last executing test programs: 1m37.05958592s ago: executing program 3 (id=70): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000040)='./file3\x00', 0x1010041, &(0x7f00000007c0)={[{@errors_continue}, {@sysvgroups}, {@jqfmt_vfsv1}, {@grpjquota}]}, 0x1, 0x542, &(0x7f0000000180)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrJbdSebxm2DD1VBfCuoFZ+ENSSTEHaSWZJJuwmLTfFVEES04Is++SL4BwjSF99FKNR3UVGkZvVBoe2Ve+dON5nOJCnO5C7J7wcn9557Zu73nRnmzLkzN3MDOLeejIhrETEREc9ExEy5PS1L7HVLfrv7+/eW8pJElr30dhJJua23r4vl8kp5t6mI+GY6OO7Wzu7txVaruVnWZzvryTtZtnt9bX1xtbna3Jifn3tu4fmFmws3RtLPekS88NW//uSHv/zaC7/9/Ct/uvX3a9/L8/9vlr0aff0YpaT4Wysei57JiNgcR7CKTBY97LpZcS4AABwtn+9/NCI+Xcz/Z2KimM0BAAAAZ0n2pel4J4nIAAAAgDMrjYjpSNJGeb7vdHnG6pWI+HhcTlvtrc7nVtrbG8t5W0Q9aunKWqt5I6aKcwfqUUvy+lx5jm2v/mxffT4iHo2IH89cKuqNpXZrueoPPwAAAOCcuNJ3/P/vmTRtNMrGvYqTAwAAAEanXnUCAAAAwNg5/gcAAICzr54lJ7nZkEt5AQAAAA+5r7/4Yl6y3vWvl1/e2b7dfvn6cnPrdmN9e6mx1N6801htt1eL3+xbP25/rXb7zhdiY/vubKe51Znd2tm9td7e3ujcWjt0CWwAAADgFD36qTf+mETE3hcvFSV3oWyrRWQTB288WUWGwLh8qHN6/jK+PIDTd/D9/VKFeQCnz5Qezq9a1QkAlTvuH4CGnrzz+9HnAgAAjMfVTwz//v/tlUpTA8as/P4/OdEPgABnykTVCQCV6X7/917WVXU2wGmqHTUDcFAAZ146mu//jzmVMDGgAABAxaaLkqSN8jhgOtK00Yh4pLgsYC1ZWWs1b0TERyLirZnaxbw+V9wzMZsHAAAAAAAAAAAAAAAAAAAAAAAAgBPKsiQyAAAA4EyLSP/WuzLX1Zmnp/s/H7iQ/GemWEbEKz976ad3Fzudzbl8+z/f3955vdz+bBWfYAAAAAD9esfpveN4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABil+/v3lu5nWZbt31s6zbj/+EpE1Mv4Zem2TMZUsZyKWkRc/lcSkwful0TExAji770WEY8Nip/kaUW9zOJQ/AsRaURcGlX8+JDxoxv/ygjiw3n2Rj7+fHnQ6y+NJ4vl4NffZFn+X8PHv/T98W9iyPj3yLCd1g5XH3/z17ND478W8fjk4PGnFz/J9zcg/lMn7ON3v7W7O6wt+0XE1UHjX3I41mxn/c7s1s7u9bX1xdXmanNjfn7uuYXnF24u3JhdWWs1y78DY/zok79570Ht3Q/0//IR42/R/yGP/9Mn7P+7b97d/1h3te+ZiVr8PMuuPTX4+X8sX3z2g/F7732fKd8H8nr+GKavf3tg/Cd+9YcnhuWW9395SP+n+vp/sa//107Y/2e+8f0/n/CmAMAp2NrZvb3YajU3rRxcifpDkcbDu5LPOytPI4kk8pW3DjUtVp9Yd+XV8jW22Oq92ka059+VB0fjTL6i8QgAABifB5P+/pakmoQAAAAAAAAAAAAAAAAAAADgHDr2Z8CGNaUR8WDLd35wxK+R9cfcq6arAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABH+l8AAAD//7+z1e0=") sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001000)=ANY=[@ANYBLOB="48000000100039042abd70000300000000000000", @ANYRES32=r2, @ANYBLOB="0118020003910000280012800b00010065727370616e000018000280040012000500130000000000080007007f0000016cc35d673d4de59baab9bb8d88a7b090e00700d5af43d5a28404db69edacd789"], 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r3 = socket$netlink(0x10, 0x3, 0x0) chmod(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x24) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 1m36.942891018s ago: executing program 3 (id=74): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000026c0)=0x3d) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r1 = io_uring_setup(0x7348, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x771d, 0x16, 0x0, 0xff36) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xffffffef, 0xee0, 0x9, 0x7fffffff, 0x90, "9900010000000000001300"}) 1m36.808740508s ago: executing program 3 (id=77): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x800) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 1m36.742813942s ago: executing program 3 (id=78): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x0, &(0x7f0000000900), 0x1, 0x84d, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setxattr$incfs_size(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x0, 0x3) 1m36.595182623s ago: executing program 3 (id=79): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5}, 0x38) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x8084, 0x1, 0xffffffff, 0x7, 0x4, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffea9, &(0x7f0000000940)={&(0x7f0000000100)=@deltclass={0x24, 0x29, 0x819, 0x870bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x3}, {0xa, 0x2}, {0x10, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x1800}, 0x20000080) syz_clone(0x42000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m36.307071743s ago: executing program 3 (id=80): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x2) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000280)=0x80000000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000005f9083e255d0f7a28e3f998b7fbad777d0ad5e17bda4ba9023e3ef63ad390f5052490c82d028fdc72c3818eb72c08df9e3ed91d0816594369be2ad0d8cec5723bcd8e00fe718fa12fa07824d664fee3d7081138c5d8f5adb", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf2546000000080001007063690011000200303030303a30303a31302e300000000008008e00010000000c008f0009000000000000000c0090000400000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x20000091) 1m36.306947933s ago: executing program 32 (id=80): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x2) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000280)=0x80000000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000005f9083e255d0f7a28e3f998b7fbad777d0ad5e17bda4ba9023e3ef63ad390f5052490c82d028fdc72c3818eb72c08df9e3ed91d0816594369be2ad0d8cec5723bcd8e00fe718fa12fa07824d664fee3d7081138c5d8f5adb", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf2546000000080001007063690011000200303030303a30303a31302e300000000008008e00010000000c008f0009000000000000000c0090000400000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x20000091) 44.806854916s ago: executing program 4 (id=736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e1050000006558ffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 44.682356175s ago: executing program 4 (id=738): modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0xc001200, 0x0, 0x0, 0x0, 0x0, 0x0) 43.713768693s ago: executing program 4 (id=749): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0xa18040, &(0x7f0000000680)={[{@utf8}, {@rodir}, {@fat=@quiet}, {@uni_xlate}, {@fat=@nfs_nostale_ro}, {@numtail}, {@fat=@check_normal}, {@utf8no}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@fat=@errors_remount}, {@fat=@showexec}]}, 0x1, 0x34a, &(0x7f0000000200)="$eJzs3U9oHFUYAPBvM0k2DdTNQSh6Wr0JUpqIBz0llArFHLSy+O9isKl/smshiwvxkG0uikfFi6Anbz3osWfxIOLNg1crSFW82FuhwZHdnezu7OyaFMxW29/vUD6+97557808upOEvLy2GlsX5+LSzZs3YmGhFLOrZ1fjVimWYiaS6LkSAMC95Faaxp9pT64hGdf748WDaH4KcwMAjkf38/+Nk4NE+W7OBgCYholf/+c9NzZ7+dimBQAco8Ln/6O55pFv88+O/7EAAPC/8sLLrzy7th5xoVpdiGh80Kq1avH0oH3tUrwV9diMM1GJ/Yjei0LvbaHz7zPn18+dqXb8uhS1TkWrFtFot2q9N4W1pFtfjuWoxFJWn/brk079cre+GhFX2t3xo1Fq1eZiMRv/p8XYjJWoxIOF+ojz6+dWqtkFao2D+nbEXiwcLKIz/9NRiR9ej8tRj4vRqR3Mf3e5Wj2brufqW1fL3X6HmDuWhwIAAAAAAAAAAAAAAAAAAAAAwD3vdLVvqX/+Tdpot96/MNphKXc+Tq3XnJ0PtBeLUYn9tHxwOs+Hyej5QPnzeVq12Zi5qysHAAAAAAAAAAAAAAAAAACA/47mznxs1Oub282d97aGg/ZQ5p3vvvzmRIz2eTsZZGK2d7lcnywXQ1VJ9MvTfnma5PpkQRIx6Hz1WnatmdwQ5f4qCuWdoFxoKmVz2qjXTz7yy2fjqv4aZJIo3JZ8UMrGH2pqPNBL/UPV5GDlkD7X0zSdVL77abEqShGzhQf3bwTf3njzoSeap57sZr7ODn147PHKi9c/+eL3rY16ZLemXp/fbu6ndzLEaqds8AgGe6OU3eeDu374BfcGmb3t5s5G8uMfLz380fcjnZPx+ycdzrw7eayvRjPzvaAzzaMseW7M5h8fvHq7v3u7mbni9pscnPp8dePa7s+/HfUpD/0n4aAOAAAAAAAAAAAAAAAAAACYiqHfFb8DTz1/fDMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOkb/P3/oWCvkDlKcLsdxaby5nZz4uAnprpUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADuY38HAAD//5ixc/w=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) ioctl$TCFLSH(r2, 0x5608, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) 42.884840371s ago: executing program 4 (id=753): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4048080}], 0x1, 0x44) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}}, 0xffff, 0xffc0}, 0x90) 42.765733s ago: executing program 4 (id=755): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(0x0, 0x4827e, 0xdc) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x68, 0x0) 42.005301083s ago: executing program 4 (id=766): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x6c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xa, 0xb, 0x2, 0x6, 0x80, 0x7, 0x2, 0x2, [{0x7, 0x1, 0x9, 0x7}, {0xb, 0x2, 0x6, 0x8}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0x14}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 26.851827056s ago: executing program 33 (id=766): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x6c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xa, 0xb, 0x2, 0x6, 0x80, 0x7, 0x2, 0x2, [{0x7, 0x1, 0x9, 0x7}, {0xb, 0x2, 0x6, 0x8}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0x14}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 5.723735448s ago: executing program 2 (id=1156): r0 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r0, 0x1) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x800) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000540)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.972265062s ago: executing program 0 (id=1180): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x2840) 2.913495156s ago: executing program 0 (id=1181): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x68, 0x0, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x0, &(0x7f0000000900), 0x1, 0x84d, &(0x7f0000000940)="$eJzs3V9oZFcdB/DfnSRNdnfaZMUHK5aKFleQTjIT6dQ/YIr2wUprsQqCld2wO5mEncmEzCxuQqHpmw8+uA+rgihbCqIIkgef7MMGBUFooSyKqBCh+KDFRdGCPjlyZybZ0E6a0Gxzl97PB27u+TN3vufMZO6ZeToB5NYH0z+FiHvTchIxOWhPImKsVxqNmOs/7srs5mJ6JNHtPvWPpPeYZ2Y3F2PPNalTEbERERMR8cvxJE6Ovzm3vbZ+cb7RqK0O6tOd5sp0e239waXmfL1Wry1XqtXZcqVafqh62+Z698LzP3/1hUefffEX116/7wu/+lkSc1Ec9O2dx+3Uf03G4sk9baNJxBffibAMjPT/Q3rnHclohgPi0D537sRWISLeExEf6p0nYyT6b96F5af/NRn/e2K/ax/+wA//dpxjBQBun+5nIroAQK5k/f0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADuRN1uYv9/AMiZrL9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAneyZ2c3FneO4Mu/7WsTNRyJiop9/ZXD0e0djrneeiLGIOPnvJEb3XJtExMwR8xduRGw8FxHvGzb/pJc/lQ5uSP5IRJw7Yv6L14+Wv3LE/K9+54hPcESnf5pt/rU/ZZt/7iPZ5v/l1WzzH7g/2/yrrYit9P4zN+zzV9i9/8SQz99E/7IjeeTrt+5/V950/7uVP7LP/W/jkDkv3fjz5LD2wpcibj4X8f7RYfnJbn6yT/63D5n/5Ud/9Klh7c++FtF9PuJMDM/fmzXdaa5Mt9fWH1xqztdr9dpypVqdLVeq5Yeq0wtLjdpM/+/Q/HsaTzw2rP3l7f78T+6TvzGY/36v/7VDzv8rv746tTmk/Te/7ed/9MNv/f4Pe/3TNXHrkPnXt7/19LD23326n39hn/kf9P6/csj8V6Y+//Fh7TczXn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4O0qREQxkkJpt1wolEoRpyLivXGy0Gi1Ox9baF1avpD2RUzFWGFnp6XJfj1J6+Ve+Va98ob6bEScjohvjp/o1UvnW40LWU8eAHKmGLH9x5nPHnYLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyJVTb9j//6/j/f3/AYB3n2LE9taNF36Sll8fz3o0AMBxSNf/s5d/cDWs/wCQG9Z/AMgf6z8A5I/1HwDyx/oPAPlj/QeA/Nm7/gMAAAAAAAAAAAAAAAAAAADZevLxx9Oje2V2czGtL7fqSxcXVz5RmSk1L50vnW+trpTqrVa9USudbzUPfr5Gq7VSrsSly9OdWrsz3V5bP9tsXVrunF1qztdrZ2tjxzAn4GCVx/7z+6zHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHeS0/dv/SGJiI1PnugdqbsGffbqh3e3QtYDADIzkvUAgMyMZj0AIDN+4wPJAf0T+/b4BgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH6cudf+/5BX9v+H/LL/P+SX3Xshv/zGB+z/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAByv2jqRQGuwFXoxCoVSKuDsipmIsWVhq1GYi4p6IeGl8bDytl7MeNADwthQjtrfnlh/OehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAnaq+tX5xvNGqrCgoKCruFrO9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcPxubfqd9UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIEuF15KISI8zkw8Ur//9xy/v7b0r+e947xwR3/j+U9+9PN/prJbT9n/utne+N2ivZDUHAOCt7KzTO+s4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzTXlu/ON9o1FbfwULWcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgd/h8AAP//WEsF2g==") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x98, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x84, 0x1, [@m_simple={0x80, 0x1, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xd, 0x3, ')+@$(:(\\\x00'}, @TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x2, 0x7, 0x0, 0x3b604f5b}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xe, 0x6, 0x1, 0x65}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001000000000000000000"], 0x7c}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.70632854s ago: executing program 2 (id=1183): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0], &(0x7f00000000c0)=0x10, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@abort}]}, 0x5, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs}) faccessat2(r0, &(0x7f0000000000)='./file1\x00', 0x40, 0x0) fallocate(r0, 0x0, 0xfea000, 0x2000402) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x3, 0xfffffffffffffffa, 0x0, 0x8}) 2.660736324s ago: executing program 0 (id=1184): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xbf2, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x7fffffff, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x1}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x5, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x9, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x103, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x7f, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800002, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff3, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x4ce}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1d, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x7}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'pim6reg1\x00', {0x2, 0x4e24, @multicast1}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 2.628742696s ago: executing program 1 (id=1185): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r0, &(0x7f0000000400)="97664f6ebbf1fb5a5380327b4e43965b664de929598d5ed7f707c1cef766d65f148da34781d81182c177312e33a0ff6fb50a6fbc77560c01337d06a7e86af9407b52dfe29963e9b435e800839ea445885ae4a933e08f1a41e45da37e2e01817c70bc27c2bbaee890f693bd8857a5f7e8585432e157519d362652280b74a8b54d810c8862b8b111c7f40f8853495289097a0733af57f30cd5761339643f460598dd227da35605f2861230829aacf9f8fcbfcc92bda17309a5f7051d87e8c6df3e21dd", 0xc2, 0xe, &(0x7f0000000580)) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0x9362, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2000, 0x0) 2.578733949s ago: executing program 2 (id=1186): socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.547753681s ago: executing program 1 (id=1187): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000ff000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.480490846s ago: executing program 1 (id=1188): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_clone(0x400, 0x0, 0x3e, 0x0, 0x0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2.350631305s ago: executing program 6 (id=1189): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xb0a3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0xffff, 0xfffffff3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.970718212s ago: executing program 5 (id=1190): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000080)={[{@fat=@errors_continue}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x32}}, {@fat=@flush}]}, 0x1, 0x29e, &(0x7f0000000680)="$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") socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6(0xa, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000280)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.749795177s ago: executing program 5 (id=1191): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) shutdown(0xffffffffffffffff, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x12, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f00000002c0)="$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") setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2046) 1.462768088s ago: executing program 6 (id=1192): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="00000002000000002800"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xfff3, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 1.382426133s ago: executing program 6 (id=1193): socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.381970993s ago: executing program 6 (id=1194): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xbd9ddb11bfb6c30d}, 0x0, 0x86}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.235830273s ago: executing program 1 (id=1195): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1c1840, 0x0) 1.178169987s ago: executing program 0 (id=1196): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x23, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.059134966s ago: executing program 2 (id=1197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) 1.055312876s ago: executing program 6 (id=1198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 995.6809ms ago: executing program 5 (id=1199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x4d63}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xecab}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) 585.956559ms ago: executing program 5 (id=1200): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0x3}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x400}}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x21c004, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000940)={[{@jqfmt_vfsold}, {@debug}, {@noblock_validity}, {@noload}, {@nombcache}, {@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000001f80)="$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") 564.04424ms ago: executing program 2 (id=1201): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 544.556132ms ago: executing program 0 (id=1202): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {}, {0xe}}}, 0x24}}, 0x40004) 274.187231ms ago: executing program 1 (id=1203): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x44) close(r3) 146.0558ms ago: executing program 6 (id=1204): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) sendto$inet6(r3, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) capset(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000001800)=ANY=[], 0xfb, 0x1236, &(0x7f0000000600)="$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") fchownat(0xffffffffffffff9c, 0x0, 0xee00, 0x0, 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) 106.187383ms ago: executing program 0 (id=1205): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) getpid() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x7}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='cpu\t>0&&\t') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 100.838453ms ago: executing program 5 (id=1206): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x3, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 56.761066ms ago: executing program 2 (id=1207): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x4014, &(0x7f00000000c0), 0x1, 0x40c, &(0x7f0000000280)="$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") io_uring_setup(0x1b7b, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x0, 0x3, 0x43a1bd78, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 8.40369ms ago: executing program 5 (id=1208): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 0s ago: executing program 1 (id=1209): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) statx(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1000, 0x800, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x10) kernel console output (not intermixed with test programs): to "activebackup" [ 58.092204][ T4584] netlink: 12 bytes leftover after parsing attributes in process `syz.5.317'. [ 58.231702][ T28] audit: type=1400 audit(1775595160.169:434): avc: denied { map } for pid=4586 comm="syz.5.318" path="socket:[9566]" dev="sockfs" ino=9566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.816005][ T28] audit: type=1326 audit(1775595160.749:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350981c819 code=0x7ffc0000 [ 59.078421][ T4608] loop1: detected capacity change from 0 to 1024 [ 59.116299][ T28] audit: type=1326 audit(1775595160.749:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350981c819 code=0x7ffc0000 [ 59.180735][ T28] audit: type=1326 audit(1775595160.779:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350981c819 code=0x7ffc0000 [ 59.205259][ T4608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 59.270912][ T4608] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.341852][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 59.391248][ T28] audit: type=1326 audit(1775595160.779:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350981c819 code=0x7ffc0000 [ 59.438185][ T28] audit: type=1326 audit(1775595160.779:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350981c819 code=0x7ffc0000 [ 59.492490][ T28] audit: type=1326 audit(1775595160.779:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4598 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f350981c819 code=0x7ffc0000 [ 60.582020][ T4241] net_ratelimit: 43 callbacks suppressed [ 60.582181][ T4241] bond1: (slave batadv0): failed to get link speed/duplex [ 60.710989][ T1650] bond1: (slave batadv0): failed to get link speed/duplex [ 60.833717][ T1650] bond1: (slave batadv0): failed to get link speed/duplex [ 60.960936][ T56] bond1: (slave batadv0): failed to get link speed/duplex [ 61.083058][ T4246] bond1: (slave batadv0): failed to get link speed/duplex [ 61.210771][ T1650] bond1: (slave batadv0): failed to get link speed/duplex [ 61.321871][ T1650] bond1: (slave batadv0): failed to get link speed/duplex [ 61.452162][ T1650] bond1: (slave batadv0): failed to get link speed/duplex [ 61.568832][ T56] bond1: (slave batadv0): failed to get link speed/duplex [ 62.432516][ T4246] bond1: (slave batadv0): failed to get link speed/duplex [ 62.468096][ T4685] netlink: 24 bytes leftover after parsing attributes in process `syz.5.352'. [ 62.512711][ T3358] IPVS: starting estimator thread 0... [ 62.600954][ T4687] IPVS: using max 2400 ests per chain, 120000 per kthread [ 62.774548][ T4700] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 62.862958][ T4706] netlink: 'syz.0.360': attribute type 18 has an invalid length. [ 62.888053][ T4706] netlink: 24 bytes leftover after parsing attributes in process `syz.0.360'. [ 62.933918][ T4711] loop2: detected capacity change from 0 to 2048 [ 62.980189][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 62.980202][ T28] audit: type=1400 audit(1775595164.909:491): avc: denied { relabelfrom } for pid=4715 comm="syz.0.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 63.013665][ T28] audit: type=1400 audit(1775595164.909:492): avc: denied { relabelto } for pid=4715 comm="syz.0.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 63.049601][ T4711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.227084][ T4730] loop4: detected capacity change from 0 to 512 [ 63.255557][ T4730] EXT4-fs: Ignoring removed bh option [ 63.268358][ T4730] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 63.289288][ T4730] EXT4-fs (loop4): 1 truncate cleaned up [ 63.324391][ T4730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.410661][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.424327][ T4738] netlink: 44 bytes leftover after parsing attributes in process `syz.0.372'. [ 63.464561][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.501288][ T4741] loop2: detected capacity change from 0 to 512 [ 63.538116][ T4741] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.552328][ T4741] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.593585][ T28] audit: type=1400 audit(1775595165.519:493): avc: denied { create } for pid=4746 comm="syz.4.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 63.642023][ T28] audit: type=1400 audit(1775595165.519:494): avc: denied { sys_admin } for pid=4746 comm="syz.4.376" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 63.664569][ T28] audit: type=1400 audit(1775595165.559:495): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.667603][ T4741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.703127][ T4741] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.749971][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.005760][ T4770] infiniband syz0: set down [ 64.141093][ T4770] infiniband syz0: added veth0_vlan [ 64.161359][ T4770] RDS/IB: syz0: added [ 64.165556][ T4770] smc: adding ib device syz0 with port count 1 [ 64.211152][ T4770] smc: ib device syz0 port 1 has no pnetid [ 64.738141][ T4856] loop4: detected capacity change from 0 to 4096 [ 65.041350][ T4856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.233947][ T4865] loop5: detected capacity change from 0 to 2048 [ 65.278585][ T4865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.522149][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.608141][ T4894] 9p: Bad value for 'rfdno' [ 65.680787][ T4262] net_ratelimit: 25 callbacks suppressed [ 65.680803][ T4262] bond1: (slave batadv0): failed to get link speed/duplex [ 65.722808][ T4905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.404'. [ 65.801561][ T4262] bond1: (slave batadv0): failed to get link speed/duplex [ 65.960801][ T30] bond1: (slave batadv0): failed to get link speed/duplex [ 66.090807][ T1650] bond1: (slave batadv0): failed to get link speed/duplex [ 66.103901][ T3693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.127112][ T28] audit: type=1326 audit(1775595168.059:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350981c819 code=0x7ffc0000 [ 66.171630][ T28] audit: type=1326 audit(1775595168.059:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350981c819 code=0x7ffc0000 [ 66.202011][ T1650] bond1: (slave batadv0): failed to get link speed/duplex [ 66.210770][ T28] audit: type=1326 audit(1775595168.089:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350981c819 code=0x7ffc0000 [ 66.263458][ T28] audit: type=1326 audit(1775595168.089:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350981c819 code=0x7ffc0000 [ 66.330358][ T28] audit: type=1326 audit(1775595168.089:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4917 comm="syz.2.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f350981c819 code=0x7ffc0000 [ 66.331271][ T1899] bond1: (slave batadv0): failed to get link speed/duplex [ 66.470750][ T4262] bond1: (slave batadv0): failed to get link speed/duplex [ 66.620759][ T4262] bond1: (slave batadv0): failed to get link speed/duplex [ 66.716092][ T4952] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 66.723517][ T4952] netlink: 16 bytes leftover after parsing attributes in process `syz.4.420'. [ 66.732580][ T4256] bond1: (slave batadv0): failed to get link speed/duplex [ 66.828861][ T4954] macsec2: entered promiscuous mode [ 66.860771][ T4256] bond1: (slave batadv0): failed to get link speed/duplex [ 67.011387][ T4960] loop0: detected capacity change from 0 to 1024 [ 67.018202][ T4960] EXT4-fs: Ignoring removed bh option [ 67.036732][ T4960] EXT4-fs (loop0): stripe (19) is not aligned with cluster size (16), stripe is disabled [ 67.047502][ T4958] loop2: detected capacity change from 0 to 2048 [ 67.072018][ T4960] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 67.085940][ T4958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.110283][ T4960] loop0: detected capacity change from 0 to 2048 [ 67.116386][ T4958] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.132438][ T4960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.207715][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.422056][ T4980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.430'. [ 67.464329][ T4262] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.473195][ T4262] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.492037][ T4262] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.512038][ T4262] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.803136][ T4987] syz_tun: entered promiscuous mode [ 67.810294][ T4987] macsec1: entered promiscuous mode [ 67.966028][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.144141][ T28] kauditd_printk_skb: 461 callbacks suppressed [ 68.144157][ T28] audit: type=1326 audit(1775595170.079:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.5.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba99fdc819 code=0x7fc00000 [ 68.219029][ T28] audit: type=1326 audit(1775595170.079:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.5.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fba99fdc819 code=0x7fc00000 [ 68.403215][ T5000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 68.412375][ T5000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 68.441001][ T5000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 68.450075][ T5000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 68.471185][ T5000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 68.491156][ T5000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 68.501257][ T5000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 68.521253][ T5000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 68.542536][ T5000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 68.561089][ T5000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 68.580529][ T5000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 68.601589][ T5000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 69.143306][ T5020] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 69.151494][ T5020] tipc: Enabled bearer , priority 10 [ 69.607718][ T28] audit: type=1400 audit(1775595171.529:964): avc: denied { lock } for pid=5037 comm="syz.5.453" path="socket:[11023]" dev="sockfs" ino=11023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.685762][ T28] audit: type=1400 audit(1775595171.569:965): avc: denied { mount } for pid=5039 comm="syz.0.454" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 69.739075][ T5049] loop0: detected capacity change from 0 to 512 [ 69.764781][ T5049] EXT4-fs: Ignoring removed bh option [ 69.783320][ T28] audit: type=1400 audit(1775595171.699:966): avc: denied { mounton } for pid=5050 comm="syz.1.456" path="/file0" dev="ramfs" ino=10219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 69.840764][ T5049] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 69.865288][ T5049] EXT4-fs (loop0): 1 truncate cleaned up [ 69.872620][ T5049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.875860][ T28] audit: type=1400 audit(1775595171.809:967): avc: denied { allowed } for pid=5057 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 70.020837][ T28] audit: type=1400 audit(1775595171.899:968): avc: denied { create } for pid=5059 comm="syz.5.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.112723][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.161742][ T5068] uprobe: syz.2.465:5068 failed to unregister, leaking uprobe [ 70.292796][ T3434] tipc: Node number set to 2552229036 [ 70.667348][ T5090] audit: audit_backlog=65 > audit_backlog_limit=64 [ 70.689577][ T5090] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 70.712785][ T28] audit: type=1326 audit(1775595172.159:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f350981c819 code=0x7ffc0000 [ 70.750899][ T4237] net_ratelimit: 26 callbacks suppressed [ 70.750916][ T4237] bond1: (slave batadv0): failed to get link speed/duplex [ 71.029319][ T5096] netlink: 'syz.4.484': attribute type 1 has an invalid length. [ 71.100748][ T4237] bond1: (slave batadv0): failed to get link speed/duplex [ 71.220854][ T1650] bond1: (slave batadv0): failed to get link speed/duplex [ 71.403987][ T5108] loop2: detected capacity change from 0 to 512 [ 71.410824][ T5113] uprobe: syz.0.479:5113 failed to unregister, leaking uprobe [ 71.433926][ T5108] EXT4-fs: Ignoring removed bh option [ 71.631439][ T4237] bond1: (slave batadv0): failed to get link speed/duplex [ 71.659064][ T5108] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 71.770829][ T4256] bond1: (slave batadv0): failed to get link speed/duplex [ 71.880856][ T4237] bond1: (slave batadv0): failed to get link speed/duplex [ 71.971050][ T5108] EXT4-fs (loop2): 1 truncate cleaned up [ 72.000904][ T4256] bond1: (slave batadv0): failed to get link speed/duplex [ 72.110831][ T1650] bond1: (slave batadv0): failed to get link speed/duplex [ 72.153229][ T5108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.364250][ T5134] syzkaller0: entered promiscuous mode [ 72.375027][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.390834][ T5134] syzkaller0: entered allmulticast mode [ 72.443255][ T1899] bond1: (slave batadv0): failed to get link speed/duplex [ 72.523073][ T5144] netlink: 'syz.0.492': attribute type 1 has an invalid length. [ 72.543536][ T5144] 8021q: adding VLAN 0 to HW filter on device bond3 [ 72.563163][ T5144] bond3: (slave bridge2): making interface the new active one [ 72.573100][ T5144] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 72.625262][ T4262] bond1: (slave batadv0): failed to get link speed/duplex [ 72.940273][ T5179] loop2: detected capacity change from 0 to 256 [ 72.959468][ T5179] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.495045][ T5187] loop1: detected capacity change from 0 to 128 [ 73.602536][ T5177] loop0: detected capacity change from 0 to 512 [ 73.653719][ T5177] ext4: Unknown parameter 'obj_role' [ 73.701356][ T4256] kworker/u8:14: attempt to access beyond end of device [ 73.701356][ T4256] loop1: rw=1, sector=145, nr_sectors = 16 limit=128 [ 73.729388][ T4256] kworker/u8:14: attempt to access beyond end of device [ 73.729388][ T4256] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 73.751168][ T5196] loop4: detected capacity change from 0 to 512 [ 73.798114][ T5196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.828584][ T5196] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.839186][ T4256] kworker/u8:14: attempt to access beyond end of device [ 73.839186][ T4256] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 73.868512][ T4256] kworker/u8:14: attempt to access beyond end of device [ 73.868512][ T4256] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 73.902600][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.948969][ T4256] kworker/u8:14: attempt to access beyond end of device [ 73.948969][ T4256] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 73.998788][ T4256] kworker/u8:14: attempt to access beyond end of device [ 73.998788][ T4256] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 74.018925][ T4256] kworker/u8:14: attempt to access beyond end of device [ 74.018925][ T4256] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 74.033149][ T4256] kworker/u8:14: attempt to access beyond end of device [ 74.033149][ T4256] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 74.056511][ T4256] kworker/u8:14: attempt to access beyond end of device [ 74.056511][ T4256] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 74.070315][ T4256] kworker/u8:14: attempt to access beyond end of device [ 74.070315][ T4256] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 74.455558][ T28] kauditd_printk_skb: 118 callbacks suppressed [ 74.455573][ T28] audit: type=1400 audit(1775595176.389:1087): avc: denied { watch } for pid=5260 comm="syz.2.522" path="/110" dev="tmpfs" ino=592 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.686825][ T5278] loop5: detected capacity change from 0 to 1024 [ 74.693910][ T5278] EXT4-fs: Ignoring removed orlov option [ 74.715630][ T5278] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 74.734000][ T5278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.788642][ T3693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.937194][ T5298] loop5: detected capacity change from 0 to 2048 [ 74.973466][ T5298] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.990518][ T5298] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.003106][ T28] audit: type=1326 audit(1775595176.929:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048fadc819 code=0x7ffc0000 [ 75.044576][ T5310] bond2: entered promiscuous mode [ 75.057514][ T28] audit: type=1326 audit(1775595176.929:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048fadc819 code=0x7ffc0000 [ 75.087456][ T5310] ip6gretap1: entered promiscuous mode [ 75.094319][ T5310] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 75.106870][ T28] audit: type=1326 audit(1775595176.929:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f048fadc819 code=0x7ffc0000 [ 75.130783][ T28] audit: type=1326 audit(1775595176.969:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048fadc819 code=0x7ffc0000 [ 75.154802][ T28] audit: type=1326 audit(1775595176.969:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048fadc819 code=0x7ffc0000 [ 75.185256][ T5310] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 75.210077][ T28] audit: type=1326 audit(1775595177.129:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f048fadc819 code=0x7ffc0000 [ 75.234157][ T5310] ip6gretap1: left promiscuous mode [ 75.243134][ T5310] bond2 (unregistering): Released all slaves [ 75.250839][ T28] audit: type=1326 audit(1775595177.129:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048fadc819 code=0x7ffc0000 [ 75.296832][ T28] audit: type=1326 audit(1775595177.129:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048fadc819 code=0x7ffc0000 [ 75.361774][ T28] audit: type=1326 audit(1775595177.129:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f048fadc819 code=0x7ffc0000 [ 75.445782][ T3422] IPVS: starting estimator thread 0... [ 75.452624][ T5331] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 75.540835][ T5332] IPVS: using max 2400 ests per chain, 120000 per kthread [ 75.770741][ T4262] net_ratelimit: 27 callbacks suppressed [ 75.770758][ T4262] bond1: (slave batadv0): failed to get link speed/duplex [ 75.883407][ T5378] loop2: detected capacity change from 0 to 1024 [ 75.897047][ T3693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.906429][ T1650] bond1: (slave batadv0): failed to get link speed/duplex [ 75.907019][ T5378] EXT4-fs: Ignoring removed orlov option [ 75.933382][ T5378] EXT4-fs: Ignoring removed nobh option [ 75.983880][ T5378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.016819][ T5387] loop4: detected capacity change from 0 to 512 [ 76.023493][ T4256] bond1: (slave batadv0): failed to get link speed/duplex [ 76.034066][ T5387] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.046810][ T5387] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.097215][ T5387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.130331][ T5387] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.133980][ T1650] bond1: (slave batadv0): failed to get link speed/duplex [ 76.248849][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.260785][ T1864] bond1: (slave batadv0): failed to get link speed/duplex [ 76.303823][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.380779][ T1650] bond1: (slave batadv0): failed to get link speed/duplex [ 76.521264][ T4256] bond1: (slave batadv0): failed to get link speed/duplex [ 76.670802][ T4256] bond1: (slave batadv0): failed to get link speed/duplex [ 76.854864][ T1864] bond1: (slave batadv0): failed to get link speed/duplex [ 76.979588][ T5448] __nla_validate_parse: 38 callbacks suppressed [ 76.979603][ T5448] netlink: 76 bytes leftover after parsing attributes in process `syz.0.554'. [ 77.003657][ T1650] bond1: (slave batadv0): failed to get link speed/duplex [ 77.186964][ T5433] loop2: detected capacity change from 0 to 512 [ 77.247220][ T5433] ext4: Unknown parameter 'obj_role' [ 77.399683][ T5456] netlink: 'syz.2.557': attribute type 1 has an invalid length. [ 77.419450][ T1650] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.509934][ T5464] netlink: 24 bytes leftover after parsing attributes in process `syz.1.560'. [ 77.536688][ T5464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.560'. [ 78.772389][ T5483] loop1: detected capacity change from 0 to 512 [ 78.802626][ T5483] ext4: Unknown parameter 'obj_role' [ 78.918246][ T5491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.572'. [ 78.979791][ T5494] netlink: 'syz.2.573': attribute type 13 has an invalid length. [ 79.079041][ T5494] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.086291][ T5494] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.098667][ T5501] loop1: detected capacity change from 0 to 256 [ 79.259572][ T5494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.308922][ T5494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.343866][ T5512] kernel read not supported for file [fscontext] (pid: 5512 comm: kworker/1:12) [ 79.470827][ T5459] Bluetooth: hci0: command 0x1003 tx timeout [ 79.476901][ T3737] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.487065][ T1899] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.501890][ T1899] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.512038][ T1899] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.521095][ T1899] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.529997][ T1899] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.539023][ T1899] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.601215][ T5539] netlink: 14 bytes leftover after parsing attributes in process `syz.4.585'. [ 79.617836][ T1899] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.636466][ T1899] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.806423][ T5549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'. [ 79.901371][ T5553] netlink: 'syz.4.590': attribute type 4 has an invalid length. [ 79.936179][ T5553] netlink: 'syz.4.590': attribute type 4 has an invalid length. [ 79.959705][ T5556] netlink: 76 bytes leftover after parsing attributes in process `syz.1.592'. [ 80.713070][ T5562] netlink: 24 bytes leftover after parsing attributes in process `syz.1.594'. [ 80.756222][ T5562] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5562 comm=syz.1.594 [ 80.817063][ T5571] netlink: 'syz.5.599': attribute type 1 has an invalid length. [ 80.820835][ T1650] net_ratelimit: 27 callbacks suppressed [ 80.820851][ T1650] bond1: (slave batadv0): failed to get link speed/duplex [ 80.862506][ T5571] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.908831][ T5571] bond1: (slave gretap1): making interface the new active one [ 80.942687][ T5571] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 80.973599][ T4256] bond1: (slave batadv0): failed to get link speed/duplex [ 81.030974][ T5580] syzkaller0: entered promiscuous mode [ 81.036662][ T5580] syzkaller0: entered allmulticast mode [ 81.089975][ T5583] loop1: detected capacity change from 0 to 128 [ 81.096930][ T1650] bond1: (slave batadv0): failed to get link speed/duplex [ 81.119049][ T5583] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.251048][ T4256] bond1: (slave batadv0): failed to get link speed/duplex [ 81.301066][ T5583] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 81.339786][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 81.339797][ T28] audit: type=1400 audit(1775595183.279:1146): avc: denied { setattr } for pid=5582 comm="syz.1.602" path="/112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 81.341004][ T5597] netlink: 'syz.4.606': attribute type 13 has an invalid length. [ 81.400202][ T4262] bond1: (slave batadv0): failed to get link speed/duplex [ 81.438730][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.499001][ T4262] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.516534][ T4262] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.535898][ T5604] loop1: detected capacity change from 0 to 512 [ 81.541747][ T4262] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.554243][ T4262] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.564834][ T5604] EXT4-fs: Ignoring removed nobh option [ 81.602370][ T5604] EXT4-fs error (device loop1): ext4_iget_extra_inode:5040: inode #15: comm syz.1.608: corrupted in-inode xattr: overlapping e_value [ 81.624531][ T28] audit: type=1400 audit(1775595183.559:1147): avc: denied { cmd } for pid=5606 comm="syz.4.609" path="socket:[11887]" dev="sockfs" ino=11887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 81.670788][ T5610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.691831][ T5610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.702510][ T5592] loop5: detected capacity change from 0 to 512 [ 81.713940][ T5604] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 81.715386][ T5604] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.608: couldn't read orphan inode 15 (err -117) [ 81.724592][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 81.724610][ C0] EXT4-fs (loop1): initial error at time 1775595183: ext4_iget_extra_inode:5040: inode 15 [ 81.724638][ C0] EXT4-fs (loop1): last error at time 1775595183: ext4_iget_extra_inode:5040: inode 15 [ 81.762692][ T5604] loop1: lost filesystem error report for type 5 error -117 [ 81.766547][ T5604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.788858][ T5592] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 81.791911][ T5604] tipc: Started in network mode [ 81.802792][ T5604] tipc: Node identity ac14142f, cluster identity 4711 [ 81.814429][ T5604] tipc: New replicast peer: 0.0.0.0 [ 81.819811][ T5604] tipc: Enabled bearer , priority 10 [ 81.843566][ T5604] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 81.909538][ T5615] loop0: detected capacity change from 0 to 128 [ 81.935999][ T5615] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.948615][ T5615] ext4 filesystem being mounted at /133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 81.962564][ T5618] syzkaller0: entered promiscuous mode [ 81.990782][ T5618] syzkaller0: entered allmulticast mode [ 81.998216][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.080476][ T28] audit: type=1400 audit(1775595184.009:1148): avc: denied { ioctl } for pid=5614 comm="syz.0.613" path="/133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop0" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 82.156593][ T5623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.616'. [ 82.180379][ T3321] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.254459][ T5631] tipc: Failed to remove unknown binding: 66,0,0/0:654188221/654188223 [ 82.273961][ T5631] tipc: Failed to remove unknown binding: 66,0,0/0:654188221/654188222 [ 82.297965][ T5631] tipc: Failed to remove unknown binding: 66,0,0/0:654188221/654188223 [ 82.324440][ T5631] tipc: Failed to remove unknown binding: 66,0,0/0:654188221/654188222 [ 82.348271][ T5634] netlink: 'syz.1.622': attribute type 13 has an invalid length. [ 82.589043][ T5648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.627'. [ 82.673595][ T28] audit: type=1326 audit(1775595184.609:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5649 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048fadc819 code=0x7ffc0000 [ 82.705912][ T28] audit: type=1326 audit(1775595184.609:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5649 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048fadc819 code=0x7ffc0000 [ 82.743450][ T28] audit: type=1326 audit(1775595184.609:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5649 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048fadc819 code=0x7ffc0000 [ 82.767654][ T28] audit: type=1326 audit(1775595184.609:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5649 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048fadc819 code=0x7ffc0000 [ 82.802670][ T28] audit: type=1326 audit(1775595184.639:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5649 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f048fadc819 code=0x7ffc0000 [ 82.839319][ T28] audit: type=1326 audit(1775595184.639:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5649 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048fadc819 code=0x7ffc0000 [ 82.865091][ T28] audit: type=1326 audit(1775595184.639:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5649 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048fadc819 code=0x7ffc0000 [ 82.870822][ T9] tipc: Node number set to 2886997039 [ 83.060510][ T5665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.632'. [ 83.599542][ T5703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 83.672229][ T5705] netlink: 'syz.0.647': attribute type 4 has an invalid length. [ 83.702461][ T5705] netlink: 'syz.0.647': attribute type 4 has an invalid length. [ 83.862122][ T5710] netlink: 24 bytes leftover after parsing attributes in process `syz.4.649'. [ 83.963751][ T5710] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5710 comm=syz.4.649 [ 84.022636][ T5715] netlink: 'syz.0.661': attribute type 13 has an invalid length. [ 84.180300][ T5715] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.187523][ T5715] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.333677][ T5715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.551873][ T5715] bond2: left allmulticast mode [ 84.557283][ T5715] bond2: left promiscuous mode [ 84.571081][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.580977][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.605817][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.650353][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.713903][ T5729] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 84.740331][ T5731] team0: Unable to change to the same mode the team is in [ 84.827704][ T5735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.880925][ T5735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.050895][ T5741] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 85.182352][ T5752] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 85.188923][ T5752] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 85.210852][ T5752] vhci_hcd vhci_hcd.0: Device attached [ 85.231300][ T5752] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 85.237820][ T5752] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 85.245338][ T5752] vhci_hcd vhci_hcd.0: Device attached [ 85.361777][ T5762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.665'. [ 85.390731][ T5752] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9) [ 85.397301][ T5752] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 85.432985][ T5752] vhci_hcd vhci_hcd.0: Device attached [ 85.450736][ T5761] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(11) [ 85.457458][ T5761] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 85.461069][ T5724] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 85.503575][ T5761] vhci_hcd vhci_hcd.0: Device attached [ 85.520483][ T5765] vhci_hcd: connection closed [ 85.520632][ T5763] vhci_hcd: connection closed [ 85.525369][ T1899] vhci_hcd vhci_hcd.4: stop threads [ 85.525387][ T1899] vhci_hcd vhci_hcd.4: release socket [ 85.525408][ T1899] vhci_hcd vhci_hcd.4: disconnect device [ 85.549536][ T5753] vhci_hcd: connection reset by peer [ 85.555067][ T5755] vhci_hcd: connection closed [ 85.555362][ T1899] vhci_hcd vhci_hcd.4: stop threads [ 85.565571][ T1899] vhci_hcd vhci_hcd.4: release socket [ 85.571261][ T1899] vhci_hcd vhci_hcd.4: disconnect device [ 85.577029][ T1899] vhci_hcd vhci_hcd.4: stop threads [ 85.582590][ T1899] vhci_hcd vhci_hcd.4: release socket [ 85.588134][ T1899] vhci_hcd vhci_hcd.4: disconnect device [ 85.594065][ T1899] vhci_hcd vhci_hcd.4: stop threads [ 85.599356][ T1899] vhci_hcd vhci_hcd.4: release socket [ 85.605464][ T1899] vhci_hcd vhci_hcd.4: disconnect device [ 85.719148][ T5774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.669'. [ 85.736055][ T5776] loop1: detected capacity change from 0 to 512 [ 85.760177][ T5778] loop5: detected capacity change from 0 to 256 [ 85.790379][ T5780] xfrm0: entered promiscuous mode [ 85.796124][ T5776] EXT4-fs (loop1): 1 truncate cleaned up [ 85.811046][ T5776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.830735][ T5786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.674'. [ 85.863483][ T5786] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5786 comm=syz.2.674 [ 85.933761][ T5789] syzkaller0: entered promiscuous mode [ 85.939351][ T5789] syzkaller0: entered allmulticast mode [ 85.984653][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.005006][ T5792] loop1: detected capacity change from 0 to 128 [ 86.042423][ T5792] bio_check_eod: 32 callbacks suppressed [ 86.042442][ T5792] syz.1.676: attempt to access beyond end of device [ 86.042442][ T5792] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 86.077163][ T5797] batadv0: entered promiscuous mode [ 86.084162][ T5797] bond0: entered promiscuous mode [ 86.105754][ T5797] bond_slave_0: entered promiscuous mode [ 86.113010][ T5797] bond_slave_1: entered promiscuous mode [ 86.113040][ T5801] netlink: 132 bytes leftover after parsing attributes in process `syz.5.680'. [ 86.119464][ T5797] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 86.138420][ T5797] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 86.154337][ T5797] hsr1: entered allmulticast mode [ 86.159659][ T5797] batadv0: entered allmulticast mode [ 86.168173][ T5806] loop5: detected capacity change from 0 to 512 [ 86.175141][ T5806] EXT4-fs (loop5): bad s_min_extra_isize: 2304 [ 86.187987][ T5797] bond0: entered allmulticast mode [ 86.205685][ C1] sd 0:0:1:0: [sda] tag#4672 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 86.216134][ C1] sd 0:0:1:0: [sda] tag#4672 CDB: Read(6) 08 00 00 00 00 00 [ 86.223582][ C1] sd 0:0:1:0: [sda] tag#4673 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 86.233954][ C1] sd 0:0:1:0: [sda] tag#4673 CDB: Read(6) 08 00 00 00 00 00 [ 86.241382][ C1] sd 0:0:1:0: [sda] tag#4674 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 86.251739][ C1] sd 0:0:1:0: [sda] tag#4674 CDB: Read(6) 08 00 00 00 00 00 [ 86.252823][ T5797] bond_slave_0: entered allmulticast mode [ 86.259077][ C1] sd 0:0:1:0: [sda] tag#4675 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 86.270916][ T5797] bond_slave_1: entered allmulticast mode [ 86.275125][ C1] sd 0:0:1:0: [sda] tag#4675 CDB: Read(6) 08 00 00 00 00 00 [ 86.275164][ C1] sd 0:0:1:0: [sda] tag#4676 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 86.275186][ C1] sd 0:0:1:0: [sda] tag#4676 CDB: Read(6) 08 00 00 00 00 00 [ 86.282072][ T5797] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 86.288341][ C1] sd 0:0:1:0: [sda] tag#4677 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 86.322950][ C1] sd 0:0:1:0: [sda] tag#4677 CDB: Read(6) 08 00 00 00 00 00 [ 86.330293][ C1] sd 0:0:1:0: [sda] tag#4678 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 86.340826][ C1] sd 0:0:1:0: [sda] tag#4678 CDB: Read(6) 08 00 00 00 00 00 [ 86.348150][ C1] sd 0:0:1:0: [sda] tag#4679 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 86.358645][ C1] sd 0:0:1:0: [sda] tag#4679 CDB: Read(6) 08 00 00 00 00 00 [ 86.366079][ C1] sd 0:0:1:0: [sda] tag#4680 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 86.376812][ C1] sd 0:0:1:0: [sda] tag#4680 CDB: Read(6) 08 00 00 00 00 00 [ 86.384153][ C1] sd 0:0:1:0: [sda] tag#4681 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 86.394788][ C1] sd 0:0:1:0: [sda] tag#4681 CDB: Read(6) 08 00 00 00 00 00 [ 86.464980][ T5812] syzkaller0: entered promiscuous mode [ 86.470480][ T5812] syzkaller0: entered allmulticast mode [ 86.496885][ T5815] ------------[ cut here ]------------ [ 86.502463][ T5815] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 86.514640][ T5815] WARNING: net/sched/cls_u32.c:855 at u32_change+0x144c/0x14d0, CPU#1: syz.1.686/5815 [ 86.524321][ T5815] Modules linked in: [ 86.528266][ T5815] CPU: 1 UID: 0 PID: 5815 Comm: syz.1.686 Not tainted syzkaller #0 PREEMPT(full) [ 86.537628][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 86.547869][ T5815] RIP: 0010:u32_change+0x1463/0x14d0 [ 86.553237][ T5815] Code: 31 ed e9 96 fe ff ff e8 9b ca c1 fc 48 8d 3d 34 09 89 02 b9 10 00 00 00 4d 89 f7 4c 8b 74 24 18 4c 89 f6 48 c7 c2 6c 6e 7e 86 <67> 48 0f b9 3a 4c 89 f2 4d 89 fe 4c 8b 7c 24 28 e9 36 f1 ff ff e8 [ 86.573024][ T5815] RSP: 0018:ffffc900001d35e0 EFLAGS: 00010283 [ 86.579197][ T5815] RAX: ffffffff84979015 RBX: ffffc900001d37f0 RCX: 0000000000000010 [ 86.587306][ T5815] RDX: ffffffff867e6e6c RSI: 0000000000000020 RDI: ffffffff87209950 [ 86.595618][ T5815] RBP: ffffc900001d36e8 R08: 000188810d469f87 R09: 0000000000000000 [ 86.603647][ T5815] R10: ffff88810d469f00 R11: 0000000000000002 R12: ffff88810d403600 [ 86.611730][ T5815] R13: 0000000000000001 R14: 0000000000000020 R15: ffff88810d4036c0 [ 86.619912][ T5815] FS: 00007f048e52f6c0(0000) GS:ffff8882ae9d7000(0000) knlGS:0000000000000000 [ 86.628999][ T5815] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.635618][ T5815] CR2: 0000001b33f21ff8 CR3: 00000001065a4000 CR4: 00000000003506f0 [ 86.643771][ T5815] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.651803][ T5815] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 86.659792][ T5815] Call Trace: [ 86.663118][ T5815] [ 86.666065][ T5815] tc_new_tfilter+0xfc0/0x1200 [ 86.670970][ T5815] ? ns_capable+0x7c/0xb0 [ 86.675336][ T5815] ? __pfx_tc_new_tfilter+0x10/0x10 [ 86.680569][ T5815] rtnetlink_rcv_msg+0x64b/0x720 [ 86.685551][ T5815] ? avc_has_perm_noaudit+0xab/0x130 [ 86.691006][ T5815] netlink_rcv_skb+0x123/0x220 [ 86.695852][ T5815] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 86.701415][ T5815] rtnetlink_rcv+0x1c/0x30 [ 86.705859][ T5815] netlink_unicast+0x5c0/0x690 [ 86.710773][ T5815] netlink_sendmsg+0x5c8/0x6f0 [ 86.715568][ T5815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.720983][ T5815] ____sys_sendmsg+0x563/0x5b0 [ 86.725754][ T5815] ___sys_sendmsg+0x195/0x1e0 [ 86.730447][ T5815] __sys_sendmmsg+0x185/0x320 [ 86.735198][ T5815] __x64_sys_sendmmsg+0x57/0x70 [ 86.740409][ T5815] x64_sys_call+0x27aa/0x3020 [ 86.745130][ T5815] do_syscall_64+0x12c/0x370 [ 86.749731][ T5815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.755722][ T5815] RIP: 0033:0x7f048fadc819 [ 86.760219][ T5815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.779894][ T5815] RSP: 002b:00007f048e52f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 86.788516][ T5815] RAX: ffffffffffffffda RBX: 00007f048fd55fa0 RCX: 00007f048fadc819 [ 86.796553][ T5815] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 86.804557][ T5815] RBP: 00007f048fb72c91 R08: 0000000000000000 R09: 0000000000000000 [ 86.812638][ T5815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.820744][ T5815] R13: 00007f048fd56038 R14: 00007f048fd55fa0 R15: 00007ffcc502b9b8 [ 86.828837][ T5815] [ 86.831909][ T5815] ---[ end trace 0000000000000000 ]--- [ 86.876819][ T5821] syzkaller0: entered promiscuous mode [ 86.882570][ T5821] syzkaller0: entered allmulticast mode [ 86.924784][ T5823] loop4: detected capacity change from 0 to 128 [ 86.941451][ T5825] syzkaller0: entered promiscuous mode [ 86.947015][ T5825] syzkaller0: entered allmulticast mode [ 86.999818][ T5830] loop4: detected capacity change from 0 to 128 [ 87.032649][ T5830] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 87.123060][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 87.123075][ T28] audit: type=1326 audit(1775595189.059:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba99fdc819 code=0x7ffc0000 [ 87.162236][ T5841] loop2: detected capacity change from 0 to 512 [ 87.181030][ T28] audit: type=1326 audit(1775595189.059:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba99fdc819 code=0x7ffc0000 [ 87.192709][ T5841] EXT4-fs: Ignoring removed nobh option [ 87.229783][ T28] audit: type=1326 audit(1775595189.059:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba99fdc819 code=0x7ffc0000 [ 87.253683][ T5841] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 87.282338][ T28] audit: type=1326 audit(1775595189.059:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fba99fdc819 code=0x7ffc0000 [ 87.311891][ T5847] lo: entered allmulticast mode [ 87.317254][ T5841] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 87.340736][ T28] audit: type=1326 audit(1775595189.099:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba99fdc819 code=0x7ffc0000 [ 87.364382][ T28] audit: type=1326 audit(1775595189.099:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba99fdc819 code=0x7ffc0000 [ 87.382603][ T5850] netlink: 4 bytes leftover after parsing attributes in process `syz.5.697'. [ 87.388173][ T28] audit: type=1326 audit(1775595189.149:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba99fdc819 code=0x7ffc0000 [ 87.398667][ T5841] EXT4-fs (loop2): 1 truncate cleaned up [ 87.420296][ T28] audit: type=1326 audit(1775595189.149:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba99fdc819 code=0x7ffc0000 [ 87.449425][ T28] audit: type=1326 audit(1775595189.149:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba99fdc819 code=0x7ffc0000 [ 87.473206][ T28] audit: type=1326 audit(1775595189.149:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5833 comm="syz.5.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba99fdc819 code=0x7ffc0000 [ 87.501261][ T5841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.540856][ T5846] lo: left allmulticast mode [ 87.594425][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.719386][ T4262] kworker/u8:16: attempt to access beyond end of device [ 87.719386][ T4262] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 87.733692][ T4262] kworker/u8:16: attempt to access beyond end of device [ 87.733692][ T4262] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 87.749030][ T4262] kworker/u8:16: attempt to access beyond end of device [ 87.749030][ T4262] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 87.764216][ T4262] kworker/u8:16: attempt to access beyond end of device [ 87.764216][ T4262] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 87.778339][ T4262] kworker/u8:16: attempt to access beyond end of device [ 87.778339][ T4262] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 87.801714][ T4262] kworker/u8:16: attempt to access beyond end of device [ 87.801714][ T4262] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 87.815782][ T4262] kworker/u8:16: attempt to access beyond end of device [ 87.815782][ T4262] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 87.817229][ T5875] lo: entered allmulticast mode [ 87.831916][ T4262] kworker/u8:16: attempt to access beyond end of device [ 87.831916][ T4262] loop4: rw=1, sector=257, nr_sectors = 16 limit=128 [ 87.848473][ T4262] kworker/u8:16: attempt to access beyond end of device [ 87.848473][ T4262] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 87.862322][ T5875] lo: left allmulticast mode [ 87.875763][ T4262] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 88.218760][ T5899] netlink: 24 bytes leftover after parsing attributes in process `syz.4.714'. [ 88.268122][ T5899] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5899 comm=syz.4.714 [ 88.338406][ T5506] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.346323][ T5506] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 88.453942][ T5904] netlink: 'syz.0.716': attribute type 1 has an invalid length. [ 88.487592][ T5904] 8021q: adding VLAN 0 to HW filter on device bond4 [ 88.542687][ T5904] vlan2: entered allmulticast mode [ 88.547851][ T5904] bond4: entered allmulticast mode [ 88.561450][ T5904] bond4: (slave geneve2): making interface the new active one [ 88.568936][ T5904] geneve2: entered allmulticast mode [ 88.575851][ T5904] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 88.585085][ T4256] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.609562][ T4256] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.626450][ T4256] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.635864][ T4256] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.752276][ T5914] loop2: detected capacity change from 0 to 512 [ 88.765571][ T5914] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 89.353416][ T5938] loop2: detected capacity change from 0 to 2048 [ 89.381484][ T5938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.399834][ T5938] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.729: bg 0: block 234: padding at end of block bitmap is not set [ 89.414835][ T5938] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 28 [ 89.427290][ T5938] EXT4-fs (loop2): This should not happen!! Data will be lost [ 89.427290][ T5938] [ 89.437312][ T5938] EXT4-fs (loop2): Total free blocks count 0 [ 89.443469][ T5938] EXT4-fs (loop2): Free/Dirty block details [ 89.449529][ T5938] EXT4-fs (loop2): free_blocks=0 [ 89.454785][ T5938] EXT4-fs (loop2): dirty_blocks=16 [ 89.460038][ T5938] EXT4-fs (loop2): Block reservation details [ 89.466685][ T5938] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 89.549736][ T5949] netlink: 'syz.4.731': attribute type 1 has an invalid length. [ 89.570670][ T5949] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.584357][ T5949] netlink: 20 bytes leftover after parsing attributes in process `syz.4.731'. [ 89.620411][ T5949] bond2: entered allmulticast mode [ 89.628061][ T3316] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #19: comm syz-executor: data will be lost [ 89.649039][ T5949] bond2: (slave ip6gretap2): making interface the new active one [ 89.668169][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.687932][ T5949] ip6gretap2: entered allmulticast mode [ 89.716796][ T5949] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 89.927611][ T5960] syzkaller0: entered promiscuous mode [ 89.933218][ T5960] syzkaller0: entered allmulticast mode [ 90.183818][ T5969] netlink: 'syz.5.739': attribute type 4 has an invalid length. [ 90.312423][ T5969] netlink: 'syz.5.739': attribute type 4 has an invalid length. [ 90.365414][ T5974] loop0: detected capacity change from 0 to 256 [ 90.744338][ T5980] syzkaller0: tun_net_xmit 28 [ 90.766322][ T5724] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 90.838023][ T5986] netlink: 'syz.0.745': attribute type 83 has an invalid length. [ 91.051217][ T5992] loop4: detected capacity change from 0 to 256 [ 91.165822][ T5992] FAT-fs (loop4): IO charset cp860 not found [ 92.323987][ T6025] serio: Serial port ttyS3 [ 92.470737][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 92.470754][ T28] audit: type=1400 audit(1775595194.389:1253): avc: denied { write } for pid=6021 comm="syz.0.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 92.598133][ T28] audit: type=1400 audit(1775595194.389:1254): avc: denied { read } for pid=6021 comm="syz.0.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 92.678882][ T6041] netlink: 'syz.2.764': attribute type 1 has an invalid length. [ 92.702382][ T6041] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.725468][ T28] audit: type=1400 audit(1775595194.649:1255): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 92.735591][ T6041] vlan3: entered allmulticast mode [ 92.750584][ T6041] bond2: entered allmulticast mode [ 92.777174][ T6041] bond2: (slave geneve2): making interface the new active one [ 92.785060][ T6041] geneve2: entered allmulticast mode [ 92.792264][ T6041] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 92.801342][ T4262] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.842776][ T4262] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.880514][ T4262] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.895532][ T6048] netlink: 24 bytes leftover after parsing attributes in process `syz.5.767'. [ 92.923795][ T4262] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.941099][ T6050] loop2: detected capacity change from 0 to 512 [ 92.961048][ T6050] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.768: missing EA_INODE flag [ 92.994204][ T6050] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 93.000705][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 93.016432][ C1] EXT4-fs (loop2): initial error at time 1775595194: ext4_xattr_inode_iget:441: inode 12 [ 93.026663][ C1] EXT4-fs (loop2): last error at time 1775595194: ext4_xattr_inode_iget:441: inode 12 [ 93.027571][ T6054] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6054 comm=syz.5.767 [ 93.052439][ T6050] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.768: error while reading EA inode 12 err=-117 [ 93.097616][ T6050] loop2: lost filesystem error report for type 5 error -117 [ 93.097825][ T6050] EXT4-fs (loop2): 1 orphan inode deleted [ 93.139208][ T6050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.502076][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.576838][ T6068] loop5: detected capacity change from 0 to 128 [ 94.095024][ T6080] syzkaller0: entered promiscuous mode [ 94.100530][ T6080] syzkaller0: entered allmulticast mode [ 94.191159][ T6084] netlink: 24 bytes leftover after parsing attributes in process `syz.0.778'. [ 94.332386][ T6086] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6086 comm=syz.0.778 [ 94.569087][ T28] audit: type=1400 audit(1775595196.499:1256): avc: denied { create } for pid=6087 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 94.579208][ T6088] capability: warning: `syz.2.779' uses 32-bit capabilities (legacy support in use) [ 94.641957][ T6092] netlink: 'syz.5.780': attribute type 10 has an invalid length. [ 94.654152][ T6094] loop1: detected capacity change from 0 to 512 [ 94.684464][ T6092] team0: Port device xfrm0 added [ 94.696429][ T6094] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.715904][ T6094] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.762520][ T6094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.827221][ T6094] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.865052][ T6105] netlink: 'syz.2.785': attribute type 13 has an invalid length. [ 94.882520][ T28] audit: type=1400 audit(1775595196.819:1257): avc: denied { mount } for pid=6102 comm="syz.0.784" name="/" dev="configfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 94.955930][ T28] audit: type=1400 audit(1775595196.819:1258): avc: denied { search } for pid=6102 comm="syz.0.784" name="/" dev="configfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.133164][ T6119] loop2: detected capacity change from 0 to 512 [ 95.161801][ T6119] EXT4-fs: Ignoring removed nobh option [ 95.187383][ T6119] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.199212][ T6121] lo: entered allmulticast mode [ 95.204639][ T6121] lo: left allmulticast mode [ 95.251856][ T6119] EXT4-fs (loop2): 1 truncate cleaned up [ 95.268072][ T6119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.317398][ T28] audit: type=1400 audit(1775595197.239:1259): avc: denied { read } for pid=6118 comm="syz.2.791" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.359083][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.404565][ T28] audit: type=1400 audit(1775595197.239:1260): avc: denied { open } for pid=6118 comm="syz.2.791" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.468835][ T28] audit: type=1400 audit(1775595197.239:1261): avc: denied { ioctl } for pid=6118 comm="syz.2.791" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.520274][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.559408][ T28] audit: type=1400 audit(1775595197.239:1262): avc: denied { ioctl } for pid=6118 comm="syz.2.791" path="socket:[14767]" dev="sockfs" ino=14767 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.559993][ T6126] Driver unsupported XDP return value 0 on prog (id 179) dev N/A, expect packet loss! [ 95.624843][ T5510] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 95.635750][ T5510] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 96.881800][ C1] scsi_io_completion_action: 6 callbacks suppressed [ 96.881830][ C1] sd 0:0:1:0: [sda] tag#4728 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 96.899355][ C1] sd 0:0:1:0: [sda] tag#4728 CDB: Read(6) 08 00 00 00 00 00 [ 96.906806][ C1] sd 0:0:1:0: [sda] tag#4729 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 96.917201][ C1] sd 0:0:1:0: [sda] tag#4729 CDB: Read(6) 08 00 00 00 00 00 [ 97.219553][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.808'. [ 97.228779][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.808'. [ 97.390768][ T6181] loop2: detected capacity change from 0 to 512 [ 97.436665][ T6181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.464627][ T6181] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.481020][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 97.481042][ T28] audit: type=1400 audit(1775595199.419:1265): avc: denied { create } for pid=6180 comm="syz.2.812" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 97.540891][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.560668][ T28] audit: type=1400 audit(1775595199.459:1266): avc: denied { remove_name } for pid=6180 comm="syz.2.812" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.593871][ T28] audit: type=1400 audit(1775595199.459:1267): avc: denied { rename } for pid=6180 comm="syz.2.812" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.616429][ T28] audit: type=1400 audit(1775595199.459:1268): avc: denied { rmdir } for pid=6180 comm="syz.2.812" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 97.638874][ T28] audit: type=1400 audit(1775595199.459:1269): avc: denied { rename } for pid=6180 comm="syz.2.812" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 97.662287][ T28] audit: type=1400 audit(1775595199.459:1270): avc: denied { rmdir } for pid=6180 comm="syz.2.812" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.697140][ T6189] ªªªªªª: renamed from vlan0 [ 97.760843][ T28] audit: type=1400 audit(1775595199.689:1271): avc: denied { write } for pid=6190 comm="syz.0.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.079524][ T6202] loop5: detected capacity change from 0 to 512 [ 98.097073][ T6202] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.109347][ T6202] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 98.154302][ T6202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.180875][ T6202] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.562376][ T3693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.823767][ T6217] loop5: detected capacity change from 0 to 512 [ 98.917144][ T6217] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 98.944161][ T6217] System zones: 0-2, 18-18, 34-34 [ 98.957100][ T6217] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 98.980762][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 98.987333][ C0] EXT4-fs (loop5): initial error at time 1775595200: ext4_mb_generate_buddy:1317 [ 98.996555][ C0] EXT4-fs (loop5): last error at time 1775595200: ext4_mb_generate_buddy:1317 [ 99.006773][ T6217] EXT4-fs (loop5): Remounting filesystem read-only [ 99.020194][ T6217] EXT4-fs (loop5): 1 truncate cleaned up [ 99.030772][ T1899] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 99.048452][ T6217] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.061101][ T1899] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 99.076063][ T1899] Quota error (device loop5): write_blk: dquota write failed [ 99.086310][ T6217] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.097170][ T1899] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 99.098727][ T6221] netlink: 'syz.2.826': attribute type 4 has an invalid length. [ 99.110723][ T1899] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 99.140750][ T1899] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 99.207667][ T6223] netlink: 'syz.2.827': attribute type 10 has an invalid length. [ 99.224250][ T3693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.242724][ T6223] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 99.374265][ T6229] loop5: detected capacity change from 0 to 512 [ 99.412978][ T6229] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.831: inode has both inline data and extents flags [ 99.458279][ T6229] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 99.458456][ T6229] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.831: couldn't read orphan inode 15 (err -117) [ 99.467850][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 99.467867][ C0] EXT4-fs (loop5): initial error at time 1775595201: ext4_orphan_get:1397: inode 15 [ 99.467924][ C0] EXT4-fs (loop5): last error at time 1775595201: ext4_orphan_get:1397: inode 15 [ 99.580935][ T6229] loop5: lost filesystem error report for type 5 error -117 [ 99.581456][ T6229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.752287][ T3693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.805726][ T6244] netlink: 763 bytes leftover after parsing attributes in process `syz.5.834'. [ 100.022979][ T6261] loop5: detected capacity change from 0 to 128 [ 100.031799][ T6262] syzkaller0: entered promiscuous mode [ 100.037712][ T6262] syzkaller0: entered allmulticast mode [ 100.070363][ T6261] bio_check_eod: 32 callbacks suppressed [ 100.070382][ T6261] syz.5.843: attempt to access beyond end of device [ 100.070382][ T6261] loop5: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 100.130762][ T6261] Buffer I/O error on dev loop5, logical block 128, lost async page write [ 100.160151][ T6261] syz.5.843: attempt to access beyond end of device [ 100.160151][ T6261] loop5: rw=8390657, sector=129, nr_sectors = 1 limit=128 [ 100.194455][ T6261] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 100.203074][ T6261] syz.5.843: attempt to access beyond end of device [ 100.203074][ T6261] loop5: rw=8390657, sector=130, nr_sectors = 1 limit=128 [ 100.216742][ T6261] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 100.225861][ T6261] syz.5.843: attempt to access beyond end of device [ 100.225861][ T6261] loop5: rw=8390657, sector=131, nr_sectors = 1 limit=128 [ 100.239815][ T6261] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 100.248652][ T6261] syz.5.843: attempt to access beyond end of device [ 100.248652][ T6261] loop5: rw=8390657, sector=132, nr_sectors = 1 limit=128 [ 100.277686][ T6261] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 100.286554][ T6261] syz.5.843: attempt to access beyond end of device [ 100.286554][ T6261] loop5: rw=8390657, sector=133, nr_sectors = 1 limit=128 [ 100.300588][ T6261] Buffer I/O error on dev loop5, logical block 133, lost async page write [ 100.324005][ T6261] syz.5.843: attempt to access beyond end of device [ 100.324005][ T6261] loop5: rw=8390657, sector=135, nr_sectors = 1 limit=128 [ 100.340088][ T6261] Buffer I/O error on dev loop5, logical block 135, lost async page write [ 100.349005][ T6261] syz.5.843: attempt to access beyond end of device [ 100.349005][ T6261] loop5: rw=8390657, sector=144, nr_sectors = 1 limit=128 [ 100.362961][ T6261] Buffer I/O error on dev loop5, logical block 144, lost async page write [ 100.371744][ T6261] syz.5.843: attempt to access beyond end of device [ 100.371744][ T6261] loop5: rw=8390657, sector=145, nr_sectors = 1 limit=128 [ 100.386271][ T6261] Buffer I/O error on dev loop5, logical block 145, lost async page write [ 100.395018][ T6261] syz.5.843: attempt to access beyond end of device [ 100.395018][ T6261] loop5: rw=8390657, sector=146, nr_sectors = 1 limit=128 [ 100.409040][ T6261] Buffer I/O error on dev loop5, logical block 146, lost async page write [ 100.543505][ T6273] netlink: 24 bytes leftover after parsing attributes in process `syz.2.847'. [ 100.553144][ T6271] syzkaller0: entered promiscuous mode [ 100.558676][ T6271] syzkaller0: entered allmulticast mode [ 100.851910][ T6281] syzkaller0: entered promiscuous mode [ 100.857520][ T6281] syzkaller0: entered allmulticast mode [ 101.877950][ T6305] netlink: 24 bytes leftover after parsing attributes in process `syz.5.860'. [ 101.924441][ T6307] vlan4: entered allmulticast mode [ 101.990814][ T6307] bond0: entered allmulticast mode [ 101.998169][ T6307] bond_slave_0: entered allmulticast mode [ 102.020721][ T6307] bond_slave_1: entered allmulticast mode [ 102.030890][ T6307] dummy0: entered allmulticast mode [ 102.077077][ T6307] netlink: 14 bytes leftover after parsing attributes in process `syz.2.861'. [ 102.163814][ T6307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.180547][ T5724] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 102.189771][ T5724] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 102.189987][ T6307] bond_slave_0: left allmulticast mode [ 102.232601][ T6307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.258753][ T6307] bond_slave_1: left allmulticast mode [ 102.271441][ T6307] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 102.289962][ T6307] dummy0: left allmulticast mode [ 102.305919][ T6307] bond0 (unregistering): Released all slaves [ 103.679369][ T6359] ªªªªªª: renamed from vlan0 (while UP) [ 103.892096][ T6364] loop0: detected capacity change from 0 to 512 [ 103.923916][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 103.923931][ T28] audit: type=1400 audit(1775595461.863:1275): avc: denied { write } for pid=6361 comm="syz.5.881" path="socket:[14200]" dev="sockfs" ino=14200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.985089][ T6364] ------------[ cut here ]------------ [ 103.990583][ T6364] EA inode 11 i_nlink=0 [ 103.990597][ T6364] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.0.882/6364 [ 104.000180][ T28] audit: type=1400 audit(1775595461.863:1276): avc: denied { read } for pid=6361 comm="syz.5.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.005851][ T6364] Modules linked in: [ 104.005871][ T6364] CPU: 1 UID: 0 PID: 6364 Comm: syz.0.882 Tainted: G W syzkaller #0 PREEMPT(full) [ 104.040534][ T6364] Tainted: [W]=WARN [ 104.044449][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 104.054660][ T6364] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 104.061412][ T6364] Code: 54 33 99 ff 4c 8d 2d 9d a5 5d 05 49 8d 7e 40 e8 94 cc b5 ff 49 8b 6e 40 4c 89 e7 e8 c8 c7 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 1f e8 dd 03 66 66 66 66 66 66 2e [ 104.081171][ T6364] RSP: 0018:ffffc90013c2b5a8 EFLAGS: 00010246 [ 104.087253][ T6364] RAX: ffff888103ddde88 RBX: ffff88811b9ea048 RCX: ffffffff81c02778 [ 104.095636][ T6364] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871dcd00 [ 104.103656][ T6364] RBP: 000000000000000b R08: 000188811b9e9ffb R09: 0000000000000000 [ 104.111868][ T6364] R10: ffffc90013c2b4d8 R11: 0001c90013c2b4d8 R12: ffff88811b9e9ff8 [ 104.119892][ T6364] R13: ffffffff871dcd00 R14: ffff88811b9e9fb0 R15: 0000000000000001 [ 104.127906][ T6364] FS: 00007f6eee1c76c0(0000) GS:ffff8882ae9d7000(0000) knlGS:0000000000000000 [ 104.136870][ T6364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.143481][ T6364] CR2: 0000000100000002 CR3: 000000011c308000 CR4: 00000000003506f0 [ 104.151515][ T6364] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 104.159494][ T6364] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 104.167531][ T6364] Call Trace: [ 104.170858][ T6364] [ 104.173853][ T6364] ext4_xattr_set_entry+0x77c/0x1010 [ 104.179267][ T6364] ext4_xattr_ibody_set+0x184/0x3c0 [ 104.184526][ T6364] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 104.190354][ T6364] __ext4_expand_extra_isize+0x246/0x280 [ 104.196047][ T6364] __ext4_mark_inode_dirty+0x29b/0x400 [ 104.201612][ T6364] ext4_evict_inode+0x865/0xe40 [ 104.206573][ T6364] ? __pfx_ext4_evict_inode+0x10/0x10 [ 104.212072][ T6364] evict+0x2af/0x510 [ 104.216118][ T6364] ? __dquot_initialize+0x146/0x7c0 [ 104.221551][ T6364] iput+0x41a/0x580 [ 104.225383][ T6364] ext4_process_orphan+0x1a9/0x1c0 [ 104.230618][ T6364] ext4_orphan_cleanup+0x6a8/0xa00 [ 104.235819][ T6364] ext4_fill_super+0x3414/0x37c0 [ 104.241361][ T6364] ? set_blocksize+0x14c/0x270 [ 104.246186][ T6364] ? setup_bdev_super+0x30e/0x370 [ 104.251408][ T6364] ? __pfx_ext4_fill_super+0x10/0x10 [ 104.256767][ T6364] get_tree_bdev_flags+0x291/0x300 [ 104.262076][ T6364] ? __pfx_ext4_fill_super+0x10/0x10 [ 104.267476][ T6364] get_tree_bdev+0x1f/0x30 [ 104.272073][ T6364] ext4_get_tree+0x1c/0x30 [ 104.276510][ T6364] vfs_get_tree+0x57/0x1d0 [ 104.280996][ T6364] do_new_mount+0x288/0x8d0 [ 104.285780][ T6364] path_mount+0x4d0/0xbc0 [ 104.290404][ T6364] __se_sys_mount+0x28c/0x2e0 [ 104.295284][ T6364] __x64_sys_mount+0x67/0x80 [ 104.299908][ T6364] x64_sys_call+0x2d61/0x3020 [ 104.304904][ T6364] do_syscall_64+0x12c/0x370 [ 104.309525][ T6364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.315486][ T6364] RIP: 0033:0x7f6eef76da8a [ 104.320171][ T6364] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.340849][ T6364] RSP: 002b:00007f6eee1c6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 104.349443][ T6364] RAX: ffffffffffffffda RBX: 00007f6eee1c6ee0 RCX: 00007f6eef76da8a [ 104.357682][ T6364] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f6eee1c6ea0 [ 104.365702][ T6364] RBP: 0000200000000180 R08: 00007f6eee1c6ee0 R09: 0000000000000000 [ 104.373985][ T6364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 104.382107][ T6364] R13: 00007f6eee1c6ea0 R14: 000000000000047a R15: 0000200000000080 [ 104.390186][ T6364] [ 104.393234][ T6364] ---[ end trace 0000000000000000 ]--- [ 104.399221][ T6364] EXT4-fs error (device loop0): ext4_free_inode:354: comm syz.0.882: bit already cleared for inode 11 [ 104.410298][ T6364] loop0: lost filesystem error report for type 5 error -117 [ 104.410691][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 104.424556][ C1] EXT4-fs (loop0): initial error at time 1775595462: ext4_free_inode:354 [ 104.432992][ C1] EXT4-fs (loop0): last error at time 1775595462: ext4_free_inode:354 [ 104.441646][ T6364] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 104.450232][ T6364] loop0: lost filesystem error report for type 5 error -117 [ 104.450549][ T6364] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 104.466725][ T6364] loop0: lost filesystem error report for type 5 error -117 [ 104.466986][ T6364] EXT4-fs (loop0): 1 orphan inode deleted [ 104.501090][ T6364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.602211][ T28] audit: type=1400 audit(1775595462.543:1277): avc: denied { setopt } for pid=6363 comm="syz.0.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.651449][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.471197][ T28] audit: type=1326 audit(1775595463.403:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6393 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba99fdc819 code=0x7ffc0000 [ 105.510607][ T28] audit: type=1326 audit(1775595463.433:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6393 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba99fdc819 code=0x7ffc0000 [ 105.534598][ T28] audit: type=1326 audit(1775595463.433:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6393 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba99fdc819 code=0x7ffc0000 [ 105.572749][ T28] audit: type=1326 audit(1775595463.433:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6393 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fba99fdc819 code=0x7ffc0000 [ 105.597607][ T28] audit: type=1326 audit(1775595463.433:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6393 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba99fdc819 code=0x7ffc0000 [ 105.622156][ T28] audit: type=1326 audit(1775595463.433:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6393 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba99fdc819 code=0x7ffc0000 [ 105.649503][ T28] audit: type=1326 audit(1775595463.433:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6393 comm="syz.5.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba99fdc819 code=0x7ffc0000 [ 105.836006][ T6405] loop2: detected capacity change from 0 to 512 [ 106.825403][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'. [ 106.976895][ T6435] loop1: detected capacity change from 0 to 128 [ 106.991116][ T6435] FAT-fs (loop1): bogus number of reserved sectors [ 107.022179][ T6435] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 107.060749][ T6435] FAT-fs (loop1): Can't find a valid FAT filesystem [ 107.834843][ T6439] loop5: detected capacity change from 0 to 512 [ 107.855442][ T6441] loop2: detected capacity change from 0 to 512 [ 107.856711][ T6439] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 107.890475][ T6441] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.923996][ T6441] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.941440][ T6439] EXT4-fs (loop5): 1 truncate cleaned up [ 107.947486][ T6439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.965689][ T6441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.981367][ T6441] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.101888][ T3693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.176067][ T6471] netlink: 12 bytes leftover after parsing attributes in process `syz.5.914'. [ 108.188839][ T6470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.915'. [ 108.323072][ T6476] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6476 comm=syz.0.915 [ 108.387205][ T6471] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.431358][ T6479] sg_read: process 508 (syz.0.916) changed security contexts after opening file descriptor, this is not allowed. [ 108.550290][ T6485] loop0: detected capacity change from 0 to 2048 [ 108.582730][ T6485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.671862][ T6449] chnl_net:caif_netlink_parms(): no params data found [ 108.719860][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.808768][ T6449] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.815985][ T6449] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.823204][ T6449] bridge_slave_0: entered allmulticast mode [ 108.829954][ T6449] bridge_slave_0: entered promiscuous mode [ 108.837294][ T6449] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.844878][ T6449] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.852386][ T6449] bridge_slave_1: entered allmulticast mode [ 108.859079][ T6449] bridge_slave_1: entered promiscuous mode [ 108.877813][ T6449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.888627][ T6449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.908761][ T6449] team0: Port device team_slave_0 added [ 108.915512][ T6449] team0: Port device team_slave_1 added [ 108.931695][ T6449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.938917][ T6449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.965252][ T6449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.991589][ T6449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.998562][ T6449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.034910][ T6449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.189035][ T6505] ªªªªªª: renamed from vlan0 [ 109.217420][ T6449] hsr_slave_0: entered promiscuous mode [ 109.234805][ T6449] hsr_slave_1: entered promiscuous mode [ 109.247321][ T6449] debugfs: 'hsr0' already exists in 'hsr' [ 109.269643][ T6449] Cannot create hsr debugfs directory [ 109.324766][ T6494] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 109.376501][ T6449] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 109.388420][ T6449] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 109.401301][ T6494] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 109.416115][ T6449] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 109.436338][ T6494] EXT4-fs (loop0): This should not happen!! Data will be lost [ 109.436338][ T6494] [ 109.447326][ T6494] EXT4-fs (loop0): Total free blocks count 0 [ 109.454155][ T6449] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 109.471440][ T6494] EXT4-fs (loop0): Free/Dirty block details [ 109.477665][ T6494] EXT4-fs (loop0): free_blocks=66060288 [ 109.491603][ T6494] EXT4-fs (loop0): dirty_blocks=8208 [ 109.496930][ T6494] EXT4-fs (loop0): Block reservation details [ 109.504262][ T6494] EXT4-fs (loop0): i_reserved_data_blocks=513 [ 109.513260][ T6494] syz.0.920 (6494) used greatest stack depth: 9072 bytes left [ 109.533683][ T6485] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 109.597585][ T6449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.624347][ T6449] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.643694][ T4262] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.650911][ T4262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.680641][ T4262] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.687735][ T4262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.693327][ T3321] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 109.813657][ T6449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.927381][ T6449] veth0_vlan: entered promiscuous mode [ 109.935922][ T6449] veth1_vlan: entered promiscuous mode [ 109.953513][ T6449] veth0_macvtap: entered promiscuous mode [ 109.961484][ T6449] veth1_macvtap: entered promiscuous mode [ 109.972767][ T6449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.992578][ T6449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.003681][ T4256] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.017560][ T4256] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.026478][ T4256] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.037700][ T4256] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.057309][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 110.057321][ T28] audit: type=1400 audit(1775595467.993:1378): avc: denied { mounton } for pid=6449 comm="syz-executor" path="/root/syzkaller.T7l3jU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=16479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 110.091922][ T28] audit: type=1400 audit(1775595468.033:1379): avc: denied { mount } for pid=6449 comm="syz-executor" name="/" dev="gadgetfs" ino=4060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 110.129845][ T28] audit: type=1400 audit(1775595468.063:1380): avc: denied { bind } for pid=6531 comm="syz.1.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.060129][ T6545] loop1: detected capacity change from 0 to 512 [ 111.098578][ T6549] loop5: detected capacity change from 0 to 2048 [ 111.116029][ T6545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.153828][ T6545] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.165721][ T6549] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.207398][ T28] audit: type=1326 audit(1775595469.143:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6555 comm="syz.2.945" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f350981c819 code=0x0 [ 111.254757][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.286180][ T6549] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.928: bg 0: block 234: padding at end of block bitmap is not set [ 111.332650][ T6549] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 400 with error 28 [ 111.345415][ T6549] EXT4-fs (loop5): This should not happen!! Data will be lost [ 111.345415][ T6549] [ 111.356326][ T6549] EXT4-fs (loop5): Total free blocks count 0 [ 111.368293][ T6549] EXT4-fs (loop5): Free/Dirty block details [ 111.379534][ T6549] EXT4-fs (loop5): free_blocks=0 [ 111.389167][ T6549] EXT4-fs (loop5): dirty_blocks=416 [ 111.400142][ T6549] EXT4-fs (loop5): Block reservation details [ 111.411724][ T6549] EXT4-fs (loop5): i_reserved_data_blocks=26 [ 111.428729][ T6578] loop0: detected capacity change from 0 to 512 [ 111.482083][ T3693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.513275][ T6578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.571007][ T6578] ext4 filesystem being mounted at /206/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.605324][ T28] audit: type=1400 audit(1775595469.543:1382): avc: denied { watch watch_reads } for pid=6582 comm="syz.1.943" path="/171/file0" dev="tmpfs" ino=905 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 111.636047][ T28] audit: type=1400 audit(1775595469.573:1383): avc: denied { append } for pid=6577 comm="syz.0.941" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 111.856540][ T28] audit: type=1400 audit(1775595469.793:1384): avc: denied { ioctl } for pid=6577 comm="syz.0.941" path="/206/bus/file1" dev="loop0" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 111.894752][ T6597] loop6: detected capacity change from 0 to 512 [ 111.922407][ T28] audit: type=1400 audit(1775595469.863:1385): avc: denied { remount } for pid=6595 comm="syz.6.947" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 112.000180][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.041871][ T6609] tipc: Failed to remove unknown binding: 66,2,2/0:2661447803/2661447807 [ 112.094135][ T6614] loop0: detected capacity change from 0 to 1024 [ 112.101199][ T6614] EXT4-fs: Ignoring removed bh option [ 112.229502][ T6614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.256101][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.611026][ T6621] syzkaller0: entered promiscuous mode [ 112.641097][ T6621] syzkaller0: entered allmulticast mode [ 112.856529][ T6632] loop1: detected capacity change from 0 to 512 [ 112.872675][ T6632] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.896635][ T6632] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.993136][ T6632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.005780][ T6632] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.019986][ T6632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.032308][ T6632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.355710][ T6650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.385473][ T6650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.672048][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.974059][ T6674] loop1: detected capacity change from 0 to 128 [ 115.367010][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.987'. [ 115.432406][ T6719] io-wq is not configured for unbound workers [ 115.478239][ T6724] netlink: 'syz.0.992': attribute type 1 has an invalid length. [ 115.501152][ T6722] syzkaller0: entered promiscuous mode [ 115.510741][ T6722] syzkaller0: entered allmulticast mode [ 115.531193][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'. [ 115.689827][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.994'. [ 115.818391][ T6724] 8021q: adding VLAN 0 to HW filter on device bond5 [ 115.911062][ T6725] bond5: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 115.921296][ T6725] bond5: entered allmulticast mode [ 115.940573][ T6744] loop6: detected capacity change from 0 to 1024 [ 115.950909][ T6744] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 115.989067][ T6744] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 115.997754][ T6744] EXT4-fs (loop6): orphan cleanup on readonly fs [ 116.005016][ T6744] EXT4-fs error (device loop6): __ext4_get_inode_loc:4797: comm syz.6.997: Invalid inode table block 0 in block_group 0 [ 116.022899][ T6727] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 116.071162][ T28] audit: type=1400 audit(1775595474.013:1386): avc: denied { name_bind } for pid=6748 comm="syz.0.998" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 116.104856][ T6744] loop6: lost filesystem error report for type 5 error -117 [ 116.105004][ T6744] EXT4-fs (loop6): Remounting filesystem read-only [ 116.112341][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 116.112361][ C0] EXT4-fs (loop6): initial error at time 1775595474: __ext4_get_inode_loc:4797 [ 116.112387][ C0] EXT4-fs (loop6): last error at time 1775595474: __ext4_get_inode_loc:4797 [ 116.167205][ T28] audit: type=1400 audit(1775595474.033:1387): avc: denied { open } for pid=6748 comm="syz.0.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 116.189421][ T6744] Quota error (device loop6): write_blk: dquota write failed [ 116.210790][ T6744] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 116.221579][ T28] audit: type=1400 audit(1775595474.033:1388): avc: denied { kernel } for pid=6748 comm="syz.0.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 116.241197][ T28] audit: type=1400 audit(1775595474.033:1389): avc: denied { tracepoint } for pid=6748 comm="syz.0.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 116.250828][ T6744] EXT4-fs (loop6): 1 truncate cleaned up [ 116.267771][ T6744] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.296441][ T6751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.999'. [ 116.321751][ T28] audit: type=1400 audit(1775595474.263:1390): avc: denied { write } for pid=6742 comm="syz.6.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 116.390563][ T6449] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.498801][ T6766] netlink: 'syz.1.1004': attribute type 11 has an invalid length. [ 116.824478][ T28] audit: type=1400 audit(1775595474.763:1391): avc: denied { bind } for pid=6787 comm="syz.5.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 117.444419][ T6796] syzkaller0: entered promiscuous mode [ 117.462579][ T6796] syzkaller0: entered allmulticast mode [ 117.570235][ T6802] loop2: detected capacity change from 0 to 128 [ 117.577627][ T6802] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.634474][ T6806] loop1: detected capacity change from 0 to 164 [ 117.661416][ T6807] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1019'. [ 117.802973][ T6810] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.356057][ T28] audit: type=1400 audit(1775595477.293:1392): avc: denied { read write } for pid=6853 comm="syz.1.1036" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 119.428992][ T28] audit: type=1400 audit(1775595477.323:1393): avc: denied { open } for pid=6853 comm="syz.1.1036" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 119.634996][ T3737] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 120.353693][ T6876] vlan0: entered allmulticast mode [ 120.390036][ T6876] bond0: entered allmulticast mode [ 120.410090][ T6878] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1043'. [ 120.442572][ T6871] loop0: detected capacity change from 0 to 8192 [ 120.665105][ T6877] syzkaller0: entered promiscuous mode [ 120.690844][ T6877] syzkaller0: entered allmulticast mode [ 120.716601][ T6878] bond0 (unregistering): Released all slaves [ 121.080883][ T28] kauditd_printk_skb: 1233 callbacks suppressed [ 121.080953][ T28] audit: type=1326 audit(1775595479.023:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.0.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6eef766597 code=0x7ffc0000 [ 121.131919][ T6892] audit: audit_backlog=65 > audit_backlog_limit=64 [ 121.165141][ T6892] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 121.180743][ T28] audit: type=1326 audit(1775595479.053:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.0.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6eef70db99 code=0x7ffc0000 [ 121.209874][ T6892] audit: backlog limit exceeded [ 121.286370][ T28] audit: type=1326 audit(1775595479.053:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.0.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6eef766597 code=0x7ffc0000 [ 121.346724][ T28] audit: type=1326 audit(1775595479.053:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.0.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6eef70db99 code=0x7ffc0000 [ 121.398876][ T28] audit: type=1326 audit(1775595479.053:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.0.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6eef766597 code=0x7ffc0000 [ 121.456711][ T28] audit: type=1326 audit(1775595479.053:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.0.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6eef70db99 code=0x7ffc0000 [ 121.511163][ T28] audit: type=1326 audit(1775595479.053:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6885 comm="syz.0.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6eef766597 code=0x7ffc0000 [ 121.587010][ T6913] syzkaller0: entered promiscuous mode [ 121.592530][ T6913] syzkaller0: entered allmulticast mode [ 121.747440][ T6921] loop0: detected capacity change from 0 to 1024 [ 121.791318][ T6921] EXT4-fs: Ignoring removed bh option [ 121.993090][ T6921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.304128][ T6934] syzkaller0: entered promiscuous mode [ 122.315273][ T6934] syzkaller0: entered allmulticast mode [ 122.341190][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.359932][ T6936] vlan2: entered allmulticast mode [ 122.373406][ T6936] bond0: entered allmulticast mode [ 122.380393][ T6936] bond_slave_0: entered allmulticast mode [ 122.386843][ T6936] bond_slave_1: entered allmulticast mode [ 122.421271][ T6936] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1061'. [ 122.436978][ T6936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.454854][ T6936] bond_slave_0: left allmulticast mode [ 122.467274][ T6936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.475019][ T6943] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1063'. [ 122.485071][ T6936] bond_slave_1: left allmulticast mode [ 122.494704][ T6936] bond0 (unregistering): Released all slaves [ 122.502214][ T6942] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 122.532395][ T6945] syzkaller0: entered promiscuous mode [ 122.537999][ T6945] syzkaller0: entered allmulticast mode [ 122.581011][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1067'. [ 123.266244][ T6965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1073'. [ 123.315892][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1073'. [ 123.512537][ T6983] loop6: detected capacity change from 0 to 512 [ 123.553684][ T6990] loop0: detected capacity change from 0 to 1024 [ 123.555525][ T6983] EXT4-fs: Ignoring removed nobh option [ 123.570436][ T6990] EXT4-fs: Ignoring removed orlov option [ 123.605175][ T6990] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 123.613399][ T6990] System zones: 0-1, 3-12 [ 123.631223][ T6990] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.660945][ T6983] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #3: comm syz.6.1082: corrupted inode contents [ 123.673896][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1088'. [ 123.683908][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1088'. [ 123.693102][ T6983] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 123.693307][ T6983] EXT4-fs error (device loop6): ext4_dirty_inode:6495: inode #3: comm syz.6.1082: mark_inode_dirty error [ 123.702406][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 123.702421][ C1] EXT4-fs (loop6): initial error at time 1775595481: ext4_do_update_inode:5602: inode 3 [ 123.702446][ C1] EXT4-fs (loop6): last error at time 1775595481: ext4_do_update_inode:5602: inode 3 [ 123.770790][ T6983] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 123.771802][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1088'. [ 123.790496][ T6983] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #3: comm syz.6.1082: corrupted inode contents [ 123.804481][ T6983] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 123.804624][ T6983] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #3: comm syz.6.1082: mark_inode_dirty error [ 123.828123][ T6983] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 123.828450][ T6983] EXT4-fs error (device loop6): ext4_acquire_dquot:7026: comm syz.6.1082: Failed to acquire dquot type 0 [ 123.849182][ T6983] loop6: lost filesystem error report for type 5 error -117 [ 123.850236][ T6983] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #16: comm syz.6.1082: corrupted inode contents [ 123.870246][ T6983] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 123.870376][ T6983] EXT4-fs error (device loop6): ext4_dirty_inode:6495: inode #16: comm syz.6.1082: mark_inode_dirty error [ 124.274134][ T6983] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 124.274652][ T6983] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #16: comm syz.6.1082: corrupted inode contents [ 124.296319][ T6983] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 124.297947][ T6983] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.1082: mark_inode_dirty error [ 124.352989][ T6983] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 124.353267][ T6983] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #16: comm syz.6.1082: corrupted inode contents [ 124.375567][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 124.384759][ T6983] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 124.384999][ T6983] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 124.403234][ T6983] loop6: lost filesystem error report for type 5 error -117 [ 124.403357][ T6983] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #16: comm syz.6.1082: corrupted inode contents [ 124.431287][ T6983] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 124.431759][ T6983] EXT4-fs error (device loop6): ext4_truncate:4602: inode #16: comm syz.6.1082: mark_inode_dirty error [ 124.462628][ T6983] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 124.524726][ T6983] loop6: lost filesystem error report for type 5 error -117 [ 124.525104][ T6983] EXT4-fs (loop6): 1 truncate cleaned up [ 124.538644][ T6983] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.559111][ T7010] loop1: detected capacity change from 0 to 128 [ 124.565905][ T7010] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 124.597095][ T6983] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.620907][ T7014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.793078][ T6449] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.067030][ T7040] loop5: detected capacity change from 0 to 256 [ 125.154117][ T7040] FAT-fs (loop5): IO charset cp949 not found [ 125.685255][ T7054] delete_channel: no stack [ 125.689484][ T7057] loop1: detected capacity change from 0 to 512 [ 125.780755][ T7057] EXT4-fs error (device loop1): ext4_iget_extra_inode:5040: inode #15: comm syz.1.1107: corrupted in-inode xattr: invalid ea_ino [ 125.796926][ T7062] netlink: 'syz.6.1109': attribute type 10 has an invalid length. [ 125.800951][ T7057] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1107: couldn't read orphan inode 15 (err -117) [ 125.816728][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 125.816750][ C1] EXT4-fs (loop1): initial error at time 1775595483: ext4_iget_extra_inode:5040: inode 15 [ 125.816784][ C1] EXT4-fs (loop1): last error at time 1775595483: ext4_iget_extra_inode:5040: inode 15 [ 125.844717][ T7057] loop1: lost filesystem error report for type 5 error -117 [ 125.845283][ T7057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.868055][ T7062] syz_tun: entered promiscuous mode [ 125.934408][ T7065] loop6: detected capacity change from 0 to 2048 [ 125.953562][ T7065] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.042051][ T7063] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 126.085084][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.123764][ T28] kauditd_printk_skb: 151 callbacks suppressed [ 126.123778][ T28] audit: type=1400 audit(1775595484.043:2783): avc: denied { bind } for pid=7068 comm="syz.0.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 126.162795][ T7074] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.1113'. [ 126.180843][ T7063] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 126.186482][ T28] audit: type=1400 audit(1775595484.093:2784): avc: denied { kexec_image_load } for pid=7070 comm="syz.0.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 126.280111][ T7081] vhci_hcd vhci_hcd.1: invalid port number 96 [ 126.288517][ T7081] vhci_hcd vhci_hcd.1: default hub control req: 1f0a vfffa i0060 l0 [ 126.300716][ T28] audit: type=1400 audit(1775595484.233:2785): avc: denied { mac_admin } for pid=7080 comm="syz.2.1115" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 126.300972][ T7081] SELinux: Context AÇÂ)ëát·'ðÃñÐ*'属õÿkµªì¨¶Ø´œL¨&ñÒzª [ 126.300972][ T7081] : is not valid (left unmapped). [ 126.498134][ T7065] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 2048 with error 28 [ 126.510955][ T7065] EXT4-fs (loop6): This should not happen!! Data will be lost [ 126.510955][ T7065] [ 126.520647][ T7065] EXT4-fs (loop6): Total free blocks count 0 [ 126.526917][ T7065] EXT4-fs (loop6): Free/Dirty block details [ 126.533012][ T7065] EXT4-fs (loop6): free_blocks=66060288 [ 126.538591][ T7065] EXT4-fs (loop6): dirty_blocks=8208 [ 126.544340][ T7065] EXT4-fs (loop6): Block reservation details [ 126.548366][ T7089] syzkaller0: entered promiscuous mode [ 126.550950][ T7065] EXT4-fs (loop6): i_reserved_data_blocks=513 [ 126.557439][ T7089] syzkaller0: entered allmulticast mode [ 126.587975][ T7072] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 126.880779][ T28] audit: type=1400 audit(1775595484.753:2786): avc: denied { create } for pid=7094 comm="syz.2.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 127.050169][ T28] audit: type=1400 audit(1775595484.773:2787): avc: denied { bind } for pid=7094 comm="syz.2.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 127.120314][ T6449] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 127.168167][ T28] audit: type=1400 audit(1775595485.103:2788): avc: denied { ioctl } for pid=7105 comm="syz.5.1126" path="socket:[17818]" dev="sockfs" ino=17818 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.194988][ T7108] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1126'. [ 127.386019][ T7129] loop1: detected capacity change from 0 to 2048 [ 127.413318][ T7129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.545553][ T7136] loop5: detected capacity change from 0 to 512 [ 127.565631][ T7136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.876018][ T3693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.001704][ T7134] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 128.019515][ T7134] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 128.036953][ T7134] EXT4-fs (loop1): This should not happen!! Data will be lost [ 128.036953][ T7134] [ 128.039168][ T7154] netlink: 'syz.5.1141': attribute type 2 has an invalid length. [ 128.047492][ T7134] EXT4-fs (loop1): Total free blocks count 0 [ 128.061392][ T7134] EXT4-fs (loop1): Free/Dirty block details [ 128.067807][ T7134] EXT4-fs (loop1): free_blocks=66060288 [ 128.074231][ T7134] EXT4-fs (loop1): dirty_blocks=8208 [ 128.079934][ T7134] EXT4-fs (loop1): Block reservation details [ 128.086826][ T7134] EXT4-fs (loop1): i_reserved_data_blocks=513 [ 128.108099][ T7129] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 128.150700][ T28] audit: type=1400 audit(1775595486.083:2789): avc: denied { ioctl } for pid=7155 comm="syz.2.1142" path="socket:[18522]" dev="sockfs" ino=18522 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.192505][ T28] audit: type=1400 audit(1775595486.083:2790): avc: denied { append } for pid=7155 comm="syz.2.1142" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 128.358834][ T3314] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 128.435618][ T7175] loop0: detected capacity change from 0 to 256 [ 128.471373][ T7175] FAT-fs (loop0): IO charset cp949 not found [ 128.509126][ T7177] syzkaller0: entered promiscuous mode [ 128.517982][ T7177] syzkaller0: entered allmulticast mode [ 129.635309][ T7201] netlink: 'syz.0.1160': attribute type 1 has an invalid length. [ 129.658920][ T7201] 8021q: adding VLAN 0 to HW filter on device bond6 [ 129.708097][ T7201] vlan0: entered allmulticast mode [ 129.740883][ T7201] bond6: entered allmulticast mode [ 129.750459][ T7204] loop5: detected capacity change from 0 to 2048 [ 129.771604][ T7205] bond6: (slave geneve3): making interface the new active one [ 129.779237][ T7205] geneve3: entered allmulticast mode [ 129.787259][ T7205] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 129.798540][ T7204] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.922291][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1162'. [ 129.940774][ T7212] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 129.985208][ T7215] syzkaller0: entered promiscuous mode [ 129.990891][ T7215] syzkaller0: entered allmulticast mode [ 130.126274][ T28] audit: type=1400 audit(1775595488.063:2791): avc: denied { accept } for pid=7216 comm="syz.0.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 130.407197][ T7211] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 130.449951][ T7211] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 130.472892][ T7211] EXT4-fs (loop5): This should not happen!! Data will be lost [ 130.472892][ T7211] [ 130.483229][ T7211] EXT4-fs (loop5): Total free blocks count 0 [ 130.500740][ T7211] EXT4-fs (loop5): Free/Dirty block details [ 130.506785][ T7211] EXT4-fs (loop5): free_blocks=66060288 [ 130.522278][ T7211] EXT4-fs (loop5): dirty_blocks=8208 [ 130.554979][ T7211] EXT4-fs (loop5): Block reservation details [ 130.574464][ T7211] EXT4-fs (loop5): i_reserved_data_blocks=513 [ 130.603585][ T7213] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 130.770519][ T7231] vhci_hcd vhci_hcd.1: invalid port number 96 [ 130.812447][ T7231] vhci_hcd vhci_hcd.1: default hub control req: 1f0a vfffa i0060 l0 [ 130.827075][ T3693] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 130.838281][ C0] vcan0: j1939_tp_rxtimer: 0xffff888104e42600: rx timeout, send abort [ 130.846603][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888104e42600: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 130.871595][ T28] audit: type=1400 audit(1775595488.803:2792): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 130.938982][ T7236] loop6: detected capacity change from 0 to 512 [ 130.992434][ T7236] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c198, mo2=0002] [ 131.000570][ T7236] System zones: 1-12 [ 131.060905][ T7236] EXT4-fs error (device loop6): ext4_iget_extra_inode:5040: inode #15: comm syz.6.1173: corrupted in-inode xattr: e_value size too large [ 131.100725][ T7236] fserror_report: 2 callbacks suppressed [ 131.100742][ T7236] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 131.120695][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 131.136475][ C0] EXT4-fs (loop6): initial error at time 1775595489: ext4_iget_extra_inode:5040: inode 15 [ 131.146427][ C0] EXT4-fs (loop6): last error at time 1775595489: ext4_iget_extra_inode:5040: inode 15 [ 131.156958][ T7236] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1173: couldn't read orphan inode 15 (err -117) [ 131.170567][ T7236] loop6: lost filesystem error report for type 5 error -117 [ 131.171436][ T7236] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.243814][ T6449] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.437116][ T7243] syzkaller0: entered promiscuous mode [ 131.471123][ T7243] syzkaller0: entered allmulticast mode [ 131.595159][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 131.595267][ T28] audit: type=1400 audit(1775595489.523:2799): avc: denied { mounton } for pid=7251 comm="syz.6.1177" path=2F34372FE91F7189591E9233614B dev="tmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 131.834629][ T7261] loop0: detected capacity change from 0 to 2048 [ 131.874481][ T7261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.887262][ T7261] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.910710][ T28] audit: type=1400 audit(1775595489.843:2800): avc: denied { firmware_load } for pid=7262 comm="syz.5.1182" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 131.936245][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1181'. [ 131.945421][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1181'. [ 131.955100][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1181'. [ 131.964380][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1181'. [ 132.028086][ T7268] loop2: detected capacity change from 0 to 512 [ 132.059698][ T7268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.073479][ T7268] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.073553][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.144254][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.190584][ T28] audit: type=1400 audit(1775595490.123:2801): avc: denied { write } for pid=7278 comm="syz.1.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.219812][ T28] audit: type=1400 audit(1775595490.133:2802): avc: denied { listen } for pid=7278 comm="syz.1.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.281744][ T7273] loop0: detected capacity change from 0 to 1024 [ 132.318224][ T7273] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 132.340988][ T7273] System zones: 0-1, 3-36 [ 132.406551][ T7273] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1184: bad orphan inode 134217728 [ 132.432596][ T7273] loop0: lost filesystem error report for type 5 error -117 [ 132.444671][ T7273] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.768647][ T7292] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1190'. [ 132.865687][ T7292] loop5: detected capacity change from 0 to 512 [ 133.266186][ T7297] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7297 comm=syz.6.1192 [ 133.511375][ T7306] loop5: detected capacity change from 0 to 128 [ 133.528209][ T7306] SELinux: failed to load policy [ 133.605072][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.649104][ T7313] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 133.676454][ T7313] 8021q: adding VLAN 0 to HW filter on device bond8 [ 133.702704][ T7313] bond7: (slave bond8): making interface the new active one [ 133.715993][ T7313] bond7: (slave bond8): Enslaving as an active interface with an up link [ 133.738050][ T28] audit: type=1400 audit(1775595491.663:2803): avc: denied { sys_module } for pid=7310 comm="syz.2.1197" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 133.812811][ T7326] syzkaller0: entered promiscuous mode [ 133.854728][ T7326] syzkaller0: entered allmulticast mode [ 133.952354][ T7323] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 134.233984][ T28] audit: type=1400 audit(1775595492.173:2804): avc: denied { append } for pid=7334 comm="syz.5.1200" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 134.234731][ T7335] 9p: Bad value for 'rfdno' [ 134.355601][ T7335] loop5: detected capacity change from 0 to 512 [ 134.365069][ T7335] EXT4-fs: Ignoring removed orlov option [ 134.383269][ T7335] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 134.412663][ T7335] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 134.423838][ T7335] EXT4-fs error (device loop5): ext4_iget_extra_inode:5040: inode #15: comm syz.5.1200: corrupted in-inode xattr: e_value size too large [ 134.460879][ T7335] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 134.467385][ T7335] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1200: couldn't read orphan inode 15 (err -117) [ 134.476662][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 134.476678][ C1] EXT4-fs (loop5): initial error at time 1775595492: ext4_iget_extra_inode:5040: inode 15 [ 134.476710][ C1] EXT4-fs (loop5): last error at time 1775595492: ext4_iget_extra_inode:5040: inode 15 [ 134.515086][ T7335] loop5: lost filesystem error report for type 5 error -117 [ 134.515619][ T7335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.621873][ T3693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.689205][ T7348] loop2: detected capacity change from 0 to 512 [ 134.715675][ T7345] loop6: detected capacity change from 0 to 8192 [ 134.735353][ T1899] ================================================================== [ 134.743521][ T1899] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 134.750829][ T1899] [ 134.753159][ T1899] read to 0xffff88811bfde9a0 of 4 bytes by task 4256 on cpu 0: [ 134.760708][ T1899] atime_needs_update+0x25f/0x3e0 [ 134.765753][ T1899] touch_atime+0x4a/0x330 [ 134.770128][ T1899] shmem_file_read_iter+0x477/0x540 [ 134.775436][ T1899] lo_rw_aio+0x67d/0x730 [ 134.779692][ T1899] loop_process_work+0x56c/0xac0 [ 134.784637][ T1899] loop_rootcg_workfn+0x22/0x30 [ 134.789592][ T1899] process_scheduled_works+0x513/0xa10 [ 134.795152][ T1899] worker_thread+0x58a/0x780 [ 134.799755][ T1899] kthread+0x22a/0x280 [ 134.803916][ T1899] ret_from_fork+0x150/0x360 [ 134.808512][ T1899] ret_from_fork_asm+0x1a/0x30 [ 134.813281][ T1899] [ 134.815695][ T1899] write to 0xffff88811bfde9a0 of 4 bytes by task 1899 on cpu 1: [ 134.823329][ T1899] touch_atime+0x1d7/0x330 [ 134.827759][ T1899] shmem_file_read_iter+0x477/0x540 [ 134.832967][ T1899] lo_rw_aio+0x67d/0x730 [ 134.837230][ T1899] loop_process_work+0x56c/0xac0 [ 134.842353][ T1899] loop_workfn+0x31/0x40 [ 134.846602][ T1899] process_scheduled_works+0x513/0xa10 [ 134.852073][ T1899] worker_thread+0x58a/0x780 [ 134.856850][ T1899] kthread+0x22a/0x280 [ 134.860920][ T1899] ret_from_fork+0x150/0x360 [ 134.865549][ T1899] ret_from_fork_asm+0x1a/0x30 [ 134.870339][ T1899] [ 134.872657][ T1899] value changed: 0x280f3228 -> 0x281eeb66 [ 134.878369][ T1899] [ 134.880718][ T1899] Reported by Kernel Concurrency Sanitizer on: [ 134.886877][ T1899] CPU: 1 UID: 0 PID: 1899 Comm: kworker/u8:9 Tainted: G W syzkaller #0 PREEMPT(full) [ 134.898002][ T1899] Tainted: [W]=WARN [ 134.901800][ T1899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 134.911856][ T1899] Workqueue: loop2 loop_workfn [ 134.916636][ T1899] ================================================================== [ 134.931041][ T7348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.180957][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.