: denied { getopt } for pid=4295 comm="syz.0.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.005220][ T28] audit: type=1400 audit(1772582421.607:299): avc: denied { bind } for pid=4311 comm="syz.4.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 82.446961][ T4317] loop2: detected capacity change from 0 to 2048 [ 82.758382][ T4317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.932882][ T4323] netlink: 64 bytes leftover after parsing attributes in process `syz.1.236'. [ 83.026889][ T4317] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.047840][ T28] audit: type=1326 audit(1772582422.737:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.1.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fa88c799 code=0x7ffc0000 [ 83.159513][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.175864][ T4330] netlink: 44 bytes leftover after parsing attributes in process `syz.0.238'. [ 83.187705][ T28] audit: type=1326 audit(1772582422.737:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.1.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fa88c799 code=0x7ffc0000 [ 83.399525][ T4335] loop0: detected capacity change from 0 to 512 [ 83.409753][ T28] audit: type=1326 audit(1772582422.737:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.1.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fa5fa88c799 code=0x7ffc0000 [ 83.624476][ T4330] netlink: 43 bytes leftover after parsing attributes in process `syz.0.238'. [ 83.759664][ T4335] EXT4-fs: Ignoring removed nobh option [ 83.874221][ T4330] netlink: 'syz.0.238': attribute type 5 has an invalid length. [ 83.913443][ T28] audit: type=1326 audit(1772582422.737:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.1.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fa88c799 code=0x7ffc0000 [ 83.981427][ T4330] netlink: 43 bytes leftover after parsing attributes in process `syz.0.238'. [ 84.269943][ T4335] EXT4-fs (loop0): orphan cleanup on readonly fs [ 84.280077][ T4344] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 84.325552][ T4335] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.238: EA inode hash validation failed [ 84.351301][ T28] audit: type=1326 audit(1772582422.737:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.1.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5fa84cfce code=0x7ffc0000 [ 84.461337][ T4335] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 84.564624][ T4335] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.238: corrupted inode contents [ 84.586306][ T28] audit: type=1326 audit(1772582422.737:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.1.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fa88c799 code=0x7ffc0000 [ 84.673246][ T4335] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.673531][ T4335] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.238: mark_inode_dirty error [ 84.683106][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 84.683124][ C0] EXT4-fs (loop0): initial error at time 1772582424: ext4_do_update_inode:5569: inode 15 [ 84.683157][ C0] EXT4-fs (loop0): last error at time 1772582424: ext4_do_update_inode:5569: inode 15 [ 84.801133][ T28] audit: type=1326 audit(1772582422.737:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.1.237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5fa88c799 code=0x7ffc0000 [ 84.996463][ T4335] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.996697][ T4335] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.238: corrupted inode contents [ 85.088695][ T4335] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.088863][ T4335] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.238: mark_inode_dirty error [ 85.189676][ T4356] loop2: detected capacity change from 0 to 512 [ 85.226306][ T4356] EXT4-fs (loop2): orphan cleanup on readonly fs [ 85.234876][ T4335] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.241858][ T4335] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3002: inode #15: comm syz.0.238: mark inode dirty (error -117) [ 85.274468][ T4356] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #11: block 1: comm syz.2.246: lblock 0 mapped to illegal pblock 1 (length 1) [ 85.320726][ T4356] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 85.321118][ T4356] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.246: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 85.330405][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 85.330436][ C0] EXT4-fs (loop2): initial error at time 1772582425: ext4_map_blocks:776: inode 11: block 1 [ 85.330480][ C0] EXT4-fs (loop2): last error at time 1772582425: ext4_map_blocks:776: inode 11: block 1 [ 85.357047][ T4335] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.388997][ T4335] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 85.422660][ T4362] tipc: Started in network mode [ 85.429274][ T4356] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 85.429503][ T4356] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.2.246: ea_inode dec ref err=-117 [ 85.458682][ T4362] tipc: Node identity 4654d6c67fee, cluster identity 4711 [ 85.488695][ T4362] tipc: Enabled bearer , priority 0 [ 85.509588][ T4363] syzkaller0: entered promiscuous mode [ 85.515733][ T4356] EXT4-fs (loop2): 1 orphan inode deleted [ 85.525607][ T4335] EXT4-fs (loop0): 1 orphan inode deleted [ 85.533732][ T4363] syzkaller0: entered allmulticast mode [ 85.539864][ T4356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 85.546008][ T4335] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 85.583890][ T4362] tipc: Resetting bearer [ 85.608389][ T4361] tipc: Resetting bearer [ 85.616000][ T4361] tipc: Disabling bearer [ 85.701704][ T4367] ALSA: seq fatal error: cannot create timer (-22) [ 85.784753][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 85.784770][ T28] audit: type=1400 audit(1772582425.477:333): avc: denied { name_bind } for pid=4368 comm="syz.3.250" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 85.862775][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.872540][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.920501][ T4374] syzkaller0: entered promiscuous mode [ 85.930212][ T4374] syzkaller0: entered allmulticast mode [ 86.112188][ T4376] loop2: detected capacity change from 0 to 512 [ 86.142059][ T4376] EXT4-fs: Ignoring removed nobh option [ 86.175610][ T4376] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.225425][ T4376] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 86.255334][ T4376] EXT4-fs (loop2): 1 truncate cleaned up [ 86.265298][ T4376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.405481][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.505431][ T4388] loop4: detected capacity change from 0 to 128 [ 86.924521][ T4390] loop0: detected capacity change from 0 to 2048 [ 86.939865][ T4390] EXT4-fs: Ignoring removed i_version option [ 87.001774][ T4390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.323052][ T4399] tipc: Started in network mode [ 87.328056][ T4399] tipc: Node identity 2a94ac66bb9, cluster identity 4711 [ 87.340956][ T4399] tipc: Enabled bearer , priority 0 [ 87.349014][ T149] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 87.349701][ T4399] syzkaller0: entered promiscuous mode [ 87.378641][ T149] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 450 with error 28 [ 87.403106][ T4399] syzkaller0: entered allmulticast mode [ 87.410914][ T149] EXT4-fs (loop0): This should not happen!! Data will be lost [ 87.410914][ T149] [ 87.416354][ T4403] syzkaller0: entered promiscuous mode [ 87.438817][ T149] EXT4-fs (loop0): Total free blocks count 0 [ 87.438893][ T4403] syzkaller0: entered allmulticast mode [ 87.451724][ T149] EXT4-fs (loop0): Free/Dirty block details [ 87.488639][ T149] EXT4-fs (loop0): free_blocks=2415919504 [ 87.495933][ T149] EXT4-fs (loop0): dirty_blocks=928 [ 87.517549][ T149] EXT4-fs (loop0): Block reservation details [ 87.517697][ T4399] tipc: Resetting bearer [ 87.525112][ T4392] loop2: detected capacity change from 0 to 1024 [ 87.548580][ T4399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.548948][ T149] EXT4-fs (loop0): i_reserved_data_blocks=29 [ 87.593742][ T4392] EXT4-fs: inline encryption not supported [ 87.602848][ T149] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 450 with error 28 [ 87.621796][ T4392] EXT4-fs: Ignoring removed bh option [ 87.678603][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.687142][ T4398] tipc: Resetting bearer [ 87.764050][ T4392] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 73 [ 87.806350][ T4398] tipc: Disabling bearer [ 88.298030][ T4421] syzkaller0: entered promiscuous mode [ 88.358579][ T4421] syzkaller0: entered allmulticast mode [ 88.476312][ T4426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.268'. [ 88.486012][ T4426] netlink: 55 bytes leftover after parsing attributes in process `syz.2.268'. [ 88.506426][ T28] audit: type=1400 audit(1772582428.197:334): avc: denied { write } for pid=4425 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 88.561274][ T35] IPVS: starting estimator thread 0... [ 88.684469][ T4431] IPVS: using max 2832 ests per chain, 141600 per kthread [ 89.043927][ T4448] netlink: 80 bytes leftover after parsing attributes in process `syz.0.276'. [ 89.218583][ T28] audit: type=1400 audit(1772582428.907:335): avc: denied { setopt } for pid=4450 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 89.250181][ T28] audit: type=1400 audit(1772582428.917:336): avc: denied { read } for pid=4450 comm="syz.4.277" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 89.299031][ T28] audit: type=1400 audit(1772582428.937:337): avc: denied { open } for pid=4450 comm="syz.4.277" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 89.534204][ T4457] loop4: detected capacity change from 0 to 256 [ 89.577621][ T4457] FAT-fs (loop4): Directory bread(block 64) failed [ 89.585093][ T4457] FAT-fs (loop4): Directory bread(block 65) failed [ 89.620167][ T4457] FAT-fs (loop4): Directory bread(block 66) failed [ 89.626913][ T4457] FAT-fs (loop4): Directory bread(block 67) failed [ 89.640996][ T4457] FAT-fs (loop4): Directory bread(block 68) failed [ 89.656663][ T4459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'. [ 89.684604][ T4457] FAT-fs (loop4): Directory bread(block 69) failed [ 89.691774][ T4457] FAT-fs (loop4): Directory bread(block 70) failed [ 89.698715][ T4457] FAT-fs (loop4): Directory bread(block 71) failed [ 89.700339][ T4461] loop3: detected capacity change from 0 to 164 [ 89.705315][ T4457] FAT-fs (loop4): Directory bread(block 72) failed [ 89.719159][ T4457] FAT-fs (loop4): Directory bread(block 73) failed [ 89.732048][ T4461] iso9660: Unknown parameter '01777777777777777777777' [ 89.802580][ T4463] loop2: detected capacity change from 0 to 512 [ 89.834425][ T4463] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 89.874799][ T4463] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.282: bg 0: block 393: padding at end of block bitmap is not set [ 89.912083][ T4463] loop2: lost filesystem error report for type 5 error -117 [ 89.912449][ T4463] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 89.919812][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 89.919831][ C1] EXT4-fs (loop2): initial error at time 1772582429: ext4_validate_block_bitmap:441 [ 89.919852][ C1] EXT4-fs (loop2): last error at time 1772582429: ext4_validate_block_bitmap:441 [ 90.009226][ T4463] loop2: lost filesystem error report for type 5 error -117 [ 90.013691][ T4463] EXT4-fs (loop2): 2 truncates cleaned up [ 90.037438][ T4463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.095454][ T4463] lo speed is unknown, defaulting to 1000 [ 90.119937][ T4463] lo speed is unknown, defaulting to 1000 [ 90.126136][ T4463] lo speed is unknown, defaulting to 1000 [ 90.137173][ T4470] loop4: detected capacity change from 0 to 1024 [ 90.163257][ T4470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.196103][ T28] audit: type=1400 audit(1772582429.887:338): avc: denied { add_name } for pid=4469 comm="syz.4.284" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.218113][ T4470] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.284: Allocating blocks 497-513 which overlap fs metadata [ 90.242054][ T4470] EXT4-fs (loop4): Remounting filesystem read-only [ 90.266979][ T4463] infiniband syz0: set down [ 90.272400][ T9] lo speed is unknown, defaulting to 1000 [ 90.278617][ T4463] infiniband syz0: added lo [ 90.278966][ T28] audit: type=1400 audit(1772582429.957:339): avc: denied { setopt } for pid=4469 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.348380][ T4463] RDS/IB: syz0: added [ 90.357965][ T4463] smc: adding ib device syz0 with port count 1 [ 90.367922][ T28] audit: type=1400 audit(1772582430.057:340): avc: denied { connect } for pid=4469 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.397852][ T4463] smc: ib device syz0 port 1 has no pnetid [ 90.439275][ T4469] EXT4-fs (loop4): pa ffff888107b8e4d0: logic 304, phys. 433, len 5 [ 90.448957][ T4463] lo speed is unknown, defaulting to 1000 [ 90.460525][ T3483] lo speed is unknown, defaulting to 1000 [ 90.467102][ T28] audit: type=1400 audit(1772582430.157:341): avc: denied { write } for pid=4476 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.575820][ T28] audit: type=1400 audit(1772582430.267:342): avc: denied { read } for pid=4476 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.606145][ T4463] lo speed is unknown, defaulting to 1000 [ 90.817221][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.917812][ T4492] loop0: detected capacity change from 0 to 1024 [ 90.963693][ T4492] EXT4-fs: Ignoring removed oldalloc option [ 91.056510][ T4492] ext2: Unknown parameter 'smackfsdef' [ 91.130266][ T4463] lo speed is unknown, defaulting to 1000 [ 91.281729][ T28] audit: type=1400 audit(1772582430.977:343): avc: denied { cpu } for pid=4495 comm="syz.0.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 91.285162][ T4496] syz.0.289 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 91.385955][ T4463] lo speed is unknown, defaulting to 1000 [ 91.581451][ T4463] lo speed is unknown, defaulting to 1000 [ 91.760821][ T4508] loop0: detected capacity change from 0 to 512 [ 91.830559][ T4508] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.896841][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.910272][ T4508] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 92.058288][ T4508] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 92.102082][ T4511] loop2: detected capacity change from 0 to 1024 [ 92.130737][ T4508] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 92.176023][ T4511] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 92.187123][ T4508] System zones: 0-2, 18-18, 34-35 [ 92.190935][ T4511] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 92.196005][ T4508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.399871][ T28] audit: type=1400 audit(1772582432.087:344): avc: denied { name_bind } for pid=4515 comm="syz.1.295" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 92.493719][ T4511] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.294: Failed to acquire dquot type 0 [ 92.772653][ T4511] loop2: lost filesystem error report for type 5 error -117 [ 92.773111][ T4511] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, [ 92.780562][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 92.780597][ C0] EXT4-fs (loop2): initial error at time 1772582432: ext4_acquire_dquot:7001 [ 92.780641][ C0] EXT4-fs (loop2): last error at time 1772582432: ext4_acquire_dquot:7001 [ 92.813010][ T4511] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 92.920785][ T4522] bridge_slave_0: left allmulticast mode [ 92.926576][ T4522] bridge_slave_0: left promiscuous mode [ 92.942066][ T4522] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.017194][ T4511] EXT4-fs (loop2): 1 truncate cleaned up [ 93.023965][ T4511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.044033][ T4511] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 93.053651][ T4511] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 93.066316][ T4522] bridge_slave_1: left allmulticast mode [ 93.073315][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.083339][ T4522] bridge_slave_1: left promiscuous mode [ 93.095436][ T4522] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.110991][ T4528] loop0: detected capacity change from 0 to 256 [ 93.119669][ T4511] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.294: Failed to acquire dquot type 0 [ 93.120116][ T4522] bond0: (slave bond_slave_0): Releasing backup interface [ 93.149683][ T4528] FAT-fs (loop0): Directory bread(block 64) failed [ 93.156625][ T4528] FAT-fs (loop0): Directory bread(block 65) failed [ 93.163995][ T4528] FAT-fs (loop0): Directory bread(block 66) failed [ 93.170978][ T4528] FAT-fs (loop0): Directory bread(block 67) failed [ 93.178166][ T4522] bond0: (slave bond_slave_1): Releasing backup interface [ 93.185785][ T4528] FAT-fs (loop0): Directory bread(block 68) failed [ 93.202955][ T4528] FAT-fs (loop0): Directory bread(block 69) failed [ 93.204114][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.210739][ T4528] FAT-fs (loop0): Directory bread(block 70) failed [ 93.241529][ T4522] team0: Port device team_slave_0 removed [ 93.253322][ T4528] FAT-fs (loop0): Directory bread(block 71) failed [ 93.308774][ T4528] FAT-fs (loop0): Directory bread(block 72) failed [ 93.315449][ T4528] FAT-fs (loop0): Directory bread(block 73) failed [ 93.420099][ T28] audit: type=1400 audit(1772582433.107:345): avc: denied { mounton } for pid=4527 comm="syz.0.298" path="/61/file0/file0" dev="loop0" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 93.445347][ T4522] team0: Port device team_slave_1 removed [ 93.710276][ T4522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.721181][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.787596][ T4532] loop2: detected capacity change from 0 to 512 [ 93.945001][ T4522] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 93.971040][ T4535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.298'. [ 93.980578][ T4535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.298'. [ 93.989780][ T4535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.298'. [ 93.998770][ T4535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.298'. [ 94.007856][ T4535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.298'. [ 94.017300][ T4535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.298'. [ 94.026598][ T4535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.298'. [ 94.035970][ T4535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.298'. [ 94.045178][ T4535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.298'. [ 94.054367][ T4535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.298'. [ 94.406935][ T28] audit: type=1326 audit(1772582434.097:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7f85c799 code=0x7ffc0000 [ 94.442119][ T28] audit: type=1326 audit(1772582434.097:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7f85c799 code=0x7ffc0000 [ 94.486187][ T28] audit: type=1326 audit(1772582434.127:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.0.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7f85c799 code=0x7ffc0000 [ 94.730097][ T4564] loop0: detected capacity change from 0 to 256 [ 95.225477][ T4581] loop0: detected capacity change from 0 to 1024 [ 95.277378][ T4581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.288031][ T4583] lo speed is unknown, defaulting to 1000 [ 95.872938][ T4591] lo speed is unknown, defaulting to 1000 [ 96.348196][ T4589] netlink: 'syz.3.318': attribute type 16 has an invalid length. [ 96.370855][ T4589] netlink: 'syz.3.318': attribute type 17 has an invalid length. [ 96.715033][ T4589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.823119][ T4608] loop3: detected capacity change from 0 to 1024 [ 96.831462][ T4608] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.851561][ T4608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.253966][ T3438] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.265317][ T3438] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.274988][ T3438] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.303252][ T3438] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.334295][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.697097][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.773479][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 97.773497][ T28] audit: type=1400 audit(1772582437.457:366): avc: denied { bind } for pid=4618 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.877942][ T28] audit: type=1400 audit(1772582437.457:367): avc: denied { name_bind } for pid=4618 comm="syz.1.328" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 97.913661][ T28] audit: type=1400 audit(1772582437.457:368): avc: denied { node_bind } for pid=4618 comm="syz.1.328" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 98.538189][ T4632] syzkaller0: entered promiscuous mode [ 98.554138][ T4632] syzkaller0: entered allmulticast mode [ 98.566218][ T4626] loop2: detected capacity change from 0 to 8192 [ 98.991056][ T4707] Cannot find add_set index 0 as target [ 99.112794][ T4714] loop4: detected capacity change from 0 to 256 [ 99.176901][ T4714] FAT-fs (loop4): Directory bread(block 64) failed [ 99.183777][ T4714] FAT-fs (loop4): Directory bread(block 65) failed [ 99.190541][ T4714] FAT-fs (loop4): Directory bread(block 66) failed [ 99.197166][ T4714] FAT-fs (loop4): Directory bread(block 67) failed [ 99.203805][ T4714] FAT-fs (loop4): Directory bread(block 68) failed [ 99.210527][ T4714] FAT-fs (loop4): Directory bread(block 69) failed [ 99.217315][ T4714] FAT-fs (loop4): Directory bread(block 70) failed [ 99.224143][ T4714] FAT-fs (loop4): Directory bread(block 71) failed [ 99.231481][ T4714] FAT-fs (loop4): Directory bread(block 72) failed [ 99.238604][ T4714] FAT-fs (loop4): Directory bread(block 73) failed [ 99.282177][ T4714] capability: warning: `syz.4.332' uses deprecated v2 capabilities in a way that may be insecure [ 100.143538][ T4720] loop1: detected capacity change from 0 to 512 [ 100.187753][ T4720] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 100.223728][ T4720] EXT4-fs (loop1): orphan cleanup on readonly fs [ 100.273165][ T4720] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 4294967295 out of range 0-7 [ 100.294509][ T4720] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 100.344135][ T4720] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.336: Failed to acquire dquot type 1 [ 100.398549][ T4720] loop1: lost filesystem error report for type 5 error -117 [ 100.400560][ T4720] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.336: corrupted inode contents [ 100.408666][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 100.408688][ C1] EXT4-fs (loop1): initial error at time 1772582440: ext4_acquire_dquot:7001 [ 100.408709][ C1] EXT4-fs (loop1): last error at time 1772582440: ext4_acquire_dquot:7001 [ 100.458730][ T4720] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 100.458993][ T4720] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #16: comm syz.1.336: mark_inode_dirty error [ 100.859658][ T4724] __nla_validate_parse: 12 callbacks suppressed [ 100.859739][ T4724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.338'. [ 100.917259][ T4720] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 100.917508][ T4720] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.336: corrupted inode contents [ 100.980643][ T4720] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 100.980899][ T4720] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.336: mark_inode_dirty error [ 101.038609][ T4720] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 101.038872][ T4720] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.336: corrupted inode contents [ 101.185312][ T4720] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 101.185560][ T4720] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 101.205593][ T4720] loop1: lost filesystem error report for type 5 error -117 [ 101.205952][ T4720] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.336: corrupted inode contents [ 101.399753][ T4720] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 101.400328][ T4720] EXT4-fs error (device loop1): ext4_truncate:4587: inode #16: comm syz.1.336: mark_inode_dirty error [ 101.636743][ T4720] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 101.660234][ T4720] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 101.725425][ T4720] loop1: lost filesystem error report for type 5 error -117 [ 101.735713][ T4720] EXT4-fs (loop1): 1 truncate cleaned up [ 101.768281][ T4720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 102.266110][ T4736] loop4: detected capacity change from 0 to 8192 [ 102.729689][ T4748] loop4: detected capacity change from 0 to 128 [ 102.851759][ T4748] netlink: 'syz.4.344': attribute type 1 has an invalid length. [ 102.967857][ T28] audit: type=1400 audit(1772582442.657:369): avc: denied { create } for pid=4747 comm="syz.4.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 103.068381][ T4748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.129122][ T4756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.345'. [ 103.164972][ T28] audit: type=1400 audit(1772582442.697:370): avc: denied { write } for pid=4747 comm="syz.4.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 103.269313][ T4752] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 103.753691][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 104.017026][ T4761] loop0: detected capacity change from 0 to 512 [ 104.057673][ T4761] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 104.084377][ T4761] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 104.111460][ T4761] EXT4-fs (loop0): 1 truncate cleaned up [ 104.127716][ T4761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.260688][ T28] audit: type=1400 audit(1772582443.947:371): avc: denied { write } for pid=4760 comm="syz.0.348" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.329146][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.654462][ T4776] syzkaller0: entered promiscuous mode [ 104.668706][ T4776] syzkaller0: entered allmulticast mode [ 104.897078][ T4784] netlink: 'syz.4.355': attribute type 7 has an invalid length. [ 105.433681][ T4788] loop1: detected capacity change from 0 to 4096 [ 105.477324][ T4788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.507128][ T4790] lo speed is unknown, defaulting to 1000 [ 105.643766][ T28] audit: type=1400 audit(1772582445.337:372): avc: denied { read write } for pid=4796 comm="syz.0.359" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 105.689619][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 105.717107][ T35] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 105.738636][ T28] audit: type=1400 audit(1772582445.357:373): avc: denied { open } for pid=4796 comm="syz.0.359" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 105.837553][ T4803] loop3: detected capacity change from 0 to 1024 [ 105.850203][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.873744][ T4803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.914292][ T28] audit: type=1400 audit(1772582445.607:374): avc: denied { setattr } for pid=4802 comm="syz.3.360" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.937496][ T28] audit: type=1400 audit(1772582445.627:375): avc: denied { read } for pid=4802 comm="syz.3.360" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 105.986954][ T28] audit: type=1400 audit(1772582445.627:376): avc: denied { open } for pid=4802 comm="syz.3.360" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 106.047293][ T28] audit: type=1400 audit(1772582445.737:377): avc: denied { write } for pid=4796 comm="syz.0.359" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 106.123714][ T28] audit: type=1400 audit(1772582445.817:378): avc: denied { remove_name } for pid=4802 comm="syz.3.360" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.953023][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.205074][ T1507] kernel read not supported for file bpf-prog (pid: 1507 comm: kworker/1:2) [ 107.972204][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 107.972232][ T28] audit: type=1326 audit(1772582447.667:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8b7f85c502 code=0x7ffc0000 [ 108.166460][ T4850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.370'. [ 108.224361][ T28] audit: type=1326 audit(1772582447.707:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8b7f85c502 code=0x7ffc0000 [ 108.321430][ T4850] bond3: option lacp_active: invalid value (5) [ 108.333207][ T28] audit: type=1326 audit(1772582447.707:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7f85c799 code=0x7ffc0000 [ 108.362090][ T4850] bond3 (unregistering): Released all slaves [ 108.388566][ T28] audit: type=1326 audit(1772582447.707:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7f85c799 code=0x7ffc0000 [ 108.412712][ T28] audit: type=1326 audit(1772582447.717:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7f85c799 code=0x7ffc0000 [ 108.436801][ T28] audit: type=1326 audit(1772582447.717:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7f85c799 code=0x7ffc0000 [ 108.460783][ T28] audit: type=1326 audit(1772582447.727:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8b7f85c799 code=0x7ffc0000 [ 108.490595][ T28] audit: type=1326 audit(1772582447.967:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7f85c799 code=0x7ffc0000 [ 108.535190][ T28] audit: type=1326 audit(1772582447.967:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7f85c799 code=0x7ffc0000 [ 108.584119][ T4854] loop2: detected capacity change from 0 to 2048 [ 108.609122][ T28] audit: type=1326 audit(1772582448.017:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4847 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7f85c799 code=0x7ffc0000 [ 108.688362][ T4860] loop1: detected capacity change from 0 to 128 [ 108.727850][ T4854] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 108.740464][ T4854] FAT-fs (loop2): Filesystem has been set read-only [ 109.698226][ T4877] netlink: 64 bytes leftover after parsing attributes in process `syz.4.382'. [ 109.711503][ T4878] loop0: detected capacity change from 0 to 128 [ 109.719074][ T4874] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4874 comm=syz.2.379 [ 109.735298][ T3438] kworker/u8:7: attempt to access beyond end of device [ 109.735298][ T3438] loop1: rw=1, sector=145, nr_sectors = 40 limit=128 [ 109.749829][ T3438] kworker/u8:7: attempt to access beyond end of device [ 109.749829][ T3438] loop1: rw=1, sector=193, nr_sectors = 8 limit=128 [ 109.774007][ T3438] kworker/u8:7: attempt to access beyond end of device [ 109.774007][ T3438] loop1: rw=1, sector=209, nr_sectors = 8 limit=128 [ 109.788218][ T4878] 9pnet_virtio: no channels available for device syz [ 109.789891][ T3438] kworker/u8:7: attempt to access beyond end of device [ 109.789891][ T3438] loop1: rw=1, sector=225, nr_sectors = 8 limit=128 [ 109.789933][ T3438] kworker/u8:7: attempt to access beyond end of device [ 109.789933][ T3438] loop1: rw=1, sector=241, nr_sectors = 8 limit=128 [ 109.790011][ T3438] kworker/u8:7: attempt to access beyond end of device [ 109.790011][ T3438] loop1: rw=1, sector=257, nr_sectors = 8 limit=128 [ 109.790048][ T3438] kworker/u8:7: attempt to access beyond end of device [ 109.790048][ T3438] loop1: rw=1, sector=273, nr_sectors = 8 limit=128 [ 109.790134][ T3438] kworker/u8:7: attempt to access beyond end of device [ 109.790134][ T3438] loop1: rw=1, sector=289, nr_sectors = 8 limit=128 [ 109.790171][ T3438] kworker/u8:7: attempt to access beyond end of device [ 109.790171][ T3438] loop1: rw=1, sector=305, nr_sectors = 8 limit=128 [ 109.790246][ T3438] kworker/u8:7: attempt to access beyond end of device [ 109.790246][ T3438] loop1: rw=1, sector=321, nr_sectors = 8 limit=128 [ 109.914873][ T4885] netlink: 14 bytes leftover after parsing attributes in process `syz.0.381'. [ 109.967262][ T4884] netlink: 14 bytes leftover after parsing attributes in process `syz.0.381'. [ 110.063024][ T4882] loop2: detected capacity change from 0 to 512 [ 110.395172][ T4900] loop3: detected capacity change from 0 to 8192 [ 110.485032][ T4897] loop0: detected capacity change from 0 to 512 [ 110.485460][ T3300] loop3: p3 p4 < > [ 110.542955][ T4882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.624440][ T3300] loop3: p3 start 9895680 is beyond EOD, truncated [ 110.736816][ T4900] loop3: p3 p4 < > [ 110.788218][ T4897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.986440][ T4882] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.015308][ T4900] loop3: p3 start 9895680 is beyond EOD, truncated [ 111.637299][ T4882] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 111.669891][ T3000] loop3: p3 p4 < > [ 111.673997][ T3000] loop3: p3 start 9895680 is beyond EOD, truncated [ 111.702442][ T4897] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.761142][ T4911] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 111.792207][ T4897] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 111.838405][ T4897] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 111.852621][ T4918] lo speed is unknown, defaulting to 1000 [ 111.874656][ T4916] loop4: detected capacity change from 0 to 8192 [ 111.941380][ T4916] capability: warning: `syz.4.392' uses 32-bit capabilities (legacy support in use) [ 112.172922][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.182628][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.995758][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 112.995776][ T28] audit: type=1400 audit(1772582452.687:469): avc: denied { allowed } for pid=4931 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 113.028609][ T28] audit: type=1400 audit(1772582452.687:470): avc: denied { map } for pid=4931 comm="syz.1.396" path="/dev/vcsa1" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 113.334907][ T4948] loop4: detected capacity change from 0 to 1024 [ 113.353330][ T4948] EXT4-fs: inline encryption not supported [ 113.396440][ T28] audit: type=1400 audit(1772582453.087:471): avc: denied { mounton } for pid=4939 comm="syz.0.399" path="/85/bus" dev="tmpfs" ino=475 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.502701][ T4948] EXT4-fs: Ignoring removed nobh option [ 113.671593][ T4948] EXT4-fs: Ignoring removed bh option [ 113.812008][ T28] audit: type=1400 audit(1772582453.507:472): avc: denied { create } for pid=4935 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 113.862809][ T4948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.896664][ T28] audit: type=1400 audit(1772582453.507:473): avc: denied { write } for pid=4935 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=3494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 113.924628][ T28] audit: type=1400 audit(1772582453.507:474): avc: denied { append } for pid=4935 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=3494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 113.958880][ T28] audit: type=1400 audit(1772582453.567:475): avc: denied { unlink } for pid=4959 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=3494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 114.064776][ T28] audit: type=1400 audit(1772582453.757:476): avc: denied { create } for pid=4965 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.086473][ T4966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'. [ 114.096201][ T28] audit: type=1400 audit(1772582453.777:477): avc: denied { connect } for pid=4965 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.155141][ T4948] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.400: Allocating blocks 449-513 which overlap fs metadata [ 114.209498][ T4987] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.230180][ T28] audit: type=1400 audit(1772582453.877:478): avc: denied { bind } for pid=4947 comm="syz.4.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.271426][ T4971] EXT4-fs (loop4): pa ffff8881079e1a10: logic 16, phys. 449, len 4 [ 114.279543][ T4971] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 3 [ 114.329555][ T4987] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.362092][ T4994] loop3: detected capacity change from 0 to 1024 [ 114.381419][ T4987] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.393415][ T4994] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.399748][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.433920][ T4994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.476151][ T4987] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.497192][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.573424][ T355] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.609089][ T4669] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.632549][ T5007] syzkaller0: entered promiscuous mode [ 114.638109][ T5007] syzkaller0: entered allmulticast mode [ 114.829038][ T5006] syz.4.407 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 114.853277][ T4669] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.853545][ T5006] CPU: 1 UID: 0 PID: 5006 Comm: syz.4.407 Not tainted syzkaller #0 PREEMPT(full) [ 114.853574][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 114.853587][ T5006] Call Trace: [ 114.853595][ T5006] [ 114.853663][ T5006] __dump_stack+0x1d/0x30 [ 114.853700][ T5006] dump_stack_lvl+0x95/0xd0 [ 114.853757][ T5006] dump_stack+0x15/0x1b [ 114.853785][ T5006] dump_header+0x80/0x240 [ 114.853808][ T5006] oom_kill_process+0x295/0x350 [ 114.853832][ T5006] out_of_memory+0x97d/0xb80 [ 114.853901][ T5006] try_charge_memcg+0x62e/0xa10 [ 114.853939][ T5006] obj_cgroup_charge_pages+0x23/0xc0 [ 114.853968][ T5006] __memcg_kmem_charge_page+0x9e/0x170 [ 114.853997][ T5006] __alloc_frozen_pages_noprof+0x18a/0x360 [ 114.854031][ T5006] alloc_pages_bulk_noprof+0x4aa/0x530 [ 114.854100][ T5006] ? policy_nodemask+0x417/0x5e0 [ 114.854128][ T5006] ? __alloc_frozen_pages_noprof+0x2a4/0x360 [ 114.854204][ T5006] alloc_pages_bulk_mempolicy_noprof+0x352/0xea0 [ 114.854236][ T5006] ? alloc_pages_mpol+0x217/0x260 [ 114.854287][ T5006] __vmalloc_node_range_noprof+0x87c/0x12b0 [ 114.854322][ T5006] __kvmalloc_node_noprof+0x3d4/0x650 [ 114.854348][ T5006] ? futex_hash_allocate+0x190/0x9d0 [ 114.854376][ T5006] ? futex_hash_allocate+0x190/0x9d0 [ 114.854498][ T5006] futex_hash_allocate+0x190/0x9d0 [ 114.854587][ T5006] ? cap_task_prctl+0x13f/0x6e0 [ 114.854610][ T5006] futex_hash_prctl+0xd8/0xf0 [ 114.854638][ T5006] __se_sys_prctl+0xa3d/0x13f0 [ 114.854666][ T5006] __x64_sys_prctl+0x67/0x80 [ 114.854778][ T5006] x64_sys_call+0x2533/0x3020 [ 114.854805][ T5006] do_syscall_64+0x12c/0x370 [ 114.854827][ T5006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.854850][ T5006] RIP: 0033:0x7f27a19fc799 [ 114.854919][ T5006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.854937][ T5006] RSP: 002b:00007f27a0436028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 114.854959][ T5006] RAX: ffffffffffffffda RBX: 00007f27a1c76090 RCX: 00007f27a19fc799 [ 114.854975][ T5006] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 114.854989][ T5006] RBP: 00007f27a1a92bd9 R08: 0000000000000000 R09: 0000000000000000 [ 114.855044][ T5006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.855058][ T5006] R13: 00007f27a1c76128 R14: 00007f27a1c76090 R15: 00007fff907d6a98 [ 114.855078][ T5006] [ 114.855161][ T5006] memory: usage 283796kB, limit 307200kB, failcnt 67 [ 114.873323][ T149] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.979053][ T5006] memory+swap: usage 238460kB, limit 9007199254740988kB, failcnt 0 [ 115.151484][ T5006] kmem: usage 213760kB, limit 9007199254740988kB, failcnt 0 [ 115.253728][ T5006] Memory cgroup stats for /syz4: [ 115.255030][ T5006] cache 245760 [ 115.403923][ T5006] rss 32768 [ 115.458199][ T5006] shmem 0 [ 115.513469][ T5006] mapped_file 245760 [ 115.903798][ T5020] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5020 comm=syz.3.412 [ 116.108566][ T5006] dirty 0 [ 116.135298][ T5006] writeback 0 [ 116.148591][ T5006] workingset_refault_anon 0 [ 116.191561][ T5006] workingset_refault_file 0 [ 116.236867][ T5006] swap 167936 [ 116.248886][ T5006] swapcached 180224 [ 116.259215][ T5006] pgpgin 124257 [ 116.262785][ T5006] pgpgout 124186 [ 116.266429][ T5006] pgfault 102738 [ 116.297842][ T5006] pgmajfault 3 [ 116.326908][ T5006] inactive_anon 28672 [ 116.345462][ T5006] active_anon 12288 [ 116.363690][ T5006] inactive_file 249856 [ 116.375467][ T5026] loop0: detected capacity change from 0 to 256 [ 116.388712][ T5006] active_file 0 [ 116.402405][ T5006] unevictable 0 [ 116.413933][ T5006] hierarchical_memory_limit 314572800 [ 116.439970][ T5006] hierarchical_memsw_limit 9223372036854771712 [ 116.479527][ T5006] total_cache 245760 [ 116.495430][ T5006] total_rss 32768 [ 116.507788][ T5006] total_shmem 0 [ 116.521760][ T5006] total_mapped_file 245760 [ 116.541677][ T5006] total_dirty 0 [ 116.553822][ T5006] total_writeback 0 [ 116.558223][ T5026] FAT-fs (loop0): Directory bread(block 64) failed [ 116.570634][ T5006] total_workingset_refault_anon 0 [ 116.585491][ T5006] total_workingset_refault_file 0 [ 116.603265][ T5026] FAT-fs (loop0): Directory bread(block 65) failed [ 116.612640][ T5006] total_swap 167936 [ 116.620168][ T5006] total_swapcached 180224 [ 116.633249][ T5006] total_pgpgin 124257 [ 116.652322][ T5026] FAT-fs (loop0): Directory bread(block 66) failed [ 116.659255][ T5006] total_pgpgout 124186 [ 116.667693][ T5006] total_pgfault 102738 [ 116.681340][ T5006] total_pgmajfault 3 [ 116.695853][ T5006] total_inactive_anon 28672 [ 116.703668][ T5026] FAT-fs (loop0): Directory bread(block 67) failed [ 116.718740][ T5006] total_active_anon 12288 [ 116.725455][ T5006] total_inactive_file 249856 [ 116.744010][ T5006] total_active_file 0 [ 116.751407][ T5026] FAT-fs (loop0): Directory bread(block 68) failed [ 116.762429][ T5006] total_unevictable 0 [ 116.772865][ T5006] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.407,pid=4998,uid=0 [ 116.806028][ T5026] FAT-fs (loop0): Directory bread(block 69) failed [ 116.832069][ T5006] Memory cgroup out of memory: Killed process 5006 (syz.4.407) total-vm:161744kB, anon-rss:1336kB, file-rss:22468kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 116.858675][ T5026] FAT-fs (loop0): Directory bread(block 70) failed [ 116.865340][ T5026] FAT-fs (loop0): Directory bread(block 71) failed [ 116.872097][ T5026] FAT-fs (loop0): Directory bread(block 72) failed [ 116.888355][ T5026] FAT-fs (loop0): Directory bread(block 73) failed [ 116.973855][ T5035] netlink: 'syz.4.417': attribute type 1 has an invalid length. [ 117.008168][ T5035] netlink: 'syz.4.417': attribute type 2 has an invalid length. [ 117.019090][ T5035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.417'. [ 117.343186][ T5044] lo speed is unknown, defaulting to 1000 [ 118.003417][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 118.003435][ T28] audit: type=1400 audit(1772582457.697:487): avc: denied { unlink } for pid=3314 comm="syz-executor" name="file2" dev="tmpfs" ino=511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 118.061229][ T5052] netlink: 'syz.4.423': attribute type 10 has an invalid length. [ 118.190536][ T28] audit: type=1400 audit(1772582457.857:488): avc: denied { unmount } for pid=5047 comm="syz.3.422" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.253574][ T5052] netlink: 55 bytes leftover after parsing attributes in process `syz.4.423'. [ 118.767792][ T5058] loop4: detected capacity change from 0 to 256 [ 118.834898][ T5058] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 118.953144][ T5060] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 118.979799][ T5060] FAT-fs (loop4): Filesystem has been set read-only [ 118.986495][ T5060] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 119.015008][ T5060] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 119.071349][ T5060] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 119.081324][ T5060] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 119.090608][ T5060] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 119.106398][ T5065] syzkaller0: entered promiscuous mode [ 119.112002][ T5065] syzkaller0: entered allmulticast mode [ 119.117784][ T5060] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 119.145676][ T5060] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 119.154506][ T5060] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 119.163450][ T5060] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 119.208180][ T28] audit: type=1400 audit(1772582458.897:489): avc: denied { read } for pid=5066 comm="syz.1.427" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 119.262450][ T28] audit: type=1400 audit(1772582458.897:490): avc: denied { open } for pid=5066 comm="syz.1.427" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 119.305124][ T28] audit: type=1400 audit(1772582458.927:491): avc: denied { ioctl } for pid=5066 comm="syz.1.427" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 119.361320][ T5067] loop1: detected capacity change from 0 to 128 [ 119.423145][ T28] audit: type=1326 audit(1772582459.117:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fa88c799 code=0x7ffc0000 [ 119.490667][ T28] audit: type=1326 audit(1772582459.117:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fa88c799 code=0x7ffc0000 [ 119.553016][ T28] audit: type=1326 audit(1772582459.147:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fa5fa88c799 code=0x7ffc0000 [ 119.615291][ T28] audit: type=1326 audit(1772582459.147:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fa88c799 code=0x7ffc0000 [ 119.700280][ T28] audit: type=1326 audit(1772582459.167:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5fa88c799 code=0x7ffc0000 [ 119.772644][ T5071] lo speed is unknown, defaulting to 1000 [ 120.032607][ T5075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.430'. [ 120.087234][ T5081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.432'. [ 120.118006][ T5083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.431'. [ 120.131121][ T5081] hsr_slave_0: left promiscuous mode [ 120.137498][ T5081] hsr_slave_1: left promiscuous mode [ 120.215096][ T5085] lo speed is unknown, defaulting to 1000 [ 120.490485][ T5105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 120.504998][ T5105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.435'. [ 120.753052][ T5104] loop4: detected capacity change from 0 to 512 [ 120.833858][ T5104] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 120.846463][ T5104] EXT4-fs (loop4): orphan cleanup on readonly fs [ 120.864726][ T5104] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 120.887378][ T5104] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 120.900222][ T5104] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.441: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 120.920556][ T5104] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 120.922537][ T5104] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.441: couldn't read orphan inode 13 (err -117) [ 120.932367][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 120.932459][ C0] EXT4-fs (loop4): last error at time 1772582460: ext4_ext_check_inode:521: inode 13 [ 120.965147][ T5104] loop4: lost filesystem error report for type 5 error -117 [ 120.992679][ T5104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.085670][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.156828][ T4669] Bluetooth: hci0: Frame reassembly failed (-84) [ 121.291052][ T5119] netlink: 'syz.2.444': attribute type 1 has an invalid length. [ 121.383336][ T5119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.398791][ T5119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'. [ 121.410430][ T5119] macvlan2: entered promiscuous mode [ 121.453336][ T5119] macvlan2: entered allmulticast mode [ 121.470003][ T5126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 121.489821][ T5126] bond0: (slave bridge1): making interface the new active one [ 121.498611][ T5126] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 121.557689][ T5125] tipc: Started in network mode [ 121.589024][ T5127] loop1: detected capacity change from 0 to 1764 [ 121.708325][ T5125] tipc: Node identity 468f6cef2c11, cluster identity 4711 [ 121.741134][ T5125] tipc: Enabled bearer , priority 0 [ 121.767935][ T5132] syzkaller0: entered promiscuous mode [ 121.789747][ T5132] syzkaller0: entered allmulticast mode [ 121.828147][ T5125] netlink: 44 bytes leftover after parsing attributes in process `syz.0.446'. [ 121.871398][ T5125] tipc: Resetting bearer [ 121.885600][ T5124] tipc: Resetting bearer [ 121.910522][ T5124] tipc: Disabling bearer [ 122.116533][ T5138] loop0: detected capacity change from 0 to 256 [ 122.456344][ T5138] FAT-fs (loop0): Directory bread(block 64) failed [ 122.501139][ T5140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 122.513469][ T5138] FAT-fs (loop0): Directory bread(block 65) failed [ 122.535975][ T5138] FAT-fs (loop0): Directory bread(block 66) failed [ 122.555446][ T5140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.450'. [ 122.564909][ T5138] FAT-fs (loop0): Directory bread(block 67) failed [ 122.583637][ T5138] FAT-fs (loop0): Directory bread(block 68) failed [ 122.599125][ T5138] FAT-fs (loop0): Directory bread(block 69) failed [ 122.607940][ T5138] FAT-fs (loop0): Directory bread(block 70) failed [ 122.617266][ T5138] FAT-fs (loop0): Directory bread(block 71) failed [ 122.628114][ T5138] FAT-fs (loop0): Directory bread(block 72) failed [ 122.635561][ T5138] FAT-fs (loop0): Directory bread(block 73) failed [ 123.240694][ T5116] Bluetooth: hci0: command 0x1003 tx timeout [ 123.246766][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 126.589514][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 126.589531][ T28] audit: type=1400 audit(1772582466.207:526): avc: denied { read write } for pid=5171 comm="syz.0.460" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 126.808737][ T28] audit: type=1400 audit(1772582466.207:527): avc: denied { open } for pid=5171 comm="syz.0.460" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 127.308859][ T5176] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.377940][ T28] audit: type=1400 audit(1772582466.207:528): avc: denied { ioctl } for pid=5171 comm="syz.0.460" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 127.729956][ T5184] mmap: syz.2.464 (5184) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 128.041263][ T5192] loop2: detected capacity change from 0 to 512 [ 128.114607][ T5199] __nla_validate_parse: 1 callbacks suppressed [ 128.114790][ T5199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'. [ 128.135404][ T5192] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.190328][ T5192] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 128.351850][ T5192] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 128.360268][ T5192] EXT4-fs (loop2): orphan cleanup on readonly fs [ 128.368798][ T5192] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.464: bg 0: block 361: padding at end of block bitmap is not set [ 128.383504][ T5192] loop2: lost filesystem error report for type 5 error -117 [ 128.383696][ T5192] EXT4-fs (loop2): Remounting filesystem read-only [ 128.391375][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 128.391396][ C1] EXT4-fs (loop2): initial error at time 1772582468: ext4_validate_block_bitmap:441 [ 128.391421][ C1] EXT4-fs (loop2): last error at time 1772582468: ext4_validate_block_bitmap:441 [ 128.423689][ T5192] EXT4-fs (loop2): 1 truncate cleaned up [ 128.430251][ T5192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 128.472294][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 128.513345][ T5206] lo speed is unknown, defaulting to 1000 [ 128.571994][ T5207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.472'. [ 128.635089][ T5207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.472'. [ 128.743624][ T5212] loop2: detected capacity change from 0 to 512 [ 128.752116][ T5212] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 128.812329][ T5207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.472'. [ 128.823690][ T5212] EXT4-fs (loop2): 1 truncate cleaned up [ 128.830341][ T5212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.127550][ T5207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.472'. [ 129.309941][ T5203] batadv_slave_0: entered promiscuous mode [ 129.650739][ T5203] batman_adv: batadv0: Adding interface: macsec1 [ 129.668259][ T5207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.472'. [ 129.702015][ T5203] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.744375][ T5207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.472'. [ 129.768615][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.888664][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.098729][ T5203] batman_adv: batadv0: Interface activated: macsec1 [ 131.535955][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.614536][ T5225] loop4: detected capacity change from 0 to 128 [ 131.651438][ T5238] loop2: detected capacity change from 0 to 256 [ 131.715761][ T5238] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 131.757080][ T5238] FAT-fs (loop2): Filesystem has been set read-only [ 131.768716][ T5238] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 131.802788][ T5238] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 131.839061][ T5238] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 131.858026][ T5238] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 131.880496][ T5238] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 131.899656][ T5238] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 131.918353][ T5238] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 131.936022][ T5238] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 131.945315][ T5238] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 131.959921][ T28] audit: type=1326 audit(1772582471.657:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5224 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a19fc799 code=0x7ffc0000 [ 132.021099][ T28] audit: type=1326 audit(1772582471.657:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5224 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a19fc799 code=0x7ffc0000 [ 132.072545][ T28] audit: type=1326 audit(1772582471.687:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5224 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f27a19fc799 code=0x7ffc0000 [ 132.154114][ T28] audit: type=1326 audit(1772582471.687:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5224 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a19fc799 code=0x7ffc0000 [ 132.206716][ T28] audit: type=1326 audit(1772582471.687:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5224 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f27a19fc799 code=0x7ffc0000 [ 132.309896][ T28] audit: type=1326 audit(1772582471.687:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5224 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a19fc799 code=0x7ffc0000 [ 132.364097][ T28] audit: type=1326 audit(1772582471.687:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5224 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a19fc799 code=0x7ffc0000 [ 132.893766][ T5252] xt_hashlimit: size too large, truncated to 1048576 [ 132.900991][ T5241] Set syz1 is full, maxelem 65536 reached [ 133.160568][ T5266] loop3: detected capacity change from 0 to 512 [ 133.168426][ T5266] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 133.214288][ T5266] EXT4-fs (loop3): orphan cleanup on readonly fs [ 133.238143][ T5266] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 133.356852][ T5266] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 133.368802][ T5266] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.489: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 133.418560][ T5266] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 133.418818][ T5266] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.489: couldn't read orphan inode 13 (err -117) [ 133.439779][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 133.439801][ C1] EXT4-fs (loop3): last error at time 1772582473: ext4_ext_check_inode:521: inode 13 [ 133.474619][ T5266] loop3: lost filesystem error report for type 5 error -117 [ 133.482056][ T5266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.600284][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.749438][ T5288] ================================================================== [ 134.757929][ T5288] BUG: KCSAN: data-race in __d_drop / fast_dput [ 134.764372][ T5288] [ 134.766851][ T5288] write to 0xffff888109e70190 of 8 bytes by task 5289 on cpu 1: [ 134.774767][ T5288] __d_drop+0x14d/0x240 [ 134.779085][ T5288] __dentry_kill+0x122/0x460 [ 134.783690][ T5288] finish_dput+0x2b/0x200 [ 134.788077][ T5288] dput+0x52/0x60 [ 134.791735][ T5288] path_openat+0xda4/0x2050 [ 134.796256][ T5288] do_file_open+0x16c/0x290 [ 134.800778][ T5288] do_sys_openat2+0x94/0x130 [ 134.805477][ T5288] __x64_sys_openat+0xf2/0x120 [ 134.810355][ T5288] x64_sys_call+0x1e39/0x3020 [ 134.815303][ T5288] do_syscall_64+0x12c/0x370 [ 134.819987][ T5288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.826065][ T5288] [ 134.828392][ T5288] read to 0xffff888109e70190 of 8 bytes by task 5288 on cpu 0: [ 134.836110][ T5288] fast_dput+0x5f/0x2c0 [ 134.840548][ T5288] dput+0x24/0x60 [ 134.844371][ T5288] filename_mknodat+0x2cb/0x450 [ 134.849588][ T5288] __se_sys_mknodat+0x38/0xf0 [ 134.854983][ T5288] __x64_sys_mknodat+0x55/0x70 [ 134.860031][ T5288] x64_sys_call+0x312/0x3020 [ 134.864786][ T5288] do_syscall_64+0x12c/0x370 [ 134.869394][ T5288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.875468][ T5288] [ 134.877791][ T5288] value changed: 0xffff88823740b940 -> 0x0000000000000000 [ 134.885005][ T5288] [ 134.887327][ T5288] Reported by Kernel Concurrency Sanitizer on: [ 134.893477][ T5288] CPU: 0 UID: 0 PID: 5288 Comm: syz.3.496 Not tainted syzkaller #0 PREEMPT(full) [ 134.902981][ T5288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 134.913238][ T5288] ==================================================================