last executing test programs: 1m56.212114117s ago: executing program 32 (id=2176): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x1}, 0x400, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x50, &(0x7f0000000440)=""/80}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x1c, 0x0, 0x0}) 1m47.594767787s ago: executing program 1 (id=2409): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x202, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x12) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) close(0x3) 1m47.594410837s ago: executing program 1 (id=2410): io_uring_enter(0xffffffffffffffff, 0x47f6, 0x4000, 0x88, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1m47.383344206s ago: executing program 1 (id=2415): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1m47.032767877s ago: executing program 1 (id=2422): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') 1m46.941996335s ago: executing program 1 (id=2424): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa8, 0x2, 0x0, 0x0, 0x0, 0x1, 0x400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x5}, 0x1a2d, 0x0, 0x7fa, 0x8, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004380)=@newqdisc={0x108, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xd8, 0x2, {{0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffe}, [@TCA_NETEM_LOSS={0x9c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1000, 0x3ff, 0x1, 0x6, 0xca}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8020, 0xfe, 0x9, 0xffffffff}}, @NETEM_LOSS_GE={0xb, 0x2, {0xf6af, 0x1ff, 0x2, 0x10}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xc2, 0xed8, 0x7d1, 0xffffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x0, 0x6, 0x88, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x586, 0xfffff74f, 0x8001, 0x102b5e26}}, @NETEM_LOSS_GE={0x14, 0x2, {0x80000001, 0x5, 0x1, 0x79}}]}, @TCA_NETEM_RATE={0x14, 0xd, {0x2000000}}, @TCA_NETEM_JITTER64={0x0, 0xb, 0x10}]}}}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m46.662002051s ago: executing program 1 (id=2432): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1m46.632993603s ago: executing program 33 (id=2432): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1m34.996006513s ago: executing program 5 (id=2798): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100000000000000010200850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x45) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) socket(0x1, 0x803, 0x0) mount$9p_fd(0x0, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1m34.949492107s ago: executing program 5 (id=2801): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfd, 0x100021}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfd, 0x100021}, 0xc) close_range(r0, r1, 0x0) 1m34.906801801s ago: executing program 5 (id=2803): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='cgroup\x00') lseek(r2, 0x339, 0x0) 1m34.845135416s ago: executing program 5 (id=2808): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) syz_clone3(&(0x7f00000000c0)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = open(&(0x7f0000000100)='./file1\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 1m34.675759101s ago: executing program 5 (id=2811): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000001d40)=0xe, 0x4) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)=""/17, 0x11}, 0x1}], 0x1, 0x40002002, 0x0) 1m34.187704715s ago: executing program 5 (id=2825): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x58, r2, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x3c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1ff}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) 1m34.187482615s ago: executing program 34 (id=2825): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x58, r2, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x3c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1ff}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) 53.288586859s ago: executing program 7 (id=3881): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 53.060479699s ago: executing program 7 (id=3889): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x10000, 0x40000, 0x5, 0x3, 0x20005, 0xa, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r1, r2, 0x0, 0x80000015) 53.041085271s ago: executing program 7 (id=3891): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 53.025540842s ago: executing program 7 (id=3893): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={0x0, 0xa0}}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) 52.415805817s ago: executing program 7 (id=3904): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 52.394676379s ago: executing program 7 (id=3896): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0xfff1}, {0x2, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x0, 0x5, 0x401, 0x0, 0x9, 0x18, 0x1, 0x80, 0x7000000, 0x5, 0x8, 0x9, 0x8, 0xd8c, 0x10f8000, 0x1, 0x4, 0x6, 0xf, 0x7ff, 0x1, 0x88d, 0x8, 0xfffffff9, 0x7, 0x6, 0x7f, 0x4, 0xc820, 0x5, 0x401, 0x6, 0x0, 0xe, 0x7, 0x11, 0x101, 0xf, 0x0, 0x7, 0x8, 0x6, 0x4, 0x3, 0x7ff, 0xe55, 0xb0, 0x4b19, 0x8, 0x8, 0xc5c, 0x9, 0x3, 0x5, 0x8001, 0xfffffff8, 0x9, 0x5, 0x9, 0x2, 0x8, 0x2, 0xfffffff7, 0x5, 0x6a41, 0xffffffff, 0xf, 0x4, 0x3ff, 0x7f, 0x3, 0x81, 0x10, 0x3, 0x400, 0x9, 0x7ff, 0x5, 0x40, 0x2, 0x2e, 0x0, 0x1, 0x5, 0xcf9, 0x2, 0x0, 0x4, 0x4, 0x4, 0x3, 0x3, 0x7ff, 0x5, 0x0, 0x3, 0x2, 0x6, 0xa5, 0xfffff000, 0xb, 0x6, 0x1, 0x8, 0x80000000, 0x800, 0x9, 0x6, 0x2, 0x0, 0x10080, 0x9, 0xfffffffd, 0xfff, 0x7f, 0x7, 0x2, 0x7, 0x1, 0x89c, 0x9fae562, 0x6, 0x5, 0xff, 0x7, 0x401, 0x800, 0x6, 0x9, 0x7, 0x3ff, 0x800, 0x2, 0x3, 0x6, 0xc71, 0x81, 0x80000000, 0x3ff, 0x8, 0x7, 0x2, 0x800, 0x200, 0xfffffffe, 0x7, 0x8000, 0xe265, 0x7fffffff, 0x0, 0x0, 0x4, 0xc, 0x7, 0x0, 0xc88f, 0x2, 0xffffffff, 0x6, 0x5, 0x8000, 0xe, 0xfffffff9, 0x6, 0x8, 0x990, 0x2, 0x5, 0x7, 0x1, 0xfffffffa, 0xb, 0x9, 0x2, 0x3, 0x8000, 0x5, 0x1, 0x10000, 0xd41b, 0x128b5072, 0xf, 0x4, 0xf918, 0x7f, 0x7, 0x8, 0x2, 0xfffffffc, 0x0, 0xff, 0xb, 0x4, 0x96a3, 0x1, 0x8001, 0x7, 0x4, 0x1, 0x9, 0x6, 0x9, 0x3, 0x5, 0x631, 0x8001, 0x3, 0x10001, 0x44c, 0x5827, 0xa99, 0x3, 0x400, 0xfffffffc, 0x8, 0x7, 0x10000000, 0x3, 0x3, 0x0, 0x1d99, 0x3, 0x4, 0x0, 0x4ebe3ccc, 0x1, 0x3, 0x10000000, 0x7, 0x8, 0x4, 0x9, 0x7, 0x4, 0x5, 0x7, 0x0, 0xfffffff9, 0xffff, 0x81, 0x9, 0x6, 0x3, 0x19f2, 0x3, 0xe, 0x4259, 0x7, 0x3, 0x81, 0x58783dd6, 0xed2, 0x5, 0x3ff, 0x9]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 49.975831395s ago: executing program 3 (id=3947): r0 = socket(0x1d, 0x2, 0x6) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000400)={0x0, 0xb9fc, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x20000000, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 49.69156348s ago: executing program 3 (id=3953): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000f, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fstat(r0, &(0x7f00000000c0)) 48.958046746s ago: executing program 3 (id=3969): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000380)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x1, 0x6, @multicast}, 0x10) 48.884376133s ago: executing program 3 (id=3970): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000001280)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@abort}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001980)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x14c) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x44c00, 0xe898d2275f586997) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 48.744673155s ago: executing program 3 (id=3974): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_open_dev$vcsa(&(0x7f0000000180), 0x83, 0x101000) r0 = syz_io_uring_setup(0x1cf0, &(0x7f0000000780)={0x0, 0x4f5f, 0x10100, 0x3, 0x184}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 48.424360043s ago: executing program 3 (id=3980): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000000240)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000000200)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09016", 0x4}], 0x2}}], 0x400000000000159, 0x4000080) 48.367291319s ago: executing program 35 (id=3980): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000000240)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000000200)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09016", 0x4}], 0x2}}], 0x400000000000159, 0x4000080) 37.315915936s ago: executing program 36 (id=3896): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0xfff1}, {0x2, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x0, 0x5, 0x401, 0x0, 0x9, 0x18, 0x1, 0x80, 0x7000000, 0x5, 0x8, 0x9, 0x8, 0xd8c, 0x10f8000, 0x1, 0x4, 0x6, 0xf, 0x7ff, 0x1, 0x88d, 0x8, 0xfffffff9, 0x7, 0x6, 0x7f, 0x4, 0xc820, 0x5, 0x401, 0x6, 0x0, 0xe, 0x7, 0x11, 0x101, 0xf, 0x0, 0x7, 0x8, 0x6, 0x4, 0x3, 0x7ff, 0xe55, 0xb0, 0x4b19, 0x8, 0x8, 0xc5c, 0x9, 0x3, 0x5, 0x8001, 0xfffffff8, 0x9, 0x5, 0x9, 0x2, 0x8, 0x2, 0xfffffff7, 0x5, 0x6a41, 0xffffffff, 0xf, 0x4, 0x3ff, 0x7f, 0x3, 0x81, 0x10, 0x3, 0x400, 0x9, 0x7ff, 0x5, 0x40, 0x2, 0x2e, 0x0, 0x1, 0x5, 0xcf9, 0x2, 0x0, 0x4, 0x4, 0x4, 0x3, 0x3, 0x7ff, 0x5, 0x0, 0x3, 0x2, 0x6, 0xa5, 0xfffff000, 0xb, 0x6, 0x1, 0x8, 0x80000000, 0x800, 0x9, 0x6, 0x2, 0x0, 0x10080, 0x9, 0xfffffffd, 0xfff, 0x7f, 0x7, 0x2, 0x7, 0x1, 0x89c, 0x9fae562, 0x6, 0x5, 0xff, 0x7, 0x401, 0x800, 0x6, 0x9, 0x7, 0x3ff, 0x800, 0x2, 0x3, 0x6, 0xc71, 0x81, 0x80000000, 0x3ff, 0x8, 0x7, 0x2, 0x800, 0x200, 0xfffffffe, 0x7, 0x8000, 0xe265, 0x7fffffff, 0x0, 0x0, 0x4, 0xc, 0x7, 0x0, 0xc88f, 0x2, 0xffffffff, 0x6, 0x5, 0x8000, 0xe, 0xfffffff9, 0x6, 0x8, 0x990, 0x2, 0x5, 0x7, 0x1, 0xfffffffa, 0xb, 0x9, 0x2, 0x3, 0x8000, 0x5, 0x1, 0x10000, 0xd41b, 0x128b5072, 0xf, 0x4, 0xf918, 0x7f, 0x7, 0x8, 0x2, 0xfffffffc, 0x0, 0xff, 0xb, 0x4, 0x96a3, 0x1, 0x8001, 0x7, 0x4, 0x1, 0x9, 0x6, 0x9, 0x3, 0x5, 0x631, 0x8001, 0x3, 0x10001, 0x44c, 0x5827, 0xa99, 0x3, 0x400, 0xfffffffc, 0x8, 0x7, 0x10000000, 0x3, 0x3, 0x0, 0x1d99, 0x3, 0x4, 0x0, 0x4ebe3ccc, 0x1, 0x3, 0x10000000, 0x7, 0x8, 0x4, 0x9, 0x7, 0x4, 0x5, 0x7, 0x0, 0xfffffff9, 0xffff, 0x81, 0x9, 0x6, 0x3, 0x19f2, 0x3, 0xe, 0x4259, 0x7, 0x3, 0x81, 0x58783dd6, 0xed2, 0x5, 0x3ff, 0x9]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 6.852067458s ago: executing program 6 (id=5132): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r0], 0x24}}, 0x4000000) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 6.795452593s ago: executing program 6 (id=5134): r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x90) r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 6.71644876s ago: executing program 6 (id=5139): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x7aec, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffff00d6}]}, &(0x7f0000000080)=0x10) shutdown(r0, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0x401}, &(0x7f0000000140)=0x8) 6.548131045s ago: executing program 6 (id=5144): ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f00000003c0)='./file0/../file0\x00', 0x4) 6.435736644s ago: executing program 6 (id=5150): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 5.851863227s ago: executing program 6 (id=5164): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x0) 5.851738967s ago: executing program 37 (id=5164): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x0) 2.897908021s ago: executing program 4 (id=5253): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x77, 0x77, 0x7, [@int={0x9, 0x0, 0x0, 0x1, 0x0, 0x5d, 0x0, 0x22, 0x1}, @var={0x1, 0x0, 0x0, 0xe, 0x3, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x6}}, @ptr={0xe, 0x0, 0x0, 0x2, 0x3}, @datasec={0x1, 0x1, 0x0, 0xf, 0x3, [{0x4, 0xfffffff9, 0x6}], "289104"}, @typedef={0x10, 0x0, 0x0, 0x8, 0x3}, @restrict={0x8, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x2e, 0x2e, 0x30, 0x0, 0x61]}}, 0x0, 0x97}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000039000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000400), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000600), 0x0}, 0x20) 2.846882865s ago: executing program 4 (id=5255): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a2d, 0x0, 0x7fc, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0x2, 0x1, 0x9, 0x4, 0xa}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa004, 0x8, 0x5, 0x20000a17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x0, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0xb904, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x6, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x4, 0x7}, {0x5, 0xe4, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d6, 0xfffffffb}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x7, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0xb, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0x9d, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0xffffffff, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x5, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x0, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x100006, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x9, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x200, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x7, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0x7, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x2, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x7ffc, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0xf35, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x6}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.720189557s ago: executing program 4 (id=5259): open$dir(0x0, 0xc402, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x1}, 0x100118, 0x0, 0x0, 0x0, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x7fff, 0x1, &(0x7f0000000b00)=[{0x0, 0x0, 0x3, 0xfffffffffffffffe}], 0x3e0000) kexec_load(0x7, 0x0, &(0x7f0000000700), 0x320000) 2.655836872s ago: executing program 4 (id=5260): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.655688372s ago: executing program 4 (id=5261): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40f00}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x35a05, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x4}, 0x1075, 0xa, 0xfffffffc, 0x0, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 2.439025202s ago: executing program 2 (id=5267): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x5e, &(0x7f0000000240)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "12000b", 0x28, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}, 0x0) 1.941338606s ago: executing program 0 (id=5271): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) 1.868412273s ago: executing program 2 (id=5272): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r1 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xb) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000003, 0x97052, r1, 0x0) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000002540)=""/4096, 0x1000) 1.855148434s ago: executing program 0 (id=5274): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) 1.830937856s ago: executing program 0 (id=5275): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000180)="0100fd6400000000", 0x8, 0x36, 0x0, 0x0, r1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0xb, 0x0, 0x0, 0x1, r1}]) syz_clone(0x1184680, 0x0, 0x0, 0x0, 0x0, 0x0) 1.775773441s ago: executing program 2 (id=5276): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 1.487808137s ago: executing program 4 (id=5281): r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x8}, &(0x7f00000001c0)=0x8) 1.469867168s ago: executing program 38 (id=5281): r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x8}, &(0x7f00000001c0)=0x8) 1.386359796s ago: executing program 2 (id=5287): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000240)=[{0x16}]}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000180)={0xab000500, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 907.786309ms ago: executing program 9 (id=5293): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000c00)=""/86, 0x56}], 0x2}, 0x94d}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 906.208239ms ago: executing program 0 (id=5294): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r0) 772.255931ms ago: executing program 9 (id=5306): r0 = socket$inet6(0xa, 0x2, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) sendto$inet6(r0, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 771.997701ms ago: executing program 0 (id=5298): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x24) 667.3846ms ago: executing program 9 (id=5300): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 558.87576ms ago: executing program 8 (id=5302): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a80)={r1, 0x0, "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"}, &(0x7f0000000180)=0xfebd) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001440)={r2, 0x3, 0x30}, &(0x7f0000001480)=0xc) 556.42886ms ago: executing program 9 (id=5303): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 531.506432ms ago: executing program 8 (id=5304): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x1f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="26000000040000000100", @ANYRES32, @ANYBLOB='\x00'/11], 0x50) io_uring_enter(r0, 0x6214, 0x7721, 0x13, 0x0, 0x38) 485.721686ms ago: executing program 8 (id=5305): r0 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x80, 0x1103, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x35, {0x5, 0x1}, 0x1}, 0x1) 485.366156ms ago: executing program 2 (id=5307): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) getuid() syz_clone(0x5000, 0x0, 0x0, 0x0, 0x0, 0x0) 448.98072ms ago: executing program 9 (id=5308): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x84, @empty, 0x2, 0x1}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac7100206000000ffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 348.740509ms ago: executing program 0 (id=5309): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800001801"], 0x50) 347.029009ms ago: executing program 9 (id=5318): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x210000, &(0x7f0000000480)={[{@nobarrier}, {@nolazytime}, {@jqfmt_vfsv0}, {@noauto_da_alloc}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$eJzs3U1rXFUfAPD/nUzSNu3zNIVS1IUUurBSO2kSXyoI1pWIFgu6r0MyDSWTTslMShMLtgu7cSNFELEgfgD3LotfwE9R0EKREnQhQuRO7qTTZCavE2fS+f3gtufMuTfn/nPuOTln7gw3gL51Mv0nF/FiRHydRBxtKstHVnhyZb+lJ7cm0y2J5eVP/kgiyV5r7J9k/x/OMi9ExC9fRpzJra+3urA4UyyXS3NZfrQ2e320urB49upscbo0Xbo2PjFx/o2J8bfferNjsb566a/vPn7wwfmvTi19+9OjY/eSuBBHsrLmOHbhdnPmZPGfLDUYF9bsONaBynpJ0u0TYEcGsn4+GOkYcDQGsl4PPP++iIhloE8l+j/0qcY8oLG279A6eN94/N7KAqge+1Bz/PmV90biYH1tNLyUPLMySte7Ix2oP63j59/v30u32Ph9iEOb5AG25fadiDiXz68f/5Ns/Nu5c/U3jze2to5++/sD3fQgnf+81mr+l1ud/0SL+c/hFn13Jzbv/7lHHaimrXT+907L+e/q0DUykOX+V5/zDSZXrpZL5yLi/xFxOgYPpPmN7uecX3q43K6sef6Xbmn9jblgdh6P8geePWaqWCtGxNBu4m54fCfipXyr+JPV9k9atH/6+7i0xTpOlO6/3K5s8/j31vKPEa+0bP+nd7SSje9Pjtavh9HGVbHen3dP/Nqu/m7Hn7b/8MbxjyTN92ur26/jh4N/l9qVpfEP7+D6H0o+racbneBmsVabG4sYSj5a//r402Mb+cb+afynT63E/+xkJbfh9Z8uvj7bYvx3j99tu2svtP/Uttp/+4mHH37+fbv6tzb+vV5Pnc5eyca/1rJrZasnuNvfHwAAAAAAAPSSXEQciSRXWE3ncoXCyuc7jsdwrlyp1s5cqcxfm4r6d2VHYjDXuNN9tOnzEGPZ52Eb+fE1+YmIOBYR3wwcqucLk5XyVLeDBwAAAAAAAAAAAAAAAAAAgB5xuM33/1O/DXT77IA9V3+wwYFunwXQDZs+8r8TT3oCetKm/R94bun/0L/0f+hfa/t/R54sDOwL/v5D/9L/oX/p/9C/9H8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqEsXL6bb8tKTW5NpfurGwvxM5cbZqVJ1pjA7P1mYrMxdL0xXKtPlUmGyMrvZzytXKtfHxmP+5mitVK2NVhcWL89W5q/VLl+dLU6XLpcG/5OoAAAAAAAAAAAAAAAAAAAAYH+pLizOFMvl0txqIp+VzK0v6tPEu9ETp7GXAa7Y0eH5XolibxLvD/TEaewmcSdr3u0d1aUBCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa+DcAAP//Rm0oPg==") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000032c0)="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", 0xd41}], 0x1}, 0x40) syz_read_part_table(0x1056, &(0x7f0000001080)="$eJzsz7GpwlAcxeHz3n15WklG0NrGFWKrbSqXcATBRWwsdDGnECWEIBlARPi+6h74ceEfPupntB5JpsM4lXFUhqKzue8nyWG+yLH5fX3Q1Dmvl5nVya7b21UuzX+quspfX9zapH+Xkvb6ztsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Fs8AwAA///TrQug") madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 195.631542ms ago: executing program 8 (id=5310): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000080)=0x803, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x17, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x63, 0x2}}}}}}, 0x0) 150.820066ms ago: executing program 8 (id=5311): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') readlink(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080)=""/121, 0x79) 2.04488ms ago: executing program 8 (id=5312): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r1, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) 0s ago: executing program 2 (id=5322): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001500)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4e20, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0xe0000001}}}}}}}}, 0x36) kernel console output (not intermixed with test programs): 00-0000-0000-0000-000000000000. [ 141.629930][ T28] audit: type=1400 audit(1772494159.515:895): avc: denied { firmware_load } for pid=11950 comm="syz.7.3389" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 141.731354][ T28] audit: type=1400 audit(1772494159.595:896): avc: denied { create } for pid=11955 comm="syz.6.3391" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 141.912068][ T28] audit: type=1400 audit(1772494159.595:897): avc: denied { map } for pid=11955 comm="syz.6.3391" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=34535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 141.936995][ T28] audit: type=1400 audit(1772494159.595:898): avc: denied { read write } for pid=11955 comm="syz.6.3391" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=34535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 142.104963][T11986] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 142.112273][ T3395] IPVS: starting estimator thread 0... [ 142.194233][ T28] audit: type=1400 audit(1772494160.085:899): avc: denied { setattr } for pid=11999 comm="syz.6.3410" name="/" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.216705][T11992] IPVS: using max 2304 ests per chain, 115200 per kthread [ 142.276578][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3412'. [ 142.308899][T12008] netlink: 'syz.7.3412': attribute type 1 has an invalid length. [ 142.821611][T12029] bridge_slave_0: left allmulticast mode [ 142.829820][T12029] bridge_slave_0: left promiscuous mode [ 142.836221][T12029] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.846357][T12029] bridge_slave_1: left allmulticast mode [ 142.853526][T12029] bridge_slave_1: left promiscuous mode [ 142.866927][T12029] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.887533][T12029] team0: Port device team_slave_0 removed [ 142.907183][T12029] team0: Port device team_slave_1 removed [ 142.914459][T12029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.938837][T12029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.950507][T12029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.958499][T12029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.976582][T12029] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 143.059248][T12037] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 143.072879][T12039] erspan0: entered promiscuous mode [ 143.119298][T12041] loop7: detected capacity change from 0 to 512 [ 143.149303][T12041] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.3426: iget: bad i_size value: 38620345925642 [ 143.176071][T12044] loop3: detected capacity change from 0 to 512 [ 143.185600][T12041] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 143.185811][T12041] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3426: couldn't read orphan inode 15 (err -117) [ 143.194966][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 143.194990][ C0] EXT4-fs (loop7): initial error at time 1772494161: ext4_orphan_get:1391: inode 15 [ 143.195027][ C0] EXT4-fs (loop7): last error at time 1772494161: ext4_orphan_get:1391: inode 15 [ 143.255643][T12044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.279337][T12041] loop7: lost filesystem error report for type 5 error -117 [ 143.279929][T12041] EXT4-fs (loop7): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.302065][T12044] ext4 filesystem being mounted at /331/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.325216][T12041] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.3426: bg 0: block 5: invalid block bitmap [ 143.342008][T12044] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.3427: corrupted inode contents [ 143.356442][T12041] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 143.356550][T12044] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #2: comm syz.3.3427: mark_inode_dirty error [ 143.380818][T12044] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.3427: corrupted inode contents [ 143.382823][T12041] EXT4-fs (loop7): This should not happen!! Data will be lost [ 143.382823][T12041] [ 143.393226][T12044] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.3427: mark_inode_dirty error [ 143.427843][T12050] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #2: comm syz.3.3427: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 143.427843][T12050] [ 143.454593][T12041] EXT4-fs (loop7): Total free blocks count 0 [ 143.460649][T12041] EXT4-fs (loop7): Free/Dirty block details [ 143.517361][T12041] EXT4-fs (loop7): free_blocks=0 [ 143.542985][T12041] EXT4-fs (loop7): dirty_blocks=1 [ 143.548301][ T28] audit: type=1400 audit(1772494161.425:900): avc: denied { rename } for pid=12043 comm="syz.3.3427" name="file0" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 143.573451][T12041] EXT4-fs (loop7): Block reservation details [ 143.579714][T12041] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 143.611570][ T7142] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.611854][T10445] EXT4-fs (loop7): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 143.652340][ T28] audit: type=1400 audit(1772494161.425:901): avc: denied { rmdir } for pid=12043 comm="syz.3.3427" name="file1" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 143.904459][T12086] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 144.615370][T12120] 9p: Invalid uid '0x00000000ffffffff' [ 144.669007][T12124] loop7: detected capacity change from 0 to 1024 [ 144.685286][T12124] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 144.702604][T12124] System zones: 0-1, 3-8 [ 144.714373][T12124] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 144.730836][T12124] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.748654][T12124] EXT4-fs error (device loop7): ext4_free_blocks:6726: comm syz.7.3460: Freeing blocks not in datazone - block = 0, count = 16 [ 144.781640][ T30] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 112: padding at end of block bitmap is not set [ 144.802434][ T30] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 144.816010][ T30] EXT4-fs (loop7): This should not happen!! Data will be lost [ 144.816010][ T30] [ 144.826713][ T30] EXT4-fs (loop7): Total free blocks count 0 [ 144.832708][ T30] EXT4-fs (loop7): Free/Dirty block details [ 144.838898][ T30] EXT4-fs (loop7): free_blocks=16 [ 144.844054][ T30] EXT4-fs (loop7): dirty_blocks=16 [ 144.849242][ T30] EXT4-fs (loop7): Block reservation details [ 144.856198][ T30] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 144.862812][T10445] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 145.622503][T12144] loop6: detected capacity change from 0 to 4096 [ 145.665402][T12144] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.779276][T12159] loop4: detected capacity change from 0 to 512 [ 145.791344][T12159] EXT4-fs: Ignoring removed orlov option [ 145.797357][T12159] EXT4-fs: Ignoring removed bh option [ 145.802916][T12159] EXT4-fs: Ignoring removed oldalloc option [ 145.808900][T12159] ext4: Unknown parameter 'smackfsfloor' [ 146.151260][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 146.151275][ T28] audit: type=1400 audit(1772494164.035:903): avc: denied { bind } for pid=12189 comm="syz.7.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 146.426037][ T9361] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.577940][ T28] audit: type=1400 audit(1772494164.465:904): avc: denied { mount } for pid=12212 comm="syz.2.3499" name="/" dev="autofs" ino=35734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 146.916876][T12247] loop6: detected capacity change from 0 to 2048 [ 146.968480][T12247] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.999293][T12247] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 147.054867][T12247] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 147.143425][T12247] EXT4-fs (loop6): This should not happen!! Data will be lost [ 147.143425][T12247] [ 147.153075][T12247] EXT4-fs (loop6): Total free blocks count 0 [ 147.284900][T12247] EXT4-fs (loop6): Free/Dirty block details [ 147.291148][T12247] EXT4-fs (loop6): free_blocks=4096 [ 147.299854][T12247] EXT4-fs (loop6): dirty_blocks=512 [ 147.306704][T12247] EXT4-fs (loop6): Block reservation details [ 147.312813][T12247] EXT4-fs (loop6): i_reserved_data_blocks=32 [ 147.323282][T12246] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 147.572812][ T28] audit: type=1400 audit(1772494165.455:905): avc: denied { watch watch_reads } for pid=12291 comm="syz.2.3534" path="/780/file0" dev="tmpfs" ino=4039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 148.456876][T12317] loop3: detected capacity change from 0 to 512 [ 148.463818][T12317] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 148.503793][T12317] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.3546: bad orphan inode 16 [ 148.523392][T12317] loop3: lost filesystem error report for type 5 error -117 [ 148.523525][T12317] ext4_test_bit(bit=15, block=4) = 0 [ 148.536086][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 148.536102][ C1] EXT4-fs (loop3): initial error at time 1772494166: ext4_orphan_get:1417 [ 148.536129][ C1] EXT4-fs (loop3): last error at time 1772494166: ext4_orphan_get:1417 [ 148.563454][T12317] EXT4-fs (loop3): 1 orphan inode deleted [ 148.570753][T12317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.595677][ T28] audit: type=1400 audit(1772494166.485:906): avc: denied { watch watch_reads } for pid=12316 comm="syz.3.3546" path="/352/bus" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.094903][ T7142] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.231420][T12336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3554'. [ 149.276031][T12336] netlink: 'syz.3.3554': attribute type 30 has an invalid length. [ 149.298331][ T30] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.312555][T12336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3554'. [ 149.322092][ T30] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.343657][T12336] netlink: 'syz.3.3554': attribute type 30 has an invalid length. [ 149.351491][ T30] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.373439][ T30] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.614991][T12339] loop4: detected capacity change from 0 to 32768 [ 149.850000][ T28] audit: type=1400 audit(1772494167.735:907): avc: denied { read } for pid=12372 comm="syz.2.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 149.895328][T12378] loop3: detected capacity change from 0 to 512 [ 149.944659][T12378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.004645][T12385] netlink: 'syz.4.3577': attribute type 13 has an invalid length. [ 150.094241][ T7142] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.116471][ T118] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.146727][T12392] loop3: detected capacity change from 0 to 512 [ 150.153082][ T118] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.181224][ T118] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.205506][ T118] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.220562][T12392] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 150.231732][T12392] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 150.277955][T12396] xt_CT: No such helper "snmp_trap" [ 150.305442][ T28] audit: type=1400 audit(1772494168.195:908): avc: denied { read } for pid=12391 comm="syz.3.3579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 150.507322][T12421] netlink: 'syz.6.3592': attribute type 13 has an invalid length. [ 150.670229][ T28] audit: type=1400 audit(1772494168.555:909): avc: denied { execmod } for pid=12432 comm="syz.2.3596" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=36322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 150.726256][T12436] RDS: rds_bind could not find a transport for ::3:0:20:0, load rds_tcp or rds_rdma? [ 150.797826][T12442] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.3599'. [ 150.799357][T12440] loop4: detected capacity change from 0 to 512 [ 150.863108][ T28] audit: type=1326 audit(1772494168.745:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12447 comm="syz.2.3603" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbcee54c629 code=0x0 [ 150.888702][T12450] loop7: detected capacity change from 0 to 512 [ 150.895598][T12450] EXT4-fs: Ignoring removed i_version option [ 150.901789][T12450] EXT4-fs: Ignoring removed bh option [ 150.909187][T12440] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3600: couldn't read orphan inode 26 (err -116) [ 150.922072][T12440] loop4: lost filesystem error report for type 5 error -116 [ 150.922697][T12440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.934613][T12450] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.945232][T12440] ext4 filesystem being mounted at /655/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.981435][T12450] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.002459][T12440] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3600: bg 0: block 64: padding at end of block bitmap is not set [ 151.011214][T12421] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.024779][T12421] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.081972][T10445] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.104224][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.425284][T12468] loop7: detected capacity change from 0 to 2048 [ 151.486182][T12468] loop7: p1 p3 p4 [ 151.491620][T12468] loop7: p4 size 589824 extends beyond EOD, truncated [ 151.513221][ T28] audit: type=1400 audit(1772494169.395:911): avc: denied { write } for pid=12467 comm="syz.7.3610" name="loop7p1" dev="devtmpfs" ino=1333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 151.528454][T12421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.542485][ T28] audit: type=1400 audit(1772494169.395:912): avc: denied { open } for pid=12467 comm="syz.7.3610" path="/dev/loop7p1" dev="devtmpfs" ino=1333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 151.584477][T12421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.597185][ T28] audit: type=1400 audit(1772494169.485:913): avc: denied { setopt } for pid=12471 comm="syz.7.3611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.643916][ T9051] udevd[9051]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 151.644868][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 151.655356][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 151.688337][ T28] audit: type=1326 audit(1772494169.575:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12476 comm="syz.7.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56d5e2c629 code=0x7ffc0000 [ 151.695021][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 151.715801][ T9051] udevd[9051]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 151.742539][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 151.753223][ T28] audit: type=1326 audit(1772494169.605:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12476 comm="syz.7.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f56d5e2c629 code=0x7ffc0000 [ 151.777021][ T28] audit: type=1326 audit(1772494169.605:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12476 comm="syz.7.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56d5e2c629 code=0x7ffc0000 [ 151.801494][ T28] audit: type=1326 audit(1772494169.605:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12476 comm="syz.7.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56d5e2c629 code=0x7ffc0000 [ 151.868790][T12479] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3614'. [ 152.099055][T12496] loop7: detected capacity change from 0 to 1024 [ 152.134610][T12496] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.273513][ T64] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.287370][ T64] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.319873][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3627'. [ 152.342487][ T64] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.353854][T10445] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.372946][ T64] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.397595][T12512] loop4: detected capacity change from 0 to 512 [ 152.436898][T12512] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 152.489952][T12512] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.3629: bad orphan inode 131083 [ 152.503676][T12512] loop4: lost filesystem error report for type 5 error -117 [ 152.511177][T12512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.634349][T12504] IPVS: You probably need to specify IP address on multicast interface. [ 152.644237][T12504] IPVS: Error connecting to the multicast addr [ 152.652558][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.698504][T12529] loop3: detected capacity change from 0 to 1024 [ 152.749843][T12529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.784445][T12529] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: comm syz.3.3636: inode #3204449282: comm syz.3.3636: iget: illegal inode # [ 152.852748][T12529] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.3636: error while reading EA inode 3204449282 err=-117 [ 152.980122][ T7142] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.051754][ T3396] Process accounting resumed [ 153.309492][T12570] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 153.316093][T12570] syzkaller1: linktype set to 805 [ 153.401126][T12572] loop7: detected capacity change from 0 to 512 [ 153.411547][T12572] EXT4-fs: Ignoring removed nobh option [ 153.425392][T12572] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 153.440407][T12572] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.3653: iget: bad i_size value: 38620345925642 [ 153.473415][T12572] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 153.473696][T12572] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3653: couldn't read orphan inode 15 (err -117) [ 153.494655][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 153.494675][ C0] EXT4-fs (loop7): initial error at time 1772494171: ext4_orphan_get:1391: inode 15 [ 153.494699][ C0] EXT4-fs (loop7): last error at time 1772494171: ext4_orphan_get:1391: inode 15 [ 153.522121][T12572] loop7: lost filesystem error report for type 5 error -117 [ 153.522568][T12572] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.563526][T12572] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.3653: bg 0: block 5: invalid block bitmap [ 153.581062][T12572] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 153.593745][T12572] EXT4-fs (loop7): This should not happen!! Data will be lost [ 153.593745][T12572] [ 153.604188][T12572] EXT4-fs (loop7): Total free blocks count 0 [ 153.610290][T12572] EXT4-fs (loop7): Free/Dirty block details [ 153.617778][T12572] EXT4-fs (loop7): free_blocks=0 [ 153.622940][T12572] EXT4-fs (loop7): dirty_blocks=1 [ 153.628337][T12572] EXT4-fs (loop7): Block reservation details [ 153.634775][T12572] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 153.674133][T10445] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.700183][ T28] audit: type=1400 audit(1772494171.585:918): avc: denied { connect } for pid=12580 comm="syz.7.3655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 153.767207][T12586] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3657'. [ 153.809109][ T28] audit: type=1400 audit(1772494171.695:919): avc: denied { read } for pid=3395 comm="kworker/0:4" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36588 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 153.857563][T12595] loop7: detected capacity change from 0 to 512 [ 153.866529][T12595] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 153.886305][T12595] EXT4-fs (loop7): 1 truncate cleaned up [ 153.892517][T12595] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.914095][T12595] EXT4-fs error (device loop7): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.7.3662: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 153.936904][T12597] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 153.947047][T12595] EXT4-fs (loop7): Remounting filesystem read-only [ 153.947163][T12597] SELinux: failed to load policy [ 153.985313][T10445] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.017379][ T28] audit: type=1400 audit(1772494171.905:920): avc: denied { read open } for pid=12602 comm="syz.7.3664" path="/" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.043165][T12605] loop4: detected capacity change from 0 to 512 [ 154.063627][T12605] EXT4-fs: Ignoring removed nobh option [ 154.070101][T12605] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 154.076989][T12611] loop7: detected capacity change from 0 to 512 [ 154.098588][T12605] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.3666: iget: bad i_size value: 38620345925642 [ 154.113500][T12611] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 154.129849][T12611] EXT4-fs (loop7): 1 truncate cleaned up [ 154.139741][T12605] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 154.139879][T12605] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3666: couldn't read orphan inode 15 (err -117) [ 154.142472][T12611] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.149068][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 154.149083][ C0] EXT4-fs (loop4): initial error at time 1772494172: ext4_orphan_get:1391: inode 15 [ 154.149118][ C0] EXT4-fs (loop4): last error at time 1772494172: ext4_orphan_get:1391: inode 15 [ 154.160864][T12605] loop4: lost filesystem error report for type 5 error -117 [ 154.178755][T12614] loop3: detected capacity change from 0 to 8192 [ 154.213740][T12614] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.215182][T12605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.290944][T10445] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.315051][T12605] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3666: bg 0: block 5: invalid block bitmap [ 154.346216][T12605] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 154.370184][T12605] EXT4-fs (loop4): This should not happen!! Data will be lost [ 154.370184][T12605] [ 154.390040][T12605] EXT4-fs (loop4): Total free blocks count 0 [ 154.402923][T12605] EXT4-fs (loop4): Free/Dirty block details [ 154.413478][T12620] loop7: detected capacity change from 0 to 512 [ 154.422414][T12605] EXT4-fs (loop4): free_blocks=0 [ 154.443419][T12605] EXT4-fs (loop4): dirty_blocks=1 [ 154.448571][T12605] EXT4-fs (loop4): Block reservation details [ 154.455896][T12605] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 154.512481][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.529215][T12626] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3675'. [ 154.544727][T12628] loop4: detected capacity change from 0 to 512 [ 154.554166][T12628] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.175466][T12683] IPVS: You probably need to specify IP address on multicast interface. [ 155.183997][T12683] IPVS: Error connecting to the multicast addr [ 155.316814][T12701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.409018][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.835363][T12731] IPVS: You probably need to specify IP address on multicast interface. [ 155.844151][T12731] IPVS: Error connecting to the multicast addr [ 155.888895][T12750] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.907157][T12750] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.925197][T12750] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3730: bg 0: block 217: padding at end of block bitmap is not set [ 155.964262][ T9361] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.003238][T12756] syzkaller1: entered promiscuous mode [ 156.009583][T12756] syzkaller1: entered allmulticast mode [ 156.315595][T12777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3741'. [ 156.324697][T12777] netlink: 'syz.2.3741': attribute type 30 has an invalid length. [ 156.335853][ T41] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.353453][ T41] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.365126][ T41] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.373990][ T41] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.744178][T12808] netem: change failed [ 156.788665][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 156.788743][ T28] audit: type=1400 audit(1772494174.675:931): avc: denied { write } for pid=12809 comm="syz.2.3757" lport=33651 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 156.839583][T12818] netlink: 'syz.2.3759': attribute type 13 has an invalid length. [ 157.023566][ T41] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.053563][ T41] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.080668][ T41] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.113425][ T41] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.147993][ T41] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.162869][T12841] set_capacity_and_notify: 4 callbacks suppressed [ 157.162881][T12841] loop7: detected capacity change from 0 to 512 [ 157.185686][ T41] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.207085][ T41] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.230426][ T41] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.252055][T12841] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 157.299172][T12841] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.3770: iget: bad i_size value: 38620345925642 [ 157.326732][T12841] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 157.326939][T12841] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3770: couldn't read orphan inode 15 (err -117) [ 157.336156][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 157.336176][ C0] EXT4-fs (loop7): initial error at time 1772494431: ext4_orphan_get:1391: inode 15 [ 157.336232][ C0] EXT4-fs (loop7): last error at time 1772494431: ext4_orphan_get:1391: inode 15 [ 157.350432][T12857] loop4: detected capacity change from 0 to 1024 [ 157.380027][T12841] loop7: lost filesystem error report for type 5 error -117 [ 157.380697][T12841] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.422014][T12857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 157.443500][T12857] ext4 filesystem being mounted at /689/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.468772][T12857] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 3: comm syz.4.3776: lblock 3 mapped to illegal pblock 3 (length 3) [ 157.483438][T10445] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.492994][T12857] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 157.507406][T12857] EXT4-fs (loop4): This should not happen!! Data will be lost [ 157.507406][T12857] [ 157.517991][T12866] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 8: comm syz.4.3776: lblock 8 mapped to illegal pblock 8 (length 8) [ 157.569056][T12866] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 157.611690][T12866] EXT4-fs (loop4): This should not happen!! Data will be lost [ 157.611690][T12866] [ 157.673831][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 157.830245][T12895] loop4: detected capacity change from 0 to 512 [ 157.876350][T12895] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.911118][T12895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.959961][T12895] ext4 filesystem being mounted at /691/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.010378][T12895] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.3794: corrupted xattr block 6: invalid header [ 158.066450][T12895] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 158.116852][T12895] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.3794: corrupted xattr block 6: invalid header [ 158.135423][T12904] loop6: detected capacity change from 0 to 512 [ 158.154607][T12895] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 158.167107][T12895] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.3794: corrupted xattr block 6: invalid header [ 158.208279][T12895] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 158.222658][T12895] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.3794: corrupted xattr block 6: invalid header [ 158.239517][T12895] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 158.263226][T12895] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.3794: corrupted xattr block 6: invalid header [ 158.282633][ T28] audit: type=1400 audit(1772494432.146:932): avc: denied { add_name } for pid=12894 comm="syz.4.3794" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.304244][T12895] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 158.354596][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.453971][ T28] audit: type=1400 audit(1772494432.346:933): avc: denied { bind } for pid=12935 comm="syz.4.3810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 159.373775][T12968] loop3: detected capacity change from 0 to 512 [ 159.386503][T12968] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 159.407731][T12968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.407856][T12968] ext4 filesystem being mounted at /401/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.461557][ T7142] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.491965][T12979] syzkaller1: entered promiscuous mode [ 159.492020][T12979] syzkaller1: entered allmulticast mode [ 160.582819][T13015] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 160.592854][ T28] audit: type=1400 audit(1772494434.476:934): avc: denied { relabelto } for pid=13013 comm="syz.2.3843" name="bus" dev="tmpfs" ino=4460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 160.633610][T13019] loop4: detected capacity change from 0 to 512 [ 160.653808][T13019] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.3844: corrupted in-inode xattr: bad e_name length [ 160.654525][ T28] audit: type=1400 audit(1772494434.476:935): avc: denied { associate } for pid=13013 comm="syz.2.3843" name="bus" dev="tmpfs" ino=4460 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 160.683023][T13019] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 160.697974][T13019] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3844: couldn't read orphan inode 15 (err -117) [ 160.707200][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 160.707216][ C0] EXT4-fs (loop4): initial error at time 1772494434: ext4_iget_extra_inode:5025: inode 15 [ 160.707245][ C0] EXT4-fs (loop4): last error at time 1772494434: ext4_iget_extra_inode:5025: inode 15 [ 160.776980][ T28] audit: type=1400 audit(1772494434.486:936): avc: denied { rmdir } for pid=3311 comm="syz-executor" name="bus" dev="tmpfs" ino=4460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 160.833434][T13019] loop4: lost filesystem error report for type 5 error -117 [ 160.834110][T13019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.888239][ T28] audit: type=1400 audit(1772494434.776:937): avc: denied { read } for pid=13029 comm="syz.7.3849" path="socket:[38923]" dev="sockfs" ino=38923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 160.932867][T13036] loop7: detected capacity change from 0 to 512 [ 160.957215][T13019] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.3844: dx entry: limit 0 != root limit 125 [ 160.975100][T13019] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3844: Corrupt directory, running e2fsck is recommended [ 161.004744][T13019] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.3844: dx entry: limit 0 != root limit 125 [ 161.016782][T13036] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #3: comm syz.7.3852: corrupted inode contents [ 161.029422][T13019] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3844: Corrupt directory, running e2fsck is recommended [ 161.042395][T13036] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 161.042549][T13019] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 3: comm syz.4.3844: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 161.051624][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 161.051651][ C1] EXT4-fs (loop7): initial error at time 1772494434: ext4_do_update_inode:5569: inode 3 [ 161.051678][ C1] EXT4-fs (loop7): last error at time 1772494434: ext4_do_update_inode:5569: inode 3 [ 161.097057][T13036] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #3: comm syz.7.3852: mark_inode_dirty error [ 161.108358][T13036] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 161.112917][T13036] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #3: comm syz.7.3852: corrupted inode contents [ 161.134626][T13036] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 161.135067][T13036] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #3: comm syz.7.3852: mark_inode_dirty error [ 161.148760][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.155495][T13036] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 161.182629][T13036] Quota error (device loop7): write_blk: dquota write failed [ 161.209798][T13036] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 161.251151][T13036] EXT4-fs error (device loop7): ext4_acquire_dquot:7003: comm syz.7.3852: Failed to acquire dquot type 0 [ 161.297101][T13036] loop7: lost filesystem error report for type 5 error -117 [ 161.303211][T13036] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #16: comm syz.7.3852: corrupted inode contents [ 161.329474][T13036] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 161.329908][T13036] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #16: comm syz.7.3852: mark_inode_dirty error [ 161.356496][T13036] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 161.356771][T13036] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #16: comm syz.7.3852: corrupted inode contents [ 161.397578][T13036] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 161.397798][T13036] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.3852: mark_inode_dirty error [ 161.452497][T13036] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 161.455412][T13036] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #16: comm syz.7.3852: corrupted inode contents [ 161.493450][T13036] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 161.494612][T13036] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 161.522452][T13036] loop7: lost filesystem error report for type 5 error -117 [ 161.523116][T13036] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #16: comm syz.7.3852: corrupted inode contents [ 161.558704][T13036] EXT4-fs error (device loop7): ext4_truncate:4587: inode #16: comm syz.7.3852: mark_inode_dirty error [ 161.585899][T13036] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 161.608967][T13036] loop7: lost filesystem error report for type 5 error -117 [ 161.611167][T13036] EXT4-fs (loop7): 1 truncate cleaned up [ 161.633753][T13036] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.664915][T13036] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.705565][T13036] EXT4-fs warning (device loop7): ext4_es_cache_extent:1082: inode #3: comm syz.7.3852: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 161.705565][T13036] [ 162.343609][T10445] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.396065][T13070] loop4: detected capacity change from 0 to 1024 [ 162.404181][T13070] EXT4-fs: Ignoring removed bh option [ 162.424787][T13070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.530824][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.570074][T13097] Invalid logical block size (6) [ 162.586646][T13086] loop3: detected capacity change from 0 to 512 [ 162.742734][ T3396] kernel read not supported for file /newroot/882 (pid: 3396 comm: kworker/0:5) [ 163.534810][T13135] loop4: detected capacity change from 0 to 512 [ 163.543133][ T118] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.570919][ T118] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.590192][ T118] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.609184][ T118] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.835786][ T28] audit: type=1400 audit(1772494437.726:938): avc: denied { mount } for pid=13165 comm="syz.3.3911" name="/" dev="mqueue" ino=16139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 163.888563][ T28] audit: type=1326 audit(1772494437.776:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13172 comm="syz.2.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee54c629 code=0x7ffc0000 [ 163.943403][ T28] audit: type=1326 audit(1772494437.776:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13172 comm="syz.2.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee54c629 code=0x7ffc0000 [ 163.983473][ T28] audit: type=1326 audit(1772494437.776:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13172 comm="syz.2.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee54c629 code=0x7ffc0000 [ 164.025451][T13186] sock: sock_set_timeout: `syz.3.3919' (pid 13186) tries to set negative timeout [ 164.043429][ T28] audit: type=1326 audit(1772494437.776:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13172 comm="syz.2.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee54c629 code=0x7ffc0000 [ 164.083454][ T28] audit: type=1326 audit(1772494437.776:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13172 comm="syz.2.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fbcee54c629 code=0x7ffc0000 [ 164.152177][ T28] audit: type=1326 audit(1772494437.776:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13172 comm="syz.2.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee54c629 code=0x7ffc0000 [ 164.213488][ T28] audit: type=1326 audit(1772494437.776:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13172 comm="syz.2.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee54c629 code=0x7ffc0000 [ 164.263393][ T28] audit: type=1326 audit(1772494437.776:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13172 comm="syz.2.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee54c629 code=0x7ffc0000 [ 164.311449][ T28] audit: type=1326 audit(1772494437.776:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13172 comm="syz.2.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee54c629 code=0x7ffc0000 [ 164.836046][T13215] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 165.416786][T13245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.463543][T13245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.487238][T13240] loop3: detected capacity change from 0 to 512 [ 166.302114][T13275] loop4: detected capacity change from 0 to 256 [ 166.320459][T13277] netlink: 'syz.6.3957': attribute type 3 has an invalid length. [ 166.333230][T13275] FAT-fs (loop4): bogus number of FAT sectors [ 166.363440][T13277] netlink: 13435 bytes leftover after parsing attributes in process `syz.6.3957'. [ 166.372709][T13275] FAT-fs (loop4): Can't find a valid FAT filesystem [ 166.395893][T13279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3958'. [ 166.899677][T13302] loop6: detected capacity change from 0 to 512 [ 166.941432][T13302] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 166.943329][T13308] batadv_slave_1: entered promiscuous mode [ 166.950808][T13302] System zones: 0-2, 18-18, 34-34 [ 166.961715][T13302] EXT4-fs (loop6): too many log groups per flexible block group [ 166.971499][T13302] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 166.978983][T13302] EXT4-fs (loop6): mount failed [ 166.985577][T13306] batadv_slave_1: left promiscuous mode [ 167.008654][T13310] loop3: detected capacity change from 0 to 512 [ 167.042749][T13310] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 167.071946][T13310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.090625][T13310] ext4 filesystem being mounted at /436/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.140968][ T7142] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 167.164737][ T7142] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 167.246757][ T8228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.468116][ T30] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.505583][ T30] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.589463][T13332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.602009][ T30] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.603533][T13332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.625556][ T30] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.696442][ T30] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.723189][ T30] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.801609][ T30] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 167.817629][ T30] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.843528][ T30] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.938172][T13338] chnl_net:caif_netlink_parms(): no params data found [ 168.308957][ T30] bridge_slave_1: left allmulticast mode [ 168.326878][ T30] bridge_slave_1: left promiscuous mode [ 168.332607][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.354113][ T30] bridge_slave_0: left allmulticast mode [ 168.359823][ T30] bridge_slave_0: left promiscuous mode [ 168.373507][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.575277][ T30] bond0 (unregistering): left promiscuous mode [ 168.581464][ T30] bond_slave_0: left promiscuous mode [ 168.593475][ T30] bond_slave_1: left promiscuous mode [ 168.606907][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.624786][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.634534][ T30] bond0 (unregistering): Released all slaves [ 168.675537][T13338] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.682664][T13338] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.696374][ T30] IPVS: stopping backup sync thread 11166 ... [ 168.702618][T13338] bridge_slave_0: entered allmulticast mode [ 168.725557][T13338] bridge_slave_0: entered promiscuous mode [ 168.732494][T13338] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.753419][T13338] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.760644][T13338] bridge_slave_1: entered allmulticast mode [ 168.773924][T13338] bridge_slave_1: entered promiscuous mode [ 168.785603][ T30] hsr_slave_0: left promiscuous mode [ 168.803514][ T30] hsr_slave_1: left promiscuous mode [ 168.823527][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.830912][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.853855][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.861257][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.886573][ T30] veth1_macvtap: left promiscuous mode [ 168.892135][ T30] veth0_macvtap: left promiscuous mode [ 168.913503][ T30] veth1_vlan: left promiscuous mode [ 168.918734][ T30] veth0_vlan: left promiscuous mode [ 169.045931][ T30] team0 (unregistering): Port device team_slave_1 removed [ 169.065898][ T30] team0 (unregistering): Port device team_slave_0 removed [ 169.143250][T13338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.164850][T13338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.220901][T13338] team0: Port device team_slave_0 added [ 169.236976][T13338] team0: Port device team_slave_1 added [ 169.267283][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 169.267299][ T28] audit: type=1400 audit(1772494443.156:957): avc: denied { nlmsg_write } for pid=13389 comm="syz.2.3985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 169.297093][T13338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.314925][T13338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.340990][ T28] audit: type=1400 audit(1772494443.156:958): avc: denied { audit_write } for pid=13389 comm="syz.2.3985" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 169.361422][T13338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.392397][T13338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.399649][ T28] audit: type=1107 audit(1772494443.156:959): pid=13389 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 169.414626][T13338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.442149][T13338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.547673][ T30] IPVS: stop unused estimator thread 0... [ 169.549308][T13338] hsr_slave_0: entered promiscuous mode [ 169.564166][T13338] hsr_slave_1: entered promiscuous mode [ 169.749927][T13338] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 169.765959][T13338] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 169.776723][T13338] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 169.797450][T13338] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 169.797762][T13430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3995'. [ 169.851612][T13385] loop4: detected capacity change from 0 to 512 [ 169.932371][T13385] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 169.953854][T13338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.962402][T13385] System zones: 0-2, 18-18, 34-34 [ 169.987230][T13338] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.996379][T13385] EXT4-fs (loop4): too many log groups per flexible block group [ 170.015313][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.022367][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.041291][T13385] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 170.056499][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.063571][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.074091][T13385] EXT4-fs (loop4): mount failed [ 170.096165][T13338] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.108351][T13338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.216171][T13338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.267982][ T28] audit: type=1400 audit(1772494444.156:960): avc: denied { bind } for pid=13471 comm="syz.6.4006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 170.318416][ T28] audit: type=1400 audit(1772494444.156:961): avc: denied { name_bind } for pid=13471 comm="syz.6.4006" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 170.330705][T13480] loop6: detected capacity change from 0 to 256 [ 170.382484][ T28] audit: type=1400 audit(1772494444.156:962): avc: denied { node_bind } for pid=13471 comm="syz.6.4006" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 170.424275][ T28] audit: type=1400 audit(1772494444.306:963): avc: denied { watch watch_reads } for pid=13478 comm="syz.6.4008" path="/273/file1" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 170.567463][T13338] veth0_vlan: entered promiscuous mode [ 170.575949][T13338] veth1_vlan: entered promiscuous mode [ 170.606202][T13338] veth0_macvtap: entered promiscuous mode [ 170.626836][T13338] veth1_macvtap: entered promiscuous mode [ 170.663945][T13338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.683417][T13338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.702657][ T64] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.711985][ T64] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.721225][ T64] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.740230][ T64] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.484561][ T28] audit: type=1326 audit(1772494445.366:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13535 comm="syz.2.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee54c629 code=0x7ffc0000 [ 171.565661][ T28] audit: type=1326 audit(1772494445.366:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13535 comm="syz.2.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee54c629 code=0x7ffc0000 [ 171.629320][ T28] audit: type=1326 audit(1772494445.366:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13535 comm="syz.2.4027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee54c629 code=0x7ffc0000 [ 171.682184][T13540] netlink: 'syz.6.4028': attribute type 3 has an invalid length. [ 171.708263][T13540] netlink: 'syz.6.4028': attribute type 1 has an invalid length. [ 171.733742][T13540] netlink: 198116 bytes leftover after parsing attributes in process `syz.6.4028'. [ 172.145932][ T35] kernel write not supported for file [eventfd] (pid: 35 comm: kworker/1:1) [ 172.285882][T13561] geneve2: entered promiscuous mode [ 172.813653][T13600] 9pnet: p9_errstr2errno: server reported unknown error [ 173.374335][T13648] loop6: detected capacity change from 0 to 128 [ 173.389040][T13650] loop8: detected capacity change from 0 to 512 [ 173.403830][T13650] EXT4-fs: Ignoring removed oldalloc option [ 173.439895][T13650] EXT4-fs (loop8): 1 truncate cleaned up [ 173.456264][T13648] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 173.480333][T13650] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.496080][T13648] FAT-fs (loop6): Filesystem has been set read-only [ 173.507545][T13650] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4077: invalid indirect mapped block 234881024 (level 0) [ 173.530830][T13650] EXT4-fs (loop8): Remounting filesystem read-only [ 173.561202][T13338] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.651758][ T118] Bluetooth: hci0: Frame reassembly failed (-84) [ 173.754080][T13670] loop4: detected capacity change from 0 to 512 [ 173.775978][T13670] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 173.803857][T13670] EXT4-fs (loop4): 1 truncate cleaned up [ 173.814415][T13670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.850320][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.503296][T13694] loop8: detected capacity change from 0 to 128 [ 174.552744][T13695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4094'. [ 174.945116][T13701] loop8: detected capacity change from 0 to 1024 [ 174.965190][T13701] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 174.977819][T13701] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.004868][T13701] EXT4-fs (loop8): shut down requested (1) [ 175.041049][T13338] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 175.165769][T13721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4107'. [ 175.185845][ T28] kauditd_printk_skb: 117 callbacks suppressed [ 175.185859][ T28] audit: type=1400 audit(1772494449.076:1084): avc: denied { watch_reads } for pid=13722 comm="syz.4.4108" path="/767/file0" dev="tmpfs" ino=3971 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 175.233858][T13726] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4109'. [ 175.242898][T13726] chnl_net:caif_netlink_parms(): no params data found [ 175.695053][ T3564] Bluetooth: hci0: command 0x1003 tx timeout [ 175.701135][T10042] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 177.054908][T13801] netlink: 92 bytes leftover after parsing attributes in process `syz.8.4138'. [ 177.317088][T13813] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4144'. [ 177.790614][T13838] loop8: detected capacity change from 0 to 512 [ 177.805906][T13838] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 177.834144][T13838] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.846815][T13838] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.893738][T13338] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.350315][T13865] deleting an unspecified loop device is not supported. [ 178.353396][ T28] audit: type=1400 audit(1772494452.236:1085): avc: denied { write } for pid=13864 comm="syz.4.4167" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 178.595123][T13885] loop6: detected capacity change from 0 to 512 [ 178.628526][T13885] EXT4-fs (loop6): 1 orphan inode deleted [ 178.643906][T13885] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.659993][ T28] audit: type=1400 audit(1772494452.546:1086): avc: denied { mounton } for pid=13882 comm="syz.6.4176" path="/310/file0" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 178.739921][T13897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4182'. [ 178.754931][ T9361] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.766134][T13897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4182'. [ 178.938978][T13924] netlink: 'syz.2.4190': attribute type 6 has an invalid length. [ 178.974996][ T28] audit: type=1400 audit(1772494452.866:1087): avc: denied { connect } for pid=13928 comm="syz.6.4192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 178.998563][ T50] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.042289][T13893] chnl_net:caif_netlink_parms(): no params data found [ 179.073994][ T50] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.151945][ T50] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.214564][T13893] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.228206][T13893] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.236986][T13893] bridge_slave_0: entered allmulticast mode [ 179.249972][T13893] bridge_slave_0: entered promiscuous mode [ 179.265419][ T50] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.277269][T13893] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.293552][T13893] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.306258][T13893] bridge_slave_1: entered allmulticast mode [ 179.317026][T13961] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4203'. [ 179.320947][T13893] bridge_slave_1: entered promiscuous mode [ 179.362794][T13893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.385246][T13893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.435494][T13893] team0: Port device team_slave_0 added [ 179.448880][T13893] team0: Port device team_slave_1 added [ 179.569271][T13975] lo: entered allmulticast mode [ 179.574456][T13984] lo: left allmulticast mode [ 179.586624][T13893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.594120][T13893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.620350][T13893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.631905][T13893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.638918][T13893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.664938][T13893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.675855][ T50] tipc: Disabling bearer [ 179.681210][ T50] tipc: Left network mode [ 179.695174][ T50] hsr_slave_0: left promiscuous mode [ 179.700786][ T50] hsr_slave_1: left promiscuous mode [ 179.709873][ T50] veth1_macvtap: left promiscuous mode [ 179.715385][ T50] veth0_macvtap: left promiscuous mode [ 179.720841][ T50] veth1_vlan: left promiscuous mode [ 179.726329][ T50] veth0_vlan: left promiscuous mode [ 179.786766][T13989] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4217'. [ 179.834967][T13893] hsr_slave_0: entered promiscuous mode [ 179.840997][T13893] hsr_slave_1: entered promiscuous mode [ 179.852055][T13893] debugfs: 'hsr0' already exists in 'hsr' [ 179.864217][T13893] Cannot create hsr debugfs directory [ 180.026501][T13893] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 180.044129][T13893] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 180.060836][T13893] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 180.069708][T13893] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 180.196133][T13893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.221900][T13893] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.256301][ T1416] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.263422][ T1416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.301434][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.308516][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.337993][T13893] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.366607][T13893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.455104][T13893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.691567][T13893] veth0_vlan: entered promiscuous mode [ 180.710404][T13893] veth1_vlan: entered promiscuous mode [ 180.735377][T13893] veth0_macvtap: entered promiscuous mode [ 180.755806][T13893] veth1_macvtap: entered promiscuous mode [ 180.782528][T13893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.806037][T13893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.830291][ T50] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.847981][ T50] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.857082][ T50] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.882777][ T50] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.001380][T14152] loop9: detected capacity change from 0 to 1024 [ 181.013330][T14159] tipc: Started in network mode [ 181.018569][T14159] tipc: Node identity ac14140f, cluster identity 4711 [ 181.025462][T14152] EXT4-fs: Ignoring removed orlov option [ 181.031367][T14159] tipc: New replicast peer: 255.255.255.255 [ 181.044587][T14159] tipc: Enabled bearer , priority 10 [ 181.053521][T14152] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.161242][T13893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.208576][ T28] audit: type=1400 audit(1772494455.096:1088): avc: denied { connect } for pid=14181 comm="syz.8.4247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.324016][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 181.364515][ T28] audit: type=1400 audit(1772494455.246:1089): avc: denied { mount } for pid=14198 comm="syz.9.4251" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 182.184914][ T10] tipc: Node number set to 2886997007 [ 182.392238][ T28] audit: type=1326 audit(1772494456.276:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14269 comm="syz.6.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6659e7c629 code=0x7ffc0000 [ 182.431066][ T28] audit: type=1326 audit(1772494456.276:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14269 comm="syz.6.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6659e7c629 code=0x7ffc0000 [ 182.455571][ T28] audit: type=1326 audit(1772494456.276:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14269 comm="syz.6.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f6659e7c629 code=0x7ffc0000 [ 182.479949][ T28] audit: type=1400 audit(1772494456.276:1093): avc: denied { kexec_image_load } for pid=14269 comm="syz.6.4275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 182.539965][ T28] audit: type=1326 audit(1772494456.276:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14269 comm="syz.6.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6659e7c629 code=0x7ffc0000 [ 182.564164][ T28] audit: type=1326 audit(1772494456.276:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14269 comm="syz.6.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f6659e7c629 code=0x7ffc0000 [ 182.590140][ T28] audit: type=1326 audit(1772494456.276:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14269 comm="syz.6.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6659e7c629 code=0x7ffc0000 [ 182.631781][ T28] audit: type=1326 audit(1772494456.276:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14269 comm="syz.6.4275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6659e7c629 code=0x7ffc0000 [ 182.660918][T14281] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4280'. [ 182.877764][T14295] loop6: detected capacity change from 0 to 8192 [ 182.924859][ T3304] loop6: p1 p2 p4 < > [ 182.929018][ T3304] loop6: partition table partially beyond EOD, truncated [ 182.936604][ T3304] loop6: p1 start 16777216 is beyond EOD, truncated [ 182.949864][ T3304] loop6: p2 size 515840 extends beyond EOD, truncated [ 182.961885][ T3304] loop6: p4 start 16777216 is beyond EOD, truncated [ 182.975536][T14295] loop6: p1 p2 p4 < > [ 182.980710][T14295] loop6: partition table partially beyond EOD, truncated [ 182.993996][T14295] loop6: p1 start 16777216 is beyond EOD, truncated [ 183.000656][T14295] loop6: p2 size 515840 extends beyond EOD, truncated [ 183.009658][T14295] loop6: p4 start 16777216 is beyond EOD, truncated [ 183.122137][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 183.154957][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 183.373414][T10042] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 183.748714][T14363] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14363 comm=syz.4.4316 [ 183.800794][T14367] loop8: detected capacity change from 0 to 1024 [ 183.814800][T14367] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.858066][T14365] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14365 comm=syz.4.4317 [ 183.871448][T14367] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.962046][T13338] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.075873][T14380] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4323'. [ 184.092432][T14384] 9p: Bad value for 'rfdno' [ 184.187472][T14403] loop9: detected capacity change from 0 to 128 [ 184.260104][T14414] veth1_to_bond: entered allmulticast mode [ 184.283727][T14414] veth1_to_bond: entered promiscuous mode [ 184.296285][T14413] veth1_to_bond: left promiscuous mode [ 184.301830][T14413] veth1_to_bond: left allmulticast mode [ 184.560360][T14435] loop8: detected capacity change from 0 to 256 [ 184.802986][T14403] bio_check_eod: 67 callbacks suppressed [ 184.803002][T14403] syz.9.4332: attempt to access beyond end of device [ 184.803002][T14403] loop9: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 184.822832][T14403] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 184.846919][T14447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4350'. [ 185.060499][T14464] loop9: detected capacity change from 0 to 128 [ 185.068448][T14464] FAT-fs (loop9): Directory bread(block 524322) failed [ 185.075398][T14464] FAT-fs (loop9): Directory bread(block 524323) failed [ 185.082356][T14464] FAT-fs (loop9): Directory bread(block 524324) failed [ 185.089262][T14464] FAT-fs (loop9): Directory bread(block 524325) failed [ 185.096179][T14464] FAT-fs (loop9): Directory bread(block 524326) failed [ 185.103009][T14464] FAT-fs (loop9): Directory bread(block 524327) failed [ 185.109858][T14464] FAT-fs (loop9): Directory bread(block 524328) failed [ 185.116711][T14464] FAT-fs (loop9): Directory bread(block 524329) failed [ 185.368849][T14471] loop6: detected capacity change from 0 to 512 [ 185.385732][T14471] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.398516][T14471] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.475480][ T9361] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.512120][T14478] syzkaller1: entered promiscuous mode [ 185.518151][T14478] syzkaller1: entered allmulticast mode [ 185.864532][T14530] netlink: 'syz.9.4381': attribute type 1 has an invalid length. [ 186.041383][T14551] bond_slave_0: entered promiscuous mode [ 186.047129][T14551] bond_slave_1: entered promiscuous mode [ 186.058460][T14551] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 186.067836][T14551] team0: Port device macvlan2 added [ 186.138535][T14564] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4395'. [ 186.215394][T14575] netlink: 'syz.4.4399': attribute type 10 has an invalid length. [ 186.248837][T14575] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4399'. [ 186.266841][T14575] team0: Port device geneve1 added [ 186.283683][ T30] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.293804][ T30] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.330886][ T30] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.357963][ T30] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.692316][T14702] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 187.778648][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 187.778665][ T28] audit: type=1326 audit(1772494461.666:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14707 comm="syz.9.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016ab7c629 code=0x7ffc0000 [ 187.863303][ T28] audit: type=1326 audit(1772494461.666:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14707 comm="syz.9.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016ab7c629 code=0x7ffc0000 [ 187.904438][ T28] audit: type=1326 audit(1772494461.666:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14707 comm="syz.9.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f016ab7c629 code=0x7ffc0000 [ 187.981902][ T28] audit: type=1326 audit(1772494461.666:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14707 comm="syz.9.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016ab7c629 code=0x7ffc0000 [ 188.027722][ T28] audit: type=1326 audit(1772494461.666:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14707 comm="syz.9.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016ab7c629 code=0x7ffc0000 [ 188.943532][T14749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4435'. [ 188.981591][T14753] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 189.053766][T14761] loop9: detected capacity change from 0 to 1024 [ 189.075939][T14761] EXT4-fs: quotafile must be on filesystem root [ 189.094769][T14768] loop8: detected capacity change from 0 to 512 [ 189.141389][T14768] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.163671][T14768] ext4 filesystem being mounted at /106/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.220576][T13338] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.294975][ T28] audit: type=1400 audit(1772494463.186:1126): avc: denied { ioctl } for pid=14798 comm="syz.8.4454" path="socket:[44190]" dev="sockfs" ino=44190 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 189.325579][T14801] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4455'. [ 189.342529][ T28] audit: type=1400 audit(1772494463.186:1127): avc: denied { getopt } for pid=14798 comm="syz.8.4454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 189.362172][T14801] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4455'. [ 189.630542][T14818] loop8: detected capacity change from 0 to 256 [ 189.792699][T14836] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 189.853064][T14844] loop8: detected capacity change from 0 to 512 [ 189.860724][T14844] EXT4-fs: Ignoring removed oldalloc option [ 189.879416][T14844] EXT4-fs (loop8): 1 truncate cleaned up [ 189.885667][T14844] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.937401][T13338] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.021679][T14854] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4479'. [ 190.073397][ T28] audit: type=1400 audit(1772494463.956:1128): avc: denied { read } for pid=14859 comm="syz.4.4482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 190.101183][T14862] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4483'. [ 190.110578][T14862] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4483'. [ 190.122339][T14862] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4483'. [ 190.136209][ T28] audit: type=1400 audit(1772494464.026:1129): avc: denied { mounton } for pid=14863 comm="syz.9.4484" path="/43/file0" dev="gadgetfs" ino=3899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 190.172191][ T28] audit: type=1400 audit(1772494464.056:1130): avc: denied { unmount } for pid=13893 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 190.208554][T14869] xt_hashlimit: size too large, truncated to 1048576 [ 190.886068][T14934] batadv_slave_1: entered promiscuous mode [ 190.892446][T14933] batadv_slave_1: left promiscuous mode [ 190.919335][T14938] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 191.434708][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811c216a00: rx timeout, send abort [ 191.443040][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811c216a00: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 191.695125][T15026] loop9: detected capacity change from 0 to 512 [ 191.716286][T15026] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 191.724689][T15026] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 191.734339][T15026] System zones: 0-1, 15-15, 18-18, 34-34 [ 191.741580][T15026] EXT4-fs (loop9): orphan cleanup on readonly fs [ 191.749189][T15026] EXT4-fs warning (device loop9): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 191.764415][T15026] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 191.772546][T15026] EXT4-fs (loop9): 1 truncate cleaned up [ 191.776523][T15058] loop8: detected capacity change from 0 to 256 [ 191.781741][T15026] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 191.797956][T15058] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 191.813250][T15058] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.847299][ T4090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.871545][T13893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.084334][T15103] netlink: 'syz.8.4577': attribute type 29 has an invalid length. [ 192.093907][T15103] netlink: 'syz.8.4577': attribute type 29 has an invalid length. [ 192.146891][T15113] loop6: detected capacity change from 0 to 128 [ 192.175307][T15113] FAT-fs (loop6): Directory bread(block 32) failed [ 192.189100][T15113] FAT-fs (loop6): Directory bread(block 33) failed [ 192.199106][T15113] FAT-fs (loop6): Directory bread(block 34) failed [ 192.206024][T15113] FAT-fs (loop6): Directory bread(block 35) failed [ 192.212706][T15113] FAT-fs (loop6): Directory bread(block 36) failed [ 192.220922][T15113] FAT-fs (loop6): Directory bread(block 37) failed [ 192.228132][T15113] FAT-fs (loop6): Directory bread(block 38) failed [ 192.234860][T15113] FAT-fs (loop6): Directory bread(block 39) failed [ 192.241450][T15113] FAT-fs (loop6): Directory bread(block 40) failed [ 192.248216][T15113] FAT-fs (loop6): Directory bread(block 41) failed [ 192.361579][T15127] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4584'. [ 192.441860][T15140] loop6: detected capacity change from 0 to 512 [ 192.474511][T15140] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.4588: inode has both inline data and extents flags [ 192.495944][T15140] fserror_report: 2 callbacks suppressed [ 192.495960][T15140] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 192.513362][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 192.528945][ C0] EXT4-fs (loop6): initial error at time 1772494722: ext4_orphan_get:1391: inode 15 [ 192.532306][T15140] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4588: couldn't read orphan inode 15 (err -117) [ 192.538350][ C0] EXT4-fs (loop6): last error at time 1772494722: ext4_orphan_get:1391: inode 15 [ 192.571802][T15140] loop6: lost filesystem error report for type 5 error -117 [ 192.572275][T15140] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.591407][T15151] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.4591'. [ 192.609752][T15151] netlink: zone id is out of range [ 192.615090][T15151] netlink: zone id is out of range [ 192.621360][T15151] netlink: zone id is out of range [ 192.626868][T15151] netlink: zone id is out of range [ 192.632285][T15151] netlink: zone id is out of range [ 192.637757][T15151] netlink: zone id is out of range [ 192.642897][T15151] netlink: zone id is out of range [ 192.648742][T15151] netlink: zone id is out of range [ 192.741553][T15168] netlink: 'syz.8.4598': attribute type 64 has an invalid length. [ 192.769875][T15168] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4598'. [ 192.807046][T15175] netlink: 'syz.8.4598': attribute type 64 has an invalid length. [ 192.829005][ T9361] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.853556][T15181] netlink: 'syz.9.4603': attribute type 3 has an invalid length. [ 193.051613][T15213] loop9: detected capacity change from 0 to 164 [ 193.058299][T15209] loop8: detected capacity change from 0 to 512 [ 193.071694][T15209] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 193.102482][T15209] EXT4-fs (loop8): 1 truncate cleaned up [ 193.127515][T15209] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.269154][T13338] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.455289][T15247] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 193.520361][T15247] EXT4-fs (loop6): 1 truncate cleaned up [ 193.533884][T15247] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.677758][T15247] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4626: bg 0: block 297: padding at end of block bitmap is not set [ 193.765493][ T9361] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.797217][T15253] sctp: [Deprecated]: syz.6.4628 (pid 15253) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.797217][T15253] Use struct sctp_sack_info instead [ 194.034167][T15274] netlink: 'syz.2.4637': attribute type 9 has an invalid length. [ 194.162191][T15280] set_capacity_and_notify: 1 callbacks suppressed [ 194.162207][T15280] loop8: detected capacity change from 0 to 512 [ 194.188235][T15280] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 194.214927][T15280] EXT4-fs (loop8): 1 truncate cleaned up [ 194.223317][T15280] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.251270][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 194.251340][ T28] audit: type=1326 audit(1772494724.135:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15279 comm="syz.8.4640" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6e55ac629 code=0x0 [ 194.456654][T15307] __nla_validate_parse: 1 callbacks suppressed [ 194.456670][T15307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4652'. [ 194.563802][ T3395] net_ratelimit: 19 callbacks suppressed [ 194.563817][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.877684][T14646] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.887047][T14646] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.907849][T14646] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.928304][T14646] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.963069][T15341] loop9: detected capacity change from 0 to 512 [ 194.971765][ T4090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.991603][T15341] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.012893][T15341] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.038432][ T28] audit: type=1400 audit(1772494724.925:1141): avc: denied { write } for pid=15340 comm="syz.9.4668" name="bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 195.097588][T13338] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.110744][ T28] audit: type=1400 audit(1772494724.925:1142): avc: denied { reparent } for pid=15340 comm="syz.9.4668" name="bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 195.114565][T13893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.182064][ T28] audit: type=1400 audit(1772494725.065:1143): avc: denied { name_bind } for pid=15356 comm="syz.4.4677" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=tcp_socket permissive=1 [ 195.391257][ T28] audit: type=1400 audit(1772494725.275:1144): avc: denied { connect } for pid=15382 comm="syz.9.4687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 195.558622][T15392] loop9: detected capacity change from 0 to 512 [ 195.595573][T15392] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.622275][T15400] loop6: detected capacity change from 0 to 1024 [ 195.641258][T15392] ext4 filesystem being mounted at /95/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.680145][T15400] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 195.694580][T13893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.706359][T15400] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.831988][ T9361] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 195.898955][T15430] netlink: 'syz.6.4707': attribute type 3 has an invalid length. [ 195.899427][T15426] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 195.956392][T15430] netlink: 'syz.6.4707': attribute type 1 has an invalid length. [ 195.964408][T15430] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.4707'. [ 195.978520][T15436] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 196.003566][ T4090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.031811][T15441] loop6: detected capacity change from 0 to 7 [ 196.061459][T15446] loop9: detected capacity change from 0 to 128 [ 196.111751][T15451] loop8: detected capacity change from 0 to 128 [ 196.135528][T15446] FAT-fs (loop9): Directory bread(block 32) failed [ 196.163504][T15446] FAT-fs (loop9): Directory bread(block 33) failed [ 196.170131][T15446] FAT-fs (loop9): Directory bread(block 34) failed [ 196.192329][T15446] FAT-fs (loop9): Directory bread(block 35) failed [ 196.199378][T15446] FAT-fs (loop9): Directory bread(block 36) failed [ 196.206351][T15446] FAT-fs (loop9): Directory bread(block 37) failed [ 196.213129][T15446] FAT-fs (loop9): Directory bread(block 38) failed [ 196.217719][T15460] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4719'. [ 196.226040][T15446] FAT-fs (loop9): Directory bread(block 39) failed [ 196.236300][T15446] FAT-fs (loop9): Directory bread(block 40) failed [ 196.243304][T15446] FAT-fs (loop9): Directory bread(block 41) failed [ 196.380648][T15467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.382567][T15466] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4724'. [ 196.421086][T15466] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4724'. [ 196.440254][T15466] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4724'. [ 196.497567][T15466] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4724'. [ 196.523426][T15466] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4724'. [ 196.552672][T15466] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4724'. [ 196.610672][T15466] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4724'. [ 196.651937][ T28] audit: type=1400 audit(1772494726.535:1145): avc: denied { create } for pid=15488 comm="syz.2.4731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 196.686223][T15493] pimreg: entered allmulticast mode [ 196.692610][T15493] pimreg: left allmulticast mode [ 196.739416][T15496] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 196.789187][ T28] audit: type=1326 audit(1772494726.675:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15499 comm="syz.2.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee54c629 code=0x7ffc0000 [ 196.853634][ T28] audit: type=1326 audit(1772494726.675:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15499 comm="syz.2.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee54c629 code=0x7ffc0000 [ 196.898746][T15509] netlink: 'syz.4.4739': attribute type 29 has an invalid length. [ 196.907737][T15509] netlink: 'syz.4.4739': attribute type 29 has an invalid length. [ 196.930699][ T28] audit: type=1326 audit(1772494726.715:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15499 comm="syz.2.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fbcee54c629 code=0x7ffc0000 [ 197.010458][T15521] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 197.022205][ T28] audit: type=1326 audit(1772494726.715:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15499 comm="syz.2.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee54c629 code=0x7ffc0000 [ 197.046175][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.079379][T15527] syz_tun: entered promiscuous mode [ 197.086167][T15527] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 197.383940][T15568] loop9: detected capacity change from 0 to 256 [ 197.404821][T15568] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 197.567754][T15584] loop9: detected capacity change from 0 to 256 [ 197.576068][T15584] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 197.590225][T15586] netlink: 'syz.2.4776': attribute type 2 has an invalid length. [ 197.603721][T15584] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 197.604348][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.623059][T15586] netlink: 'syz.2.4776': attribute type 8 has an invalid length. [ 198.083553][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.570751][ T3395] kernel write not supported for file bpf-prog (pid: 3395 comm: kworker/0:4) [ 199.090870][T15708] loop8: detected capacity change from 0 to 512 [ 199.134566][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.149331][T15708] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 199.159176][T15708] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 199.173789][T15708] System zones: 0-1, 15-15, 18-18, 34-34 [ 199.182950][T15708] EXT4-fs (loop8): orphan cleanup on readonly fs [ 199.193717][T15708] EXT4-fs warning (device loop8): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 199.208787][T15708] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 199.217134][T15708] EXT4-fs (loop8): 1 truncate cleaned up [ 199.226949][T15708] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 199.256846][T13338] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.338399][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 199.338413][ T28] audit: type=1400 audit(1772494729.225:1162): avc: denied { connect } for pid=15749 comm="syz.8.4846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 199.397158][ T28] audit: type=1400 audit(1772494729.255:1163): avc: denied { write } for pid=15749 comm="syz.8.4846" path="socket:[47659]" dev="sockfs" ino=47659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 199.479982][T15753] loop6: detected capacity change from 0 to 8192 [ 199.661705][T15782] loop6: detected capacity change from 0 to 1024 [ 199.706352][T15782] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.731272][T15782] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.4858: missing EA_INODE flag [ 199.777225][T15782] EXT4-fs (loop6): Remounting filesystem read-only [ 199.858523][ T9361] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.047151][T15804] net_ratelimit: 2 callbacks suppressed [ 200.047179][T15804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.060949][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.119805][T15804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.128329][ T141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.139934][T15803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.148126][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.163779][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.171894][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.410912][ T28] audit: type=1326 audit(1772494730.295:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15823 comm="syz.2.4874" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbcee54c629 code=0x0 [ 200.488220][ T28] audit: type=1326 audit(1772494730.375:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.9.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016ab7c629 code=0x7ffc0000 [ 200.542263][ T28] audit: type=1326 audit(1772494730.395:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.9.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f016ab7c629 code=0x7ffc0000 [ 200.613086][ T28] audit: type=1326 audit(1772494730.395:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.9.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016ab7c629 code=0x7ffc0000 [ 200.680343][ T28] audit: type=1326 audit(1772494730.395:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.9.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016ab7c629 code=0x7ffc0000 [ 200.732234][ T28] audit: type=1326 audit(1772494730.405:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.9.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f016ab7c629 code=0x7ffc0000 [ 200.784591][ T28] audit: type=1326 audit(1772494730.405:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.9.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016ab7c629 code=0x7ffc0000 [ 200.822139][ T28] audit: type=1326 audit(1772494730.405:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.9.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016ab7c629 code=0x7ffc0000 [ 201.203875][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.264952][T15892] __nla_validate_parse: 17 callbacks suppressed [ 201.264967][T15892] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4905'. [ 201.281926][T15892] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4905'. [ 201.521385][T15927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.530737][T15928] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 201.655403][T15941] loop6: detected capacity change from 0 to 1024 [ 201.679088][T15941] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 201.707685][T15941] System zones: 0-1, 3-36 [ 201.714931][T15941] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.4929: bad orphan inode 134217728 [ 201.725746][T15941] loop6: lost filesystem error report for type 5 error -117 [ 201.733358][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 201.747122][ C1] EXT4-fs (loop6): initial error at time 1772494731: ext4_orphan_get:1417 [ 201.755696][ C1] EXT4-fs (loop6): last error at time 1772494731: ext4_orphan_get:1417 [ 201.764828][T15941] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.834141][ T9361] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.262702][T15992] loop9: detected capacity change from 0 to 2048 [ 202.297197][T15992] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.323701][T15992] ext4 filesystem being mounted at /143/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 202.392636][T15992] EXT4-fs (loop9): shut down requested (1) [ 202.416019][T16008] loop6: detected capacity change from 0 to 1024 [ 202.432907][T15992] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 202.442219][T16008] EXT4-fs: inline encryption not supported [ 202.465197][T16011] xt_hashlimit: size too large, truncated to 1048576 [ 202.475068][T16008] EXT4-fs: Ignoring removed nobh option [ 202.480643][T16008] EXT4-fs: Ignoring removed bh option [ 202.482592][T15992] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 202.508147][T15992] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 202.536318][T16008] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.577658][T13893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.633100][T16008] EXT4-fs error (device loop6): mb_free_blocks:2047: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 202.788611][ T9361] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.601946][T16100] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4996'. [ 203.642130][T16100] bond1: Invalid ad_actor_system MAC address. [ 203.713545][T16100] bond1: option ad_actor_system: invalid value (4294967295) [ 203.748450][T16100] bond1 (unregistering): Released all slaves [ 203.917766][T16129] 9pnet: p9_errstr2errno: server reported unknown error 00000 [ 204.631319][T16163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5022'. [ 204.673734][T16163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5022'. [ 204.704022][T16163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5022'. [ 204.723564][T16163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5022'. [ 205.015615][T16187] loop9: detected capacity change from 0 to 512 [ 205.047070][T16187] EXT4-fs error (device loop9): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.9.5034: corrupted xattr block 95: invalid header [ 205.104933][T16187] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 205.105226][T16187] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.5034: bg 0: block 7: invalid block bitmap [ 205.114393][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 205.114428][ C0] EXT4-fs (loop9): initial error at time 1772494743: ext4_expand_extra_isize_ea:2808: inode 11 [ 205.114471][ C0] EXT4-fs (loop9): last error at time 1772494743: ext4_expand_extra_isize_ea:2808: inode 11 [ 205.289034][T16187] loop9: lost filesystem error report for type 5 error -117 [ 205.290235][T16187] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 205.338470][T16187] loop9: lost filesystem error report for type 5 error -117 [ 205.338658][T16187] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2972: inode #11: comm syz.9.5034: corrupted xattr block 95: invalid header [ 205.349197][T16213] netlink: 'syz.4.5041': attribute type 15 has an invalid length. [ 205.367727][ T3382] net_ratelimit: 11 callbacks suppressed [ 205.367746][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.397501][T16187] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 205.397701][T16187] EXT4-fs warning (device loop9): ext4_evict_inode:275: xattr delete (err -117) [ 205.426061][T16187] EXT4-fs (loop9): 1 orphan inode deleted [ 205.427132][T16216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5044'. [ 205.432190][T16187] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.489857][T16216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5044'. [ 205.567696][T13893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.603545][ T3396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.699736][T16232] netlink: 236 bytes leftover after parsing attributes in process `syz.4.5052'. [ 206.403525][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.537290][T16262] loop9: detected capacity change from 0 to 1024 [ 206.575317][T16262] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.626586][T16262] EXT4-fs error (device loop9): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 206.796682][T13893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.855703][T16271] loop9: detected capacity change from 0 to 128 [ 206.883041][T16271] msdos: Bad value for 'gid' [ 206.893585][T16271] msdos: Bad value for 'gid' [ 206.914575][T16271] __nla_validate_parse: 1 callbacks suppressed [ 206.914589][T16271] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5068'. [ 207.243933][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 207.243948][ T28] audit: type=1400 audit(1772494746.132:1178): avc: denied { nosuid_transition } for pid=16286 comm="syz.6.5075" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 207.476248][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.484405][ T28] audit: type=1400 audit(1772494746.132:1179): avc: denied { transition } for pid=16286 comm="syz.6.5075" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 207.569776][ T28] audit: type=1400 audit(1772494746.132:1180): avc: denied { entrypoint } for pid=16286 comm="syz.6.5075" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1314 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 207.606364][ T28] audit: type=1400 audit(1772494746.132:1181): avc: denied { share } for pid=16286 comm="syz.6.5075" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 207.626425][ T28] audit: type=1400 audit(1772494746.132:1182): avc: denied { noatsecure } for pid=16286 comm="syz.6.5075" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 207.748936][T16318] loop8: detected capacity change from 0 to 164 [ 207.841654][T16329] loop9: detected capacity change from 0 to 128 [ 207.872010][T16329] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 208.172972][T16352] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5099'. [ 208.200171][T16346] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5099'. [ 208.224919][ T28] audit: type=1400 audit(1772494747.112:1183): avc: denied { mounton } for pid=16356 comm="syz.8.5103" path="/proc/469/cgroup" dev="proc" ino=49872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 208.377731][T16375] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 208.409571][T16375] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 208.504524][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.646331][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.788038][T16411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5124'. [ 208.798389][T16411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5124'. [ 209.087922][ T10] kernel read not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 209.120711][ T28] audit: type=1400 audit(1772494748.002:1184): avc: denied { mounton } for pid=16439 comm="syz.4.5135" path="/" dev="cgroup2" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 209.405538][T16466] pimreg: entered allmulticast mode [ 209.418873][T16466] pimreg: left allmulticast mode [ 209.523643][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.636200][T16487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.644689][T16487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.653113][T16487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.701034][T16491] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5160'. [ 209.930090][T14667] bridge_slave_1: left allmulticast mode [ 209.947950][T14667] bridge_slave_1: left promiscuous mode [ 209.958070][T14667] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.978658][T14667] bridge_slave_0: left allmulticast mode [ 209.989797][T14667] bridge_slave_0: left promiscuous mode [ 210.002109][T14667] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.100478][T14667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.109952][T14667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.118929][T14667] bond0 (unregistering): Released all slaves [ 210.127155][T16520] netlink: 'syz.4.5168': attribute type 4 has an invalid length. [ 210.153201][T16524] loop8: detected capacity change from 0 to 1024 [ 210.198527][T14667] hsr_slave_0: left promiscuous mode [ 210.199518][T16524] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.231417][T16538] netlink: 'syz.2.5170': attribute type 6 has an invalid length. [ 210.242012][T14667] hsr_slave_1: left promiscuous mode [ 210.251053][T14667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.276292][T14667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.372254][T13338] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.427067][T14667] team0 (unregistering): Port device team_slave_1 removed [ 210.462116][T16566] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5175'. [ 210.471219][T14667] team0 (unregistering): Port device team_slave_0 removed [ 210.471271][T16566] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5175'. [ 210.525106][T16566] geneve2: entered promiscuous mode [ 210.532518][T16566] geneve2: entered allmulticast mode [ 210.560307][T16570] batadv_slave_1: entered promiscuous mode [ 210.570737][ T3382] net_ratelimit: 6 callbacks suppressed [ 210.570752][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.589283][T16572] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5180'. [ 210.622637][T16569] batadv_slave_1: left promiscuous mode [ 210.686939][T16581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.695248][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.754283][ T28] audit: type=1326 audit(1772494749.642:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16592 comm="syz.2.5188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee54c629 code=0x7ffc0000 [ 210.783698][ T28] audit: type=1326 audit(1772494749.662:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16592 comm="syz.2.5188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee54c629 code=0x7ffc0000 [ 210.811154][T16514] chnl_net:caif_netlink_parms(): no params data found [ 210.824723][ T28] audit: type=1326 audit(1772494749.662:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16592 comm="syz.2.5188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcee54c629 code=0x7ffc0000 [ 210.884788][T16599] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5191'. [ 210.955341][T16514] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.962530][T16514] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.970919][T16514] bridge_slave_0: entered allmulticast mode [ 210.978505][T16514] bridge_slave_0: entered promiscuous mode [ 210.985574][T16514] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.992818][T16514] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.000817][T16514] bridge_slave_1: entered allmulticast mode [ 211.007408][T16514] bridge_slave_1: entered promiscuous mode [ 211.054469][T16514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.073186][T16514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.090120][T14667] IPVS: stop unused estimator thread 0... [ 211.112829][T16514] team0: Port device team_slave_0 added [ 211.130393][T16514] team0: Port device team_slave_1 added [ 211.173479][T16514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.180511][T16514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.209178][T16514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.224775][T16514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.239620][T16514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.266407][T16514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.293974][T16646] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 211.347442][T16514] hsr_slave_0: entered promiscuous mode [ 211.365000][T16514] hsr_slave_1: entered promiscuous mode [ 211.376170][T16514] debugfs: 'hsr0' already exists in 'hsr' [ 211.382785][T16659] TCP: TCP_TX_DELAY enabled [ 211.385819][T16514] Cannot create hsr debugfs directory [ 211.488969][T16674] loop8: detected capacity change from 0 to 1024 [ 211.522506][T16674] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.541578][T16674] EXT4-fs: Ignoring removed orlov option [ 211.550014][T16674] EXT4-fs (loop8): can't enable nombcache during remount [ 211.584950][T13338] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.637809][ T4090] kernel write not supported for file bpf-prog (pid: 4090 comm: kworker/1:4) [ 211.848614][T16514] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 211.883183][T16514] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 211.893962][T16514] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 211.914321][T16514] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 211.972186][T16514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.985573][T16514] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.014401][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.021586][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.034437][T16750] loop9: detected capacity change from 0 to 1024 [ 212.051535][ T4090] kernel write not supported for file bpf-prog (pid: 4090 comm: kworker/1:4) [ 212.051636][T16514] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 212.072713][T16514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.085552][T16750] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.108202][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.115356][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.141400][T16750] EXT4-fs: Ignoring removed orlov option [ 212.150519][T16750] EXT4-fs (loop9): can't enable nombcache during remount [ 212.191018][T13893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.213775][T16514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.243307][T16781] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 212.326818][T16790] loop9: detected capacity change from 0 to 2048 [ 212.377499][T16790] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.391698][T16514] veth0_vlan: entered promiscuous mode [ 212.402067][T16514] veth1_vlan: entered promiscuous mode [ 212.429635][T16514] veth0_macvtap: entered promiscuous mode [ 212.437117][T16514] veth1_macvtap: entered promiscuous mode [ 212.460164][T16514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.475769][T16514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.503769][T13893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.516637][ T141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.550152][ T141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.573949][ T141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.574724][T16817] __nla_validate_parse: 1 callbacks suppressed [ 212.574738][T16817] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5234'. [ 212.625813][ T64] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.654095][T16817] IPv6: sit1: Disabled Multicast RS [ 212.919527][T16872] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5251'. [ 212.952287][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 212.952300][ T28] audit: type=1326 audit(1772494751.832:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16876 comm="syz.9.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016ab7c629 code=0x7ffc0000 [ 213.011263][ T28] audit: type=1326 audit(1772494751.832:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16876 comm="syz.9.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016ab7c629 code=0x7ffc0000 [ 213.060207][ T28] audit: type=1326 audit(1772494751.832:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16876 comm="syz.9.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016ab7c629 code=0x7ffc0000 [ 213.091703][ T28] audit: type=1326 audit(1772494751.832:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16876 comm="syz.9.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016ab7c629 code=0x7ffc0000 [ 213.138293][ T28] audit: type=1326 audit(1772494751.832:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16876 comm="syz.9.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f016ab7c629 code=0x7ffc0000 [ 213.258721][ T28] audit: type=1326 audit(1772494751.842:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16876 comm="syz.9.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016ab7c629 code=0x7ffc0000 [ 213.289743][ T28] audit: type=1326 audit(1772494751.842:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16876 comm="syz.9.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016ab7c629 code=0x7ffc0000 [ 213.315291][ T28] audit: type=1326 audit(1772494751.842:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16876 comm="syz.9.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016ab7c629 code=0x7ffc0000 [ 213.342370][ T28] audit: type=1326 audit(1772494751.842:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16876 comm="syz.9.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f016ab7c629 code=0x7ffc0000 [ 213.388179][ T28] audit: type=1326 audit(1772494751.842:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16876 comm="syz.9.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016ab7c629 code=0x7ffc0000 [ 213.488174][T16927] xt_hashlimit: size too large, truncated to 1048576 [ 213.750661][T16950] loop0: detected capacity change from 0 to 1024 [ 213.821269][T16950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.940869][T16514] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.102740][T16987] loop9: detected capacity change from 0 to 2048 [ 214.144590][T16987] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.294076][T13893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.375594][ T141] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.474538][ T141] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.572342][T17036] loop9: detected capacity change from 0 to 512 [ 214.581140][ T141] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.591054][T17036] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 214.625527][T17036] EXT4-fs (loop9): 1 truncate cleaned up [ 214.631737][T17036] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.668709][T13893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.687736][ T141] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.765869][T17060] loop9: detected capacity change from 0 to 512 [ 214.799210][T17060] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 214.821028][ T141] vlan2: left promiscuous mode [ 214.831564][ T141] bridge0: port 3(vlan2) entered disabled state [ 214.836703][T17060] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 214.866968][ T141] bridge_slave_1: left allmulticast mode [ 214.881763][ T141] bridge_slave_1: left promiscuous mode [ 214.889430][ T141] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.906195][ T141] bridge_slave_0: left promiscuous mode [ 214.911998][ T141] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.985303][ T141] team0: Port device geneve1 removed [ 215.085675][ T141] team0: Port device bond1 removed [ 215.094597][ T141] bond1 (unregistering): Released all slaves [ 215.151262][T17084] loop8: detected capacity change from 0 to 128 [ 215.298823][T17030] chnl_net:caif_netlink_parms(): no params data found [ 215.599936][T17030] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.625539][T17129] loop9: detected capacity change from 0 to 1024 [ 215.663980][T17030] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.671137][T17030] bridge_slave_0: entered allmulticast mode [ 215.719316][T17030] bridge_slave_0: entered promiscuous mode [ 215.731558][T17129] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.774283][T17030] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.806404][T17030] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.853491][T17030] bridge_slave_1: entered allmulticast mode [ 215.900572][T17030] bridge_slave_1: entered promiscuous mode [ 215.991608][T17112] ================================================================== [ 215.999690][T17112] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 216.007486][T17112] [ 216.009787][T17112] write to 0xffffea000530c418 of 8 bytes by task 16993 on cpu 1: [ 216.017475][T17112] __filemap_remove_folio+0x201/0x310 [ 216.022827][T17112] filemap_remove_folio+0x6d/0x1d0 [ 216.027918][T17112] truncate_inode_folio+0x42/0x50 [ 216.032921][T17112] shmem_undo_range+0x26d/0xb10 [ 216.037747][T17112] shmem_evict_inode+0x12e/0x510 [ 216.042662][T17112] evict+0x2af/0x510 [ 216.046535][T17112] iput+0x41a/0x580 [ 216.050320][T17112] dentry_unlink_inode+0x24f/0x260 [ 216.055409][T17112] __dentry_kill+0x13f/0x460 [ 216.059978][T17112] finish_dput+0x2b/0x200 [ 216.064284][T17112] dput+0x52/0x60 [ 216.067893][T17112] __fput+0x444/0x650 [ 216.071850][T17112] ____fput+0x1c/0x30 [ 216.075805][T17112] task_work_run+0x130/0x1a0 [ 216.080369][T17112] do_exit+0x466/0x15a0 [ 216.084502][T17112] do_group_exit+0xfe/0x140 [ 216.088984][T17112] get_signal+0xe54/0xf60 [ 216.093290][T17112] arch_do_signal_or_restart+0x96/0x450 [ 216.098814][T17112] irqentry_exit+0xf7/0x520 [ 216.103297][T17112] asm_exc_page_fault+0x26/0x30 [ 216.108121][T17112] [ 216.110422][T17112] read to 0xffffea000530c418 of 8 bytes by task 17112 on cpu 0: [ 216.118021][T17112] folio_mapping+0xa1/0xe0 [ 216.122414][T17112] evict_folios+0xdfa/0x35c0 [ 216.126976][T17112] try_to_shrink_lruvec+0x606/0x980 [ 216.132145][T17112] shrink_lruvec+0x24e/0x1b60 [ 216.136798][T17112] shrink_node+0x67e/0x20c0 [ 216.141272][T17112] do_try_to_free_pages+0x408/0xc80 [ 216.146445][T17112] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 216.152314][T17112] try_charge_memcg+0x37e/0xa10 [ 216.157143][T17112] __mem_cgroup_charge+0x65/0x150 [ 216.162145][T17112] shmem_get_folio_gfp+0x47b/0xd60 [ 216.167234][T17112] shmem_write_begin+0xfc/0x1f0 [ 216.172060][T17112] generic_perform_write+0x183/0x490 [ 216.177323][T17112] shmem_file_write_iter+0xc5/0xf0 [ 216.182416][T17112] __kernel_write_iter+0x319/0x590 [ 216.187508][T17112] dump_user_range+0xa7d/0xdb0 [ 216.192250][T17112] elf_core_dump+0x21a2/0x2330 [ 216.196992][T17112] coredump_write+0xacf/0xdf0 [ 216.201649][T17112] vfs_coredump+0x26c7/0x3130 [ 216.206301][T17112] get_signal+0xd80/0xf60 [ 216.210612][T17112] arch_do_signal_or_restart+0x96/0x450 [ 216.216136][T17112] irqentry_exit+0xf7/0x520 [ 216.220620][T17112] asm_exc_page_fault+0x26/0x30 [ 216.225446][T17112] [ 216.227743][T17112] value changed: 0xffff88810576b358 -> 0x0000000000000000 [ 216.234818][T17112] [ 216.237114][T17112] Reported by Kernel Concurrency Sanitizer on: [ 216.243238][T17112] CPU: 0 UID: 0 PID: 17112 Comm: syz.0.5298 Tainted: G W syzkaller #0 PREEMPT(full) [ 216.254145][T17112] Tainted: [W]=WARN [ 216.257918][T17112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 216.267948][T17112] ================================================================== [ 216.284529][T17030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.374834][T17030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.479437][T17030] team0: Port device team_slave_0 added [ 216.514366][T17030] team0: Port device team_slave_1 added [ 216.532832][T13893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.585432][T17030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.605677][T17030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.661093][T17030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.683452][T17030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.703422][T17030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.761036][T17030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.821780][T17030] hsr_slave_0: entered promiscuous mode [ 216.843155][T17030] hsr_slave_1: entered promiscuous mode [ 216.857388][T17030] debugfs: 'hsr0' already exists in 'hsr' [ 216.865498][T17030] Cannot create hsr debugfs directory [ 216.900447][ T141] hsr_slave_0: left promiscuous mode [ 216.906712][ T141] hsr_slave_1: left promiscuous mode [ 216.912669][ T141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.920675][ T141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.990137][ T141] team0 (unregistering): Port device team_slave_1 removed [ 217.015621][ T141] team0 (unregistering): Port device team_slave_0 removed [ 217.450575][T17030] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 217.481214][T17030] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 217.495515][T17030] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 217.509810][T17030] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 217.618118][T17030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.632375][T17030] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.644185][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.651302][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.669544][T17030] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 217.680687][T17030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.694555][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.701687][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.762542][T17030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.841207][T17030] veth0_vlan: entered promiscuous mode [ 217.855614][T17030] veth1_vlan: entered promiscuous mode [ 217.874003][T17030] veth0_macvtap: entered promiscuous mode [ 217.881714][T17030] veth1_macvtap: entered promiscuous mode [ 217.894542][T17030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.906569][T17030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.918161][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.936456][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.946573][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.959554][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.975773][ T141] IPVS: stop unused estimator thread 0...