last executing test programs: 8.977992644s ago: executing program 1 (id=332): setitimer(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @local, 0x4e6, 0x5, 0x2, 0x100, 0x800, 0x100000}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0xfd, 0x57e, &(0x7f00000011c0)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x242, 0x10) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f0000000700)={0x8, 0x4, 0x8, 0xfffffffffffffffd, 0x20000000, 0x3, 0xaf4e, 0x5, 0x200}) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r4, 0xffffffffffffffff, 0x0) 8.711691601s ago: executing program 1 (id=335): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000780)={[{@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@nodiscard}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@noload}, {@block_validity}]}, 0xfa, 0x481, &(0x7f0000003380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 6.272216168s ago: executing program 1 (id=349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(r4) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.255127926s ago: executing program 3 (id=346): setitimer(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @local, 0x4e6, 0x5, 0x2, 0x100, 0x800, 0x100000}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0xfd, 0x57e, &(0x7f00000011c0)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x242, 0x10) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f0000000700)={0x8, 0x4, 0x8, 0xfffffffffffffffd, 0x20000000, 0x3, 0xaf4e, 0x5, 0x200}) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r4, 0xffffffffffffffff, 0x0) 5.253437416s ago: executing program 1 (id=348): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x802, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 5.166492418s ago: executing program 1 (id=350): r0 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000080)='\x00', 0x800, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) get_mempolicy(0x0, &(0x7f0000000240), 0x705c, &(0x7f00000b0000/0x2000)=nil, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4212, r1, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000001500)) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [], 0xa, "df0fe05c6ea097fd42e29ff9aeeb4400080bf8b790e379e20f0ee9c83d97de4388c01fbee576ad89f47c7beb393d66577f1ca87a1c21f8fac0ee68fb80"}, 0x13a) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a3000000000a8000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d640012802c0001800a0001006c696d69740000001c0002800c00024000000000000010000c000140000000000000008b340001800a0001006c696d6974000000240002800c000240000000230000d2360c000140000000000000000708000440000000010800034000000110"], 0xf0}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) add_key(&(0x7f0000000140)='keyring\x00', 0x0, &(0x7f0000002300)="86fa", 0x2, 0xfffffffffffffffe) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) fcntl$notify(r3, 0x402, 0x1c) getdents64(r4, &(0x7f0000000780)=""/44, 0x2c) 5.064730481s ago: executing program 0 (id=351): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)=ANY=[@ANYRES32=0x0], 0x88}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@block_validity}, {@discard}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQKNbQmQohWD3g0JN6N/4XxpBejXjTxqndDQgwXUC9rZmemLMtu2aXbLnQ/n2S6zzPzdJ/nOzPP7jPz7G4APWsk+5NE/C8ifo+IoTx7a4GR/OHGtYtTf1+7OJVEpfLWX0m13PVrF6fKouX/bcszlUqR39Sg3kvvRkzOzc2cK/Jji2c+GFs4f+GF2TOTp2ZOzZydOHbs8KG9g0cnjnQkziyu67s/nt+z6/g7l9+YOnH5vZ+S/sjjjro4OmUk37sNPd3pyrpse026umOX7fvlZrrRmUA39UVEdrgGqv1/KPpiy/K2oXjts642DlhTlUqlssKr8lIF2MCS6HYLgO4o3+iz699yWaehxz3h6sv5BVAW941iybf0R5on9g3UXd920khEnFj656tsiTW6DwEAUOu7bPzzfKPxXxoP54nB7M//izmU4Yh4ICJ2RMSDEbEzIh6KqJZ9JCIebbP++hmS28c/6ZW7Dq4F2fjvpWJu69bxX1oWGe4rctur8Q8kJ2fnZg4W++RADGw6OZvMjK9Qx/ev/vZFs221479syeovx4JFO670192gm55cnFxNzLWufhqxu79R/EmU0zhJROyKiN13Wcfss/1Nt905/hU0f9qWVb6OeCY//ktRF38paTo/Of7i0YkjY5tjbubgWHlW3O7nXy+92az+VcXfAdnx39rw/F+OfzjZHLFw/sLp6nztQvt1XPrj86bXNG2e/8e3F+f/YPJ2dcVgseGjycXFc+MRg8nrt6+fuPlsZb4sn8V/YH/j/r8jbu6JxyJiT0TsjYjHs4vCou1PRMSTEbF/hfh/fOWp99uPf33mSrP4p+90/KP2+Lef6Dv9w7d3jn9zRDQ7/oerqQPFmlZe/1pt4Gr2HQAAANwv0upn4JN0dDmdpqOj+Wf4d8bWdG5+YfG5k/Mfnp3OPys/HANpeadrqOZ+6Hhxb7jMT9TlDxX3jb/s21LNj07Nz013O3jocdua9P/Mn33dbh2w5jowjwbcp/R/6F36P/SmRP+Hnqb/Q+9q1P8/aVp69Js1bQywrrz/Q+9qof8v5Q/NRwXA/cn7P/Qu/R96UtPvxqer+sr/uif+LX7P8F5pz8ZPRHpPNGPjJ/pb/jGLNhKVobz/Z2s2NSzT7VcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvgvAAD//w3J5b0=") recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000300) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x3) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x1}, 0x1c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xb4, 0x30, 0x1, 0xe501, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {}, 0x8001}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xb4}}, 0x0) 5.022082442s ago: executing program 2 (id=353): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x50) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4260, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x8, 0x6}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000000000000b, 0x149900) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3b}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2}, {0xffffffffffffffff, 0x100000000000, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x4c}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 4.942953914s ago: executing program 2 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$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") ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$inet_sctp(0x2, 0x5, 0x84) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r3, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 4.786788279s ago: executing program 3 (id=355): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2, 0x1}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x6d91fb6102d8910c, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0x19f}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x563, 0x0) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000140)={[{@nombcache}, {@data_err_abort}, {@jqfmt_vfsv1}, {@nouid32}, {@grpquota}, {@data_journal}, {@inlinecrypt}]}, 0x1, 0x46b, &(0x7f0000000740)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSeOjpQWVhRuNJi4wmugCl7UdSMNADa2JECLFGNyYGBJdG5cm/gXujIlRVyZudW9IiLIBXdXcO/fCdJgpFKa9lfl8ktuec++ZOec793XuOTMB9KyR7E8SsS0ifouIoUZ2eYGRxr9rV85O/33l7HQSS0tv/Znk5a5eOTtdFi1ft7XIjKYR6cdJUcly86fPHJ+q12univz4won3xudPn3l29sTUsdqx2snJQ4cOHph44fnJ57oSZxbX1T0fzu3d/do7F1+fPnLx3Z++ydq7rdjeHEe3jGSB/7WUa932ZLcrq9j2pnTSX2FDWJW+iMh210B+/g9FX9zYeUPx6keVNg5YU9m9aVPnzYtLwD0siapbAFSjvNFnz7/lsk5djw3h8kuNB6As7mvF0tjSH2lRZqDl+babRiLiyOI/X2ZLrNE4BABAs0+nvzgcz7Tr/6XxQFO5HcUcynBE/D8idkbEfRGxKyLuj8jLPhgRD62y/tapoZv7P+mlOwrsNmX9vxeLua3l/b+y9xfDfUVuex7/QHJ0tl7bX3wmozGwKctPrFDHd6/8+lmnbc39v2zJ6i/7gkU7LvW3DNDNTC1M5Z3SLrh8PmJPf7v4k+szAUlE7I6IPat76x1lYvapr/d2KnTr+FfQhXmmpa+y8Baz+BejJf5SsvL85PjmqNf2j5dHxc1+/uXCm53qv6v4u+ByrfG/af+3FhlOmudr51dfx4XfP+n4THOHx386mLydzzMPFus+mFpYODURMZgczvPL1k/eeG2ZL8tnx//ovvbn/87iNVn8D0dEdhA/EhGPRsRjRdsfj4gnImLfCvH/+HLnbWX8kVa0/89HzLS9/l0//lv2/+oTfcd/+LZT/be3/w/mqdFiTX79u4V2zckuF60NvJvPDgAAAP4r0vw78Ek6dj2dpmNjje/w74r/pfW5+YWnj869f3Km8V354RhIy5GuoWI8tD5br00ki8U7NsZHJ4ux4nK89EAxbvx535Y8PzY9V5+pOHbodVs7nP+ZP/qqbh2wxra0XTs5uO4NASrQOo+eLs+ee2M9GwOsK7/Xht51i/M/Xa92AOvP/R96V7vz/1xL3lwA3Jvc/6F3Of+hR6XfV90CoELu/9CT7uZ3/WuY2LwxmlFNYqPulDwRUSbSDdEeiTVKVH1lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA//+Afus0") 4.754845259s ago: executing program 0 (id=356): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x15, 0x0, 0x2, 0x24}, {0x1, 0x2, 0x9, 0xfffffff6}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r3 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x0, 0x66}, 0x28) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r6, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) recvmmsg(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000014}) close_range(r4, r5, 0x0) connect$can_bcm(r3, &(0x7f0000001ff0), 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.110389407s ago: executing program 0 (id=357): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x52, &(0x7f0000000900)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0xff, @local, @local, {[], {{0xffff, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x2, {[@exp_fastopen={0xfe, 0x6, 0xf989, "17d0"}]}}}}}}}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x8605, &(0x7f0000000100)={[{@grpjquota}, {@abort}, {@nolazytime}, {@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}]}, 0x81, 0x645, &(0x7f0000000180)="$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") openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000800), &(0x7f00000008c0), 0x2, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r3) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0xe01, 0x70bd2d, 0x25dfdbfc}, 0x1c}}, 0x24048800) 4.110180928s ago: executing program 4 (id=359): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24008040) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c", 0x14}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x20) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000780)}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'bridge0\x00', 0x1}) 3.851303544s ago: executing program 1 (id=361): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) readv(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) recvmmsg(r2, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12112, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4217, 0x0, 0x0, 0x0, &(0x7f00000003c0)) 3.787076666s ago: executing program 4 (id=362): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x80000) pipe2(&(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.692448829s ago: executing program 4 (id=363): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sync() sync() r1 = openat$sysfs(0xffffff9c, 0x0, 0x800, 0x188) preadv(r1, &(0x7f0000000180), 0x0, 0x0, 0x8800) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3.666666659s ago: executing program 3 (id=364): perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x3) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000000c0), 0x10) sendto$l2tp(r1, &(0x7f0000000040)="e5786a", 0x3, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x18, r2, 0x30d, 0x0, 0xfffffffe, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xffffffff, 0xfffffffd}) socket$igmp(0x2, 0x3, 0x2) unshare(0x40200) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r3, &(0x7f0000000140), 0x0, 0x300, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") 3.622979481s ago: executing program 0 (id=365): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, 0x0, &(0x7f0000000740)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r2, 0x0) 2.91607475s ago: executing program 0 (id=366): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x15, &(0x7f00000022c0)={@random="ba43a0689ef4", @random="5fbdd2095c57", @val={@void, {0x8100, 0x6, 0x1}}, {@x25={0x805, {0x3, 0x3, 0xf3}}}}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000006e00)={&(0x7f0000006c40)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x2000c810}, 0x2008000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket(0x1e, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) dup(0xffffffffffffffff) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x48043) r2 = dup(0xffffffffffffffff) write$P9_RVERSION(r2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) poll(&(0x7f0000000f80)=[{r1, 0x4}], 0x1, 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000400000008000200050000001b016c316a7a09343e4d19d9a89d74acf9cdbd842a88239aa3f004fd2d965fecfa2ae4d6"], 0x1c}}, 0x0) 2.91561521s ago: executing program 2 (id=367): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x5, 0x5, 0x9206, 0x5}, 0x3, 0x4}, [{0xe, 0x7, 0x3, 0x8, 0x3, 0x4df}, {0x8, 0x8, 0x40, 0x8, 0x5, 0x1}, {0x7e12f9c5, 0xffffff61, 0x0, 0x6b5, 0x80000000, 0x101}, {0x9, 0xb1f, 0x3, 0x1, 0x1, 0x2}, {0xfffffe01, 0x5, 0xb91, 0x8, 0x6, 0x4}, {0x1, 0x0, 0x0, 0xe49, 0x4, 0x15}, {0x1, 0xa, 0xc79, 0x5, 0x401, 0xfffffff4}, {0x7, 0x8c0, 0x5, 0xffffffff, 0x2, 0x10001}, {0xfffffffa, 0x1, 0x7, 0xffffffff, 0x1, 0xffffffff}, {0x1, 0x100, 0x0, 0x80000000, 0x7f6b, 0x1}, {0x154, 0x8, 0xb, 0x2, 0x7fffffff, 0xb3e4}, {0x36, 0x7, 0xffff, 0xfffffff7, 0x10, 0xf7bb}, {0x8, 0x7, 0x401, 0x1, 0x400, 0x8565}, {0x5, 0x4, 0x80000000, 0xc50, 0x7, 0xfffffffd}, {0x4, 0x101, 0x2, 0x6, 0x6, 0x2}, {0x1000, 0x800, 0xe, 0x1, 0x7ff, 0xe}, {0x1, 0x9, 0x7, 0x3, 0xfffffff9, 0x4}, {0x1, 0x200, 0x975f, 0x2, 0x400, 0x3dc4}, {0x100, 0x200, 0x98, 0xf9d6, 0xb}, {0x1, 0x83, 0xf9, 0x5, 0x3}, {0x8000, 0x7, 0x1, 0x9, 0xc9d, 0x2}, {0x81, 0x7fffffff, 0x2, 0x7fff, 0x7, 0x5}, {0x80, 0x4, 0x2, 0x1, 0xf403, 0xfffffff1}, {0xffff, 0xedf, 0xc, 0x8, 0x5, 0x1}, {0x0, 0x4, 0x8000, 0xfa8, 0x6, 0x1}, {0xa7d, 0x6, 0x6, 0x80, 0x3f9, 0x9}, {0x2f, 0xdfb, 0x8, 0x4b, 0x7, 0x1}, {0x9, 0x7ff, 0xa, 0x280000, 0x2, 0x1}, {0x138, 0x51d, 0xf, 0x6, 0x4, 0x7}, {0x10001, 0x6, 0x8, 0x8, 0x4, 0xb}, {0x4, 0x2be2, 0x79f29323, 0x3ff, 0x2, 0x4}, {0xd4, 0x5, 0x5, 0x7, 0xea4c, 0xa4b1}, {0x993, 0x4, 0xfff, 0x23b06916, 0x6, 0xfffffffc}, {0x6, 0x4a6, 0x3, 0x80, 0x7ff, 0xa}, {0x7, 0xfffffffb, 0x0, 0xffffffff, 0x1, 0xfb3}, {0x5, 0xe6, 0xfff, 0x0, 0x1, 0x400}, {0xfffff1a2, 0xa, 0x7, 0xa1, 0xfffff800, 0x4}, {0xbe, 0x2000, 0xffffffff, 0xfffffc00, 0xe06, 0x6}, {0x100, 0x2, 0x8, 0x4, 0x4, 0x9497}, {0xd, 0x8001, 0xf2b, 0xffffffff, 0x3, 0xfffffff3}, {0x2, 0x80000000, 0x5a, 0x1, 0x5, 0x6}, {0x4, 0xc378, 0x8, 0xf, 0x7, 0x8144}, {0x6, 0x81, 0x5, 0x5, 0x3}, {0x9, 0x8001, 0xe10, 0x783, 0x7, 0x3}, {0x7fff, 0x1, 0xe05, 0xffffad2a, 0x4, 0x99c}, {0x99eb, 0x6, 0x5, 0x2, 0x2, 0x1fe0000}, {0x800, 0x9, 0x2a3b, 0x4, 0x7, 0x9}, {0x2, 0x6, 0x0, 0x9, 0xe, 0xe}, {0x65d, 0x8000, 0x6, 0xfffffffe, 0x400, 0x1}, {0xfffffff8, 0x7, 0x6, 0xd4, 0x1000, 0x4}, {0x0, 0xc, 0x5, 0x3, 0xb9, 0x3}, {0x5, 0xfffffffd, 0x9, 0x4, 0x4, 0x6}, {0x1, 0x0, 0x4, 0x100, 0x9, 0xa}, {0x3, 0x2, 0x10, 0x2, 0x5, 0x3}, {0xfffffff8, 0xe, 0xfd0, 0x9, 0x0, 0x7fff}, {0xb, 0x7ff, 0x7, 0xffffff81, 0x9, 0x3}, {0x4, 0xff, 0x10001, 0x0, 0x3, 0x4}, {0x8, 0x8, 0x3ff, 0xbf, 0x7, 0x10}, {0x2f, 0xfffffe00, 0xc6000000, 0x81, 0x6, 0xffffff01}, {0x5, 0x44bd, 0x3, 0x8, 0x0, 0xffffffff}, {0x800000, 0xd, 0x4737, 0xf0000, 0x8405, 0x3}, {0xa4, 0x7, 0x7, 0x7, 0x6, 0xda73}, {0x9, 0x0, 0x7, 0x8971, 0x8, 0x8}, {0x8, 0x1, 0x6, 0x68, 0x7fff, 0x4}, {0x1, 0xf9c3, 0x5, 0x9, 0x0, 0x6c}, {0x5, 0x6, 0x5, 0x1, 0xf, 0x9}, {0x1, 0xf580, 0x3ff, 0x6, 0x6e, 0x6}, {0xad, 0x9, 0x7fff, 0x6, 0x8}, {0x862, 0x0, 0x2800000, 0x2, 0x8, 0x8}, {0x4, 0x90000, 0x2, 0x8d1, 0x1, 0x4}, {0x200, 0xb, 0x40, 0x9, 0xfffffff9, 0x2}, {0x8, 0xdbb, 0x4, 0x3, 0x7, 0xfff}, {0x7, 0x4, 0xce, 0x9, 0x6, 0x4}, {0x5ae2, 0x8, 0x8, 0x8, 0xfffffff0, 0x3ff}, {0x1, 0x5, 0x8, 0x7ff, 0x101, 0xffffffff}, {0x12, 0xa7, 0x6, 0x0, 0xc6, 0x4}, {0x4, 0x9, 0x9, 0xa, 0x9}, {0x84d5, 0xfffffffe, 0x7fffffff, 0x5, 0xf}, {0x5, 0x40, 0x8, 0xa, 0x6, 0x2}, {0x4, 0x100, 0x4d90, 0xf, 0xffffffd7, 0xffffffff}, {0x3, 0x10001, 0x2, 0x8, 0x82dc, 0xffff}, {0x6, 0x1, 0x2, 0xfffff402, 0x2}, {0x4, 0x6, 0xca6, 0x6, 0xb, 0xa}, {0xa, 0x4, 0x9, 0x8ec1, 0x1, 0x10000}, {0x2, 0x2, 0x1ff, 0x171a9022, 0xf4, 0x9000000}, {0x313, 0xfffffff8, 0x1, 0x0, 0x2, 0x1}, {0x5841, 0xfffffffb, 0x3, 0x4, 0x3ff, 0x9f}, {0x10f, 0xca1c, 0x5, 0x8001, 0xa, 0x4}, {0x766, 0x7, 0x7, 0x7, 0x1, 0x5}, {0x7, 0xba, 0xfffffffd, 0x8001, 0x7ffd}, {0x1, 0x23, 0x3, 0x335, 0x4, 0x5}, {0x2, 0xc, 0x9, 0x0, 0x4, 0x8000}, {0x1, 0x8, 0xb7, 0x3, 0x9, 0x4}, {0x3c, 0x4, 0x1000, 0x2, 0xfff, 0x80000001}, {0x24, 0xffff, 0xd513, 0x748, 0x6eea, 0x4}, {0x57, 0x3, 0x40, 0xb, 0x3080d7c0}, {0x5, 0x7, 0x7, 0x48, 0x9, 0x5}, {0x5, 0xf01, 0x2, 0x80001d, 0x2, 0x7}, {0x7fff, 0x66019165, 0x8, 0x6, 0x4}, {0x22, 0x0, 0x0, 0x168b, 0x9, 0x5}, {0x4, 0x9, 0x3, 0x3, 0x7fffffff, 0x3}, {0x6, 0x7, 0xfffffff5, 0x4, 0x9, 0x9}, {0x4, 0x8, 0x4, 0x8000, 0x8, 0x4}, {0x16, 0x6, 0x7, 0xc00, 0xede, 0x5}, {0x9, 0x4, 0x7fffffff, 0x5, 0x7, 0x6125d06a}, {0xfff, 0x9, 0xda1, 0x521, 0x101, 0xd}, {0xdb2b, 0x1, 0x1, 0x9, 0x5, 0x800}, {0x3, 0x200, 0xfffffffe, 0xff, 0xff, 0x2}, {0x2, 0x5, 0x7, 0x62d, 0x5, 0x3ff}, {0x600, 0x4, 0x3, 0xb42f, 0x5, 0x3}, {0x401, 0x9, 0xc44, 0x3, 0x2, 0x6ea9894}, {0x624, 0xecdb, 0x8000, 0x6, 0x1b, 0x7}, {0x9, 0x2, 0x8, 0xf71, 0xfb0, 0x5}, {0x3, 0x4, 0x5908c254, 0x45c8, 0x2, 0x4}, {0x6, 0xff, 0x20000, 0x2, 0x221, 0x30000}, {0x8, 0x59bc, 0x7, 0x4, 0x0, 0x6}, {0xfffff001, 0x80000000, 0x8, 0x4, 0x644, 0x2}, {0x7, 0x2, 0x6, 0x9, 0xe, 0x3}, {0x2, 0x5, 0x101, 0x9199, 0x694, 0x66c}, {0x4, 0x2, 0x7, 0xc2, 0x69, 0xe5}, {0x8, 0x205a52ca, 0xdc, 0x3, 0x5, 0x4}, {0x2, 0x7, 0x7, 0xf47e, 0x8, 0x8}, {0x787, 0x2, 0x9, 0x3ff, 0x7, 0x5}, {0x0, 0x80000000, 0x5, 0x100, 0x6, 0x400}, {0x7, 0x3f8, 0x4, 0x0, 0x7, 0xfffffff9}, {0x7bce, 0xfffffffc, 0xfffffff8, 0x8001, 0x5, 0xf16}, {0xe, 0x3, 0x34b1, 0xb9a, 0x81, 0x800}, {0x101, 0x7, 0x4, 0x10000, 0x68063168, 0x81}], [{0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x86f1faf2efed1208}, {0x4}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x4}, {0x2}, {0x4}, {0x4}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2}, {0x5}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0xa22732b51f90c34a}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x6, 0x1}, {0x1, 0xa77fa159ed31b0c3}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x2}, {0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x2}, {0x0, 0x1}, {0x4, 0xa845cf6605cfc9f5}, {0x1, 0x222ada2ec63376b7}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5) 2.819212673s ago: executing program 4 (id=368): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)=ANY=[@ANYRES32=0x0], 0x88}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@block_validity}, {@discard}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$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") recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000300) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000001380)=0x3) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x1}, 0x1c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xb4, 0x30, 0x1, 0xe501, 0x0, {}, [{0xa0, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {}, 0x8001}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xb4}}, 0x0) 2.768184744s ago: executing program 4 (id=369): bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x519, &(0x7f0000000f80)="$eJzs3cFvHFcZAPBvxl7Xbh3sAodSidZCoLSC7No1bS0ObZEQnAqUcjfGXluW117Lu25jq0KOOCMkhADBBU5ckPgDkFD+BIQUCe4RQqAIknDgENhqdmcde7PrOMquN7F/P+ll3rzMzPe9TfZ53854JoALayYi3omIkYh4NSKm8vY0L3HQKtl2d25/tJyVJBqN9/+VRJK3tY+V5Mvn8t3GI+I734j4fpK0Go6o7e1vLFUq5Z18vVTf3C7V9vavrG8urZXXylvz83NvLLy58PrCbN/6+tbX/v6zH//262/98Usf3lz85ys/yPKdzP/uaD/6qfWaFJqvRdtoROwMItgQjOT/Twqn2TgZfD4AAJws++z2yYj4XETc/eWwswEAAAAGofH2ZNxLIhoP+ua38k0AAACAp1vavAY2SYv5tQCTkabFYusa3k/H21Gp1upfXK3ubq20rpWdjkK6ul4pz+bXCk9HIcnW55r1++uvdazPR8TzEfHTqYnmenG5WlkZ9pcfAAAAcEFk8/zJtFXPFv+ZStPi2LCzAgAAAPpuetgJAAAAAANn/g8AAADn34Pz/5nWIhk9+2QAAACAfvv2u+9mpdF+/vXKB3u7G9UPrqyUaxvFzd3l4nJ1Z7u4Vq2uNe/Zt3l/z2e6Hq9SrW5/ObZ2r5bq5Vq9VNvbX9ys7m7VF5vP9V4sn+o50QAAAEBfPf/y9b8mEXHwlYlmybRv/2euDudb+mibJ4PKAzh7I6duBM4bF/jCxeX9DzxsYj9+RnkAAACDc/kzh+f/J+LI+f9LN53/h/PuEc//A+eIU/1wcXWc//v1qXa61xhMMsCZMscHHvY9QM/z/3/qfy4AAMBgTDZLkhbzOcBkpGmxGHGp+ViAQrK6XinPRsQnIuIvU4VnsvW5YScNAAAAAAAAAAAAAAAAAAAAAAAAAE+ZRiOJBgAAAHCuRaT/SCIiifGIqc9Pdn4/MJb8d6q5jIgPf/X+z68u1es7c1n7vw/b67/I218bxjcYAAAAQKf2PL09jwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAfrpz+6PldjnS/IVBx7311YiY7hZ/NMaby/EoRMSzd5MYPbJfEhEjfYh/cC0iXugWP8nSiuk8i874aURMDDn+c32IDxfZ9Wz8eafb+y+Nmeay+/tvNC+P69ZMr/EvPRz/RnqMf5cecuyxfPnijd+Xesa/FvHiaPfxpx1/7DHH3+99d3+/o+m99tjZ+E3E5a4/f5JjsUr1ze1SbW//yvrm0lp5rbw1Pz/3xsKbC68vzJZW1yvl/M+u8X/y2T/8/6T+P9sj/nTe/6TZ//Fjnc/aGo3ux3y5Y/1/N67e/lS3DZOIWz/K613+/V84Fv/46z+S/3BO89fncrt+0Kof9dLv/vxS7/6PxEqP/o+fED9re6XXQTu8+t4P/9aqFU65BwAwSLW9/Y2lSqW887RXss48AWn0sTLzZKRx3ivtWdSTks/gKskjvd+HOy4BAAD9d/9D/7AzAQAAAAAAAAAAAAAAAAAAgIur/fv/7Xs5D+LeY0fjHd5FOUnOvK8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf5OAAA//9O3cdG") r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) openat$dir(0xffffffffffffff9c, 0x0, 0x20040, 0x193) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x808719, &(0x7f00000000c0)={[], [{@smackfshat={'smackfshat', 0x3d, '-@):.#})#'}}, {@fsmagic={'fsmagic', 0x3d, 0x80000000}}, {@fsname={'fsname', 0x3d, 'errors=remount-ro'}}], 0x2c}, 0x2, 0x4fc, &(0x7f0000000e40)="$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") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x8}, 0x3000, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x8040) socket(0x2c, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000003c0)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000400)=""/146) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r3, @ANYBLOB="200001"], 0x38}}, 0x40840) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.762493374s ago: executing program 2 (id=379): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8000000000000000, 0x7ff}, 0x110c40, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x7, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x16004, 0x0, 0x81, 0x5, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x46, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x34}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r0, 0x0, 0x200002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x30, r5, 0x611, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_SE_APDU={0x9, 0x19, "9c4e9524df"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4854) openat$cgroup_ro(r2, &(0x7f0000001000)='cgroup.controllers\x00', 0x3f00, 0x0) 2.672706407s ago: executing program 3 (id=370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sched_setscheduler(r0, 0x6, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(r0, 0x9, &(0x7f0000000100)={0x20000, 0x8001}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000380)={0x34, r2, 0x1, 0x70bd27, 0x25ffdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x48040) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x5, 0xfffffffd) listen(r4, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000080)={0x3, 'vlan0\x00', {0x8}, 0x3}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000180)=0x9, 0x4) syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/212, 0xd4}], 0x1, 0x94, 0xfffffff7) 2.645175197s ago: executing program 0 (id=371): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) perf_event_open(0x0, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', 0x0}) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) unshare(0x6a040000) 2.620437928s ago: executing program 4 (id=372): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) sync() sync() preadv(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x8800) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xffffffffffffff4a}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200080d5}, 0x20000800) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.619729908s ago: executing program 2 (id=373): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000780)={[{@bh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@nodiscard}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@noload}, {@block_validity}]}, 0xfa, 0x481, &(0x7f0000003380)="$eJzs3MtvFdUfAPDv3D54/9of4gMEqaKR+GhpecjCjUYTFpqY6ALjqraFVAo1tCZCiFYXuDQk7o3/hXGlG6NuNHGre0NCDDEBdTNm7szApdwpt/S2F3o/n2Tac2ZO7znfOXNuz8xpbwBdayj7kkRsjYjfImIgz95aYCj/dv3qhYm/r16YSCJN3/wzqZe7dvXCRFm0/LkteSZNi/yGJvVefCdifGZm6myRH5k//f7I3Lnzz0+fHj85dXLqzNjRo4cO7uk/Mna4LXFmcV3b9dHs7p3H3r70+sTxS+/+mNQijzsWxdEuQ/nZbeqpdlfWYdsa0klv45G9P99MN7sS6KSeiMi6q68+/geiJzbdODYQr37a0cYBqypN03SJd+WFFFjHkuh0C4DOKH/RZ/e/5bZGU497wpWX8hugLO7rxZYf6Y1antjbt+j+dmsb6x+KiOML/3yZbbFKzyEAABp9m81/nms2/6vFQ3miP/vyv2INZTAi/h8R2yPigYjYEREPRtTLPhwRjyyz/sUrJLfPf2qX7zq4FmTzvxeLta1b53+1sshgT5HbVo+/LzkxPTN1oDgn+6Nvw4npZGp0iTq+e+XXz6uONc7/si2rv5wLFu243LvoAd3k+Pz4SmJudOWTiF29zeJPolzGSSJiZ0Tsuss6pp/prTx25/iXUP2yLUu/ing67/+FWBR/Kalcnxx94cjY4ZGNMTN1YKS8Km730y8X36iqf0Xxt0HW/5ubXv834h9MNkbMnTt/qr5eO7esl8+GTlz8/bPKe5oi/mx4tXL9H9tWXP/9yVv1Hf3FgQ/H5+fPjkb0J6/dvn/s5quV+bJ8Fv/+fc3H//a4eSYejYjdEbEnIh7LbgqLtj8eEU9ExL4lTsIPLz/53h3ib9L/a7NWmsU/Wd3/f6VZ/0dj/y8/0XPq+2/uHP/GiKjq/0P11P5iTyvvf602cKXnDwAAAO4H+d/AJ7XhG+labXg4/xv+HbG5NjM7N//sidkPzkzm696D0Vcrn3QNNDwPHS2eDZf5sUX5g8Vz4y96NtXzwxOzM5OdDh663JaK8Z/5o6fTrQNWXRvW0YD7lPEP3cv4h+6UGP/Q1Yx/6F7Nxv/HlaWHv17VxgBryu9/6F4tjP+F/Fv1rAC4PzUb/wMdaAew9sz/oStV/m98bUX/8r/miX+LzzO8V9qz/hNRuyeasf4TvS1/mMUyEmkxv8/2bGhaptPvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO3xXwAAAP//2Y/lXQ==") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.502402221s ago: executing program 3 (id=374): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet6(0xa, 0x3, 0x8c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000010640)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x20, 0x5, 0xffffffff, 0x0, 0x4, 0x0, 0xff, 0x28, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x45}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x14, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 428.185898ms ago: executing program 3 (id=375): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1, &(0x7f0000000500)=""/31, 0x1f}, 0x8000}], 0x400000000000387, 0x2102, 0x0) write$binfmt_misc(r2, &(0x7f0000000340), 0x2000011a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)={[{@block={'block', 0x3d, 0x400}}, {@map_normal}, {}, {@map_off}, {@check_relaxed}, {@block={'block', 0x3d, 0x800}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@map_acorn}, {@cruft}, {@dmode={'dmode', 0x3d, 0x1}}]}, 0x0, 0x53f, &(0x7f0000000a80)="$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") r3 = openat$tun(0xffffffffffffff9c, 0x0, 0xaa000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'pim6reg1\x00', 0x1}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) 0s ago: executing program 2 (id=376): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f00000002c0), 0x6}, 0x100000, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1bf, &(0x7f0000000400)="$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") mkdir(&(0x7f00000022c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xb6) mprotect(&(0x7f000008e000/0x4000)=nil, 0x4000, 0x1000005) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x7}, {}, {0x5, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ed filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.879503][ T3643] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 106.889450][ T3652] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.901691][ T3643] loop1: lost filesystem error report for type 5 error -117 [ 106.932665][ T3647] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.33: invalid indirect mapped block 1 (level 1) [ 106.938758][ T3643] EXT4-fs (loop1): 1 truncate cleaned up [ 106.961060][ T3647] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 106.966857][ T3643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.009271][ T546] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.018747][ T3647] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #11: comm syz.2.33: corrupted inode contents [ 107.022640][ T546] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.033797][ T28] audit: type=1400 audit(1777561104.049:235): avc: denied { connect } for pid=3651 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.069472][ T546] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.078340][ T3647] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 107.078714][ T3647] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 107.096695][ T28] audit: type=1400 audit(1777561104.109:236): avc: denied { write } for pid=3651 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.097718][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.126788][ T3647] loop2: lost filesystem error report for type 5 error -117 [ 107.127022][ T3647] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #11: comm syz.2.33: corrupted inode contents [ 107.167603][ T3647] EXT4-fs error (device loop2): ext4_truncate:4690: inode #11: comm syz.2.33: mark_inode_dirty error [ 107.189349][ T3647] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 107.190774][ T28] audit: type=1400 audit(1777561104.169:237): avc: denied { read } for pid=3651 comm="syz.0.34" path="socket:[5438]" dev="sockfs" ino=5438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.230684][ T3647] loop2: lost filesystem error report for type 5 error -117 [ 107.230958][ T3647] EXT4-fs (loop2): 1 truncate cleaned up [ 107.233884][ T3643] audit: audit_backlog=65 > audit_backlog_limit=64 [ 107.250466][ T3647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.262592][ T3643] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 107.271412][ T28] audit: type=1400 audit(1777561104.199:238): avc: denied { create } for pid=3658 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 107.291953][ T3643] audit: backlog limit exceeded [ 107.297529][ T28] audit: type=1400 audit(1777561104.199:239): avc: denied { bind } for pid=3658 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 107.366525][ T3664] xt_hashlimit: size too large, truncated to 1048576 [ 107.397702][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.407554][ T3666] syzkaller0: entered promiscuous mode [ 107.420579][ T3666] syzkaller0: entered allmulticast mode [ 107.445619][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.465573][ T3669] loop1: detected capacity change from 0 to 1024 [ 107.474763][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.494720][ T3669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.616824][ T3667] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.37'. [ 107.662070][ T3676] loop0: detected capacity change from 0 to 4096 [ 107.671606][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.736727][ T3676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.849957][ T3690] loop4: detected capacity change from 0 to 512 [ 107.866239][ T3690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.912483][ T3690] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.957523][ T3690] tmpfs: Unknown parameter 'inode31' [ 108.738892][ T3698] loop2: detected capacity change from 0 to 512 [ 108.785708][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.878762][ T3698] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 108.898755][ T9] IPVS: starting estimator thread 0... [ 109.034749][ T3716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.48'. [ 109.044440][ T3716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.48'. [ 109.080380][ T3698] EXT4-fs (loop2): mount failed [ 109.087188][ T3711] IPVS: using max 2736 ests per chain, 136800 per kthread [ 109.433264][ T3710] loop3: detected capacity change from 0 to 8192 [ 109.453387][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.642665][ T3724] IPVS: nq: FWM 3 0x00000003 - no destination available [ 109.667131][ T3714] loop0: detected capacity change from 0 to 512 [ 109.760933][ T3726] netlink: 32 bytes leftover after parsing attributes in process `syz.1.52'. [ 109.776364][ T3714] EXT4-fs: Ignoring removed bh option [ 109.796151][ T3714] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.799680][ T3728] loop2: detected capacity change from 0 to 512 [ 109.842719][ T3728] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.898581][ T3714] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 109.936167][ T3728] EXT4-fs (loop2): 1 truncate cleaned up [ 109.969638][ T3728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.982806][ T3731] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3731 comm=syz.3.53 [ 110.000039][ T3728] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.000613][ T3714] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 110.026920][ T3714] EXT4-fs (loop0): orphan cleanup on readonly fs [ 110.210665][ T3737] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.224087][ T3714] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.49: Failed to acquire dquot type 1 [ 110.231018][ T3728] netlink: 'syz.2.54': attribute type 13 has an invalid length. [ 110.266910][ T3714] loop0: lost filesystem error report for type 5 error -5 [ 110.282231][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 110.298404][ C1] EXT4-fs (loop0): last error at time 1777561107: ext4_acquire_dquot:7034 [ 110.547879][ T3714] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.49: Invalid block bitmap block 0 in block_group 0 [ 110.564826][ T3714] loop0: lost filesystem error report for type 5 error -117 [ 110.577902][ T3714] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.49: Invalid block bitmap block 0 in block_group 0 [ 110.635029][ T3737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.711774][ T3714] loop0: lost filesystem error report for type 5 error -117 [ 110.717325][ T3737] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.748173][ T3714] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.49: Invalid block bitmap block 0 in block_group 0 [ 110.794244][ T3714] loop0: lost filesystem error report for type 5 error -117 [ 110.799879][ T3714] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.49: Failed to acquire dquot type 1 [ 110.841170][ T3737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.56'. [ 111.119422][ T3714] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.49: Failed to acquire dquot type 1 [ 111.280967][ T3714] EXT4-fs (loop0): 1 orphan inode deleted [ 111.298708][ T3728] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.306121][ T3728] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.427826][ T3728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.458265][ T3728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.467142][ T3714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.515863][ T3747] set_capacity_and_notify: 1 callbacks suppressed [ 111.515915][ T3747] loop3: detected capacity change from 0 to 512 [ 111.578762][ T3737] bridge1: entered promiscuous mode [ 111.593720][ T3737] bridge1: entered allmulticast mode [ 111.633053][ T3737] team0: Port device bridge1 added [ 111.669437][ T3745] bridge0: port 1(team0) entered blocking state [ 111.702768][ T3745] bridge0: port 1(team0) entered disabled state [ 111.714557][ T3749] netlink: 277 bytes leftover after parsing attributes in process `syz.2.59'. [ 111.729551][ T3747] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #17: comm syz.3.58: corrupted in-inode xattr: overlapping e_value [ 111.753849][ T3745] team0: entered allmulticast mode [ 111.760141][ T3714] syz.0.49 (3714) used greatest stack depth: 7296 bytes left [ 111.771277][ T3745] team0: entered promiscuous mode [ 111.777337][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.787262][ T3747] fserror_report: 2 callbacks suppressed [ 111.787386][ T3747] loop3: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 111.796342][ T3747] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.58: couldn't read orphan inode 17 (err -117) [ 111.806802][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 111.806941][ C1] EXT4-fs (loop3): initial error at time 1777561108: ext4_iget_extra_inode:5128: inode 17 [ 111.807262][ C1] EXT4-fs (loop3): last error at time 1777561108: ext4_iget_extra_inode:5128: inode 17 [ 111.870575][ T28] kauditd_printk_skb: 115 callbacks suppressed [ 111.870591][ T28] audit: type=1400 audit(1777561108.889:348): avc: denied { create } for pid=3748 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 111.904577][ T117] bridge0: port 1(team0) entered blocking state [ 111.910995][ T117] bridge0: port 1(team0) entered forwarding state [ 111.940688][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.948937][ T49] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.966744][ T3747] fserror_report: 2 callbacks suppressed [ 111.966826][ T3747] loop3: lost filesystem error report for type 5 error -117 [ 111.997973][ T28] audit: type=1400 audit(1777561108.889:349): avc: denied { ioctl } for pid=3748 comm="syz.2.59" path="socket:[5112]" dev="sockfs" ino=5112 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 112.049441][ T3765] loop0: detected capacity change from 0 to 256 [ 112.068320][ T3747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.080509][ T30] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.084446][ T3765] vfat: Unknown parameter '¾ÎBïe†Àmª”gÛPì¡îžþ' [ 112.126409][ T3744] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.130478][ T3751] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 112.153116][ T28] audit: type=1400 audit(1777561109.089:350): avc: denied { write } for pid=3753 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.181929][ T117] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.213372][ T28] audit: type=1400 audit(1777561109.089:351): avc: denied { create } for pid=3763 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.293033][ T28] audit: type=1400 audit(1777561109.089:352): avc: denied { setopt } for pid=3763 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.339351][ T28] audit: type=1400 audit(1777561109.089:353): avc: denied { bind } for pid=3763 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.392659][ T28] audit: type=1400 audit(1777561109.099:354): avc: denied { read } for pid=3763 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.418354][ T3772] loop2: detected capacity change from 0 to 512 [ 112.434735][ T28] audit: type=1400 audit(1777561109.159:355): avc: denied { write } for pid=3763 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.448858][ T3772] EXT4-fs: Ignoring removed oldalloc option [ 112.496212][ T28] audit: type=1400 audit(1777561109.239:356): avc: denied { read } for pid=3746 comm="syz.3.58" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 112.509228][ T3772] EXT4-fs: Ignoring removed nobh option [ 112.528209][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.532944][ T28] audit: type=1400 audit(1777561109.239:357): avc: denied { open } for pid=3746 comm="syz.3.58" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 112.614030][ T3772] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.63: iget: bad extra_isize 90 (inode size 256) [ 112.689066][ T3772] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 112.689371][ T3772] EXT4-fs (loop2): Remounting filesystem read-only [ 112.699128][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 112.699150][ C0] EXT4-fs (loop2): initial error at time 1777561109: ext4_xattr_inode_iget:441: inode 11 [ 112.699191][ C0] EXT4-fs (loop2): last error at time 1777561109: ext4_xattr_inode_iget:441: inode 11 [ 112.795634][ T3772] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 112.849599][ T3772] EXT4-fs (loop2): 1 orphan inode deleted [ 112.886613][ T3772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.979409][ T3766] loop1: detected capacity change from 0 to 512 [ 113.046216][ T3783] loop0: detected capacity change from 0 to 1024 [ 113.094158][ T3783] EXT4-fs: Ignoring removed bh option [ 113.151703][ T3783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.244772][ T3783] EXT4-fs (loop0): Online resizing not supported with bigalloc [ 113.380797][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.439474][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.802190][ T3795] loop0: detected capacity change from 0 to 128 [ 113.969241][ T3766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.118715][ T3764] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 114.188343][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.230330][ T3801] syz.1.70 uses obsolete (PF_INET,SOCK_PACKET) [ 114.251168][ T3799] loop2: detected capacity change from 0 to 2048 [ 114.284383][ T3799] EXT4-fs: Ignoring removed mblk_io_submit option [ 114.316635][ T3799] EXT4-fs: Ignoring removed bh option [ 114.348340][ T3799] EXT4-fs: dax option not supported [ 114.522231][ T3807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.71'. [ 115.171169][ T3816] loop2: detected capacity change from 0 to 512 [ 115.258968][ T3816] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.291475][ T3819] loop4: detected capacity change from 0 to 512 [ 115.338886][ T3819] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 115.370333][ T3819] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 115.395238][ T3819] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.75: corrupted inode contents [ 115.402756][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 115.418069][ C1] EXT4-fs (loop4): initial error at time 1777561112: mb_free_blocks:2049: inode 11: block 64 [ 115.430162][ C1] EXT4-fs (loop4): last error at time 1777561112: mb_free_blocks:2049: inode 11: block 64 [ 115.463667][ T3819] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 115.463876][ T3819] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #11: comm syz.4.75: mark_inode_dirty error [ 115.551035][ T3819] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 115.551255][ T3819] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.75: invalid indirect mapped block 1 (level 1) [ 115.578893][ T3816] Zero length message leads to an empty skb [ 115.602217][ T3819] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 115.602744][ T3819] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.75: corrupted inode contents [ 115.639520][ T3819] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 115.646455][ T3819] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 115.665805][ T3315] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 115.694169][ T3819] loop4: lost filesystem error report for type 5 error -117 [ 115.697522][ T3819] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.75: corrupted inode contents [ 115.746487][ T3819] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 115.748017][ T3819] EXT4-fs error (device loop4): ext4_truncate:4690: inode #11: comm syz.4.75: mark_inode_dirty error [ 115.794075][ T3819] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 115.794243][ T3819] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 115.843037][ T3819] loop4: lost filesystem error report for type 5 error -117 [ 115.843235][ T3819] EXT4-fs (loop4): 1 truncate cleaned up [ 115.876558][ T3819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.899235][ T3823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'. [ 115.955878][ T3819] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 13: comm syz.4.75: path /12/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 115.958071][ T3823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'. [ 116.008152][ T3828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.75'. [ 116.032307][ T3827] loop1: detected capacity change from 0 to 2048 [ 116.080146][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.088870][ T3823] netlink: 20 bytes leftover after parsing attributes in process `syz.2.76'. [ 116.109970][ T3827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.367778][ T3825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 116.457298][ T3834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.477383][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.527450][ T3834] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 116.763605][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.827017][ T30] kworker/u8:1: attempt to access beyond end of device [ 116.827017][ T30] loop0: rw=1, sector=145, nr_sectors = 8 limit=128 [ 116.852214][ T30] kworker/u8:1: attempt to access beyond end of device [ 116.852214][ T30] loop0: rw=1, sector=161, nr_sectors = 8 limit=128 [ 116.876705][ T30] kworker/u8:1: attempt to access beyond end of device [ 116.876705][ T30] loop0: rw=1, sector=177, nr_sectors = 8 limit=128 [ 116.903129][ T30] kworker/u8:1: attempt to access beyond end of device [ 116.903129][ T30] loop0: rw=1, sector=193, nr_sectors = 8 limit=128 [ 116.947497][ T30] kworker/u8:1: attempt to access beyond end of device [ 116.947497][ T30] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 116.981236][ T30] kworker/u8:1: attempt to access beyond end of device [ 116.981236][ T30] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 117.016280][ T30] kworker/u8:1: attempt to access beyond end of device [ 117.016280][ T30] loop0: rw=1, sector=241, nr_sectors = 8 limit=128 [ 117.042540][ T30] kworker/u8:1: attempt to access beyond end of device [ 117.042540][ T30] loop0: rw=1, sector=257, nr_sectors = 8 limit=128 [ 117.061490][ T30] kworker/u8:1: attempt to access beyond end of device [ 117.061490][ T30] loop0: rw=1, sector=273, nr_sectors = 8 limit=128 [ 117.101952][ T30] kworker/u8:1: attempt to access beyond end of device [ 117.101952][ T30] loop0: rw=1, sector=289, nr_sectors = 8 limit=128 [ 117.201162][ T3845] set_capacity_and_notify: 1 callbacks suppressed [ 117.201240][ T3845] loop2: detected capacity change from 0 to 164 [ 117.250051][ T3849] lo speed is unknown, defaulting to 1000 [ 117.265955][ T3845] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 117.276195][ T3849] lo speed is unknown, defaulting to 1000 [ 117.289878][ T3849] lo speed is unknown, defaulting to 1000 [ 117.301607][ T3849] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.316678][ T3849] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 117.347546][ T3849] lo speed is unknown, defaulting to 1000 [ 117.358583][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 117.358602][ T28] audit: type=1400 audit(1777561114.389:373): avc: denied { mount } for pid=3844 comm="syz.2.81" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 117.391859][ T3849] lo speed is unknown, defaulting to 1000 [ 117.405214][ T3849] lo speed is unknown, defaulting to 1000 [ 117.426983][ T3845] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 117.442727][ T3849] lo speed is unknown, defaulting to 1000 [ 117.463181][ T3845] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 117.467745][ T3849] lo speed is unknown, defaulting to 1000 [ 117.500997][ T28] audit: type=1400 audit(1777561114.539:374): avc: denied { perfmon } for pid=3846 comm="syz.0.82" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.563703][ T28] audit: type=1400 audit(1777561114.609:375): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 117.715317][ T28] audit: type=1400 audit(1777561114.649:376): avc: denied { bpf } for pid=3854 comm="syz.1.85" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.745062][ T3860] capability: warning: `syz.3.86' uses 32-bit capabilities (legacy support in use) [ 117.786264][ T28] audit: type=1400 audit(1777561114.829:377): avc: denied { module_request } for pid=3859 comm="syz.3.86" kmod=6E65746465762DF6CD058BD184E5C61ED139F9500C28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 118.005854][ T28] audit: type=1400 audit(1777561114.949:378): avc: denied { write } for pid=3856 comm="syz.2.84" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 118.284657][ T28] audit: type=1400 audit(1777561114.949:379): avc: denied { open } for pid=3856 comm="syz.2.84" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 118.398649][ T28] audit: type=1400 audit(1777561115.439:380): avc: denied { read write } for pid=3875 comm="syz.4.89" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 118.431166][ T28] audit: type=1400 audit(1777561115.439:381): avc: denied { open } for pid=3875 comm="syz.4.89" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 118.778374][ T28] audit: type=1400 audit(1777561115.819:382): avc: denied { write } for pid=3879 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 118.989770][ T3889] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 118.989770][ T3889] The task syz.3.87 (3889) triggered the difference, watch for misbehavior. [ 119.078948][ T3891] loop1: detected capacity change from 0 to 164 [ 119.415063][ T3897] Unsupported NM flag settings (240) [ 119.426435][ T3897] Unsupported NM flag settings (240) [ 120.343530][ T3902] syzkaller0: entered promiscuous mode [ 120.454387][ T3902] syzkaller0: entered allmulticast mode [ 120.955920][ T3926] loop4: detected capacity change from 0 to 1024 [ 121.088485][ T3926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.282157][ T3933] infiniband syz0: set down [ 121.305021][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.305673][ T3933] infiniband syz0: added bond_slave_1 [ 121.377804][ T3939] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 121.485277][ T3933] RDS/IB: syz0: added [ 121.506648][ T3933] smc: adding ib device syz0 with port count 1 [ 121.530808][ T3933] smc: ib device syz0 port 1 has no pnetid [ 121.565514][ T3939] loop4: detected capacity change from 0 to 1024 [ 121.607177][ T3939] EXT4-fs: Ignoring removed orlov option [ 121.616188][ T3939] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 121.636646][ T3939] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 121.652533][ T3939] EXT4-fs (loop4): orphan cleanup on readonly fs [ 121.676987][ T3939] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz.4.102: Invalid inode table block 0 in block_group 0 [ 121.690731][ T3939] loop4: lost filesystem error report for type 5 error -117 [ 121.691137][ T3939] EXT4-fs (loop4): Remounting filesystem read-only [ 121.699064][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 121.699102][ C0] EXT4-fs (loop4): initial error at time 1777561118: __ext4_get_inode_loc:4885 [ 121.699164][ C0] EXT4-fs (loop4): last error at time 1777561118: __ext4_get_inode_loc:4885 [ 121.738402][ T3939] EXT4-fs (loop4): 1 truncate cleaned up [ 121.848821][ T3939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.082406][ T3939] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.009148][ T3959] loop4: detected capacity change from 0 to 512 [ 123.569343][ T3959] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 123.613248][ T3959] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.107: corrupted in-inode xattr: e_value out of bounds [ 123.677892][ T3959] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.678124][ T3959] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.107: couldn't read orphan inode 15 (err -117) [ 123.687604][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 123.687626][ C1] EXT4-fs (loop4): initial error at time 1777561120: ext4_iget_extra_inode:5128: inode 15 [ 123.687661][ C1] EXT4-fs (loop4): last error at time 1777561120: ext4_iget_extra_inode:5128: inode 15 [ 123.750893][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 123.750989][ T28] audit: type=1400 audit(1777561120.769:386): avc: denied { write } for pid=3960 comm="syz.3.108" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 124.016577][ T3959] loop4: lost filesystem error report for type 5 error -117 [ 124.017528][ T3959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.677609][ T3969] loop3: detected capacity change from 0 to 764 [ 124.766051][ T3969] Symlink component flag not implemented [ 124.773108][ T3969] Symlink component flag not implemented [ 124.993437][ T28] audit: type=1400 audit(1777561122.019:387): avc: denied { getopt } for pid=3970 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 125.686194][ T28] audit: type=1400 audit(1777561122.719:388): avc: denied { read } for pid=3970 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.946599][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.070199][ T28] audit: type=1400 audit(1777561123.109:389): avc: denied { read write } for pid=3977 comm="syz.4.112" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 126.111600][ T28] audit: type=1400 audit(1777561123.139:390): avc: denied { open } for pid=3977 comm="syz.4.112" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 126.235408][ T28] audit: type=1400 audit(1777561123.279:391): avc: denied { read } for pid=3975 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.368818][ T3967] loop0: detected capacity change from 0 to 512 [ 126.402852][ T3967] EXT4-fs: inline encryption not supported [ 126.413070][ T3967] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 126.434204][ T3967] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 126.511510][ T28] audit: type=1400 audit(1777561123.549:392): avc: denied { read } for pid=3987 comm="syz.1.117" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 126.552222][ T28] audit: type=1400 audit(1777561123.549:393): avc: denied { open } for pid=3987 comm="syz.1.117" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 126.588769][ T28] audit: type=1400 audit(1777561123.589:394): avc: denied { ioctl } for pid=3987 comm="syz.1.117" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 126.720825][ T3988] loop1: detected capacity change from 0 to 256 [ 126.865601][ T28] audit: type=1400 audit(1777561123.909:395): avc: denied { create } for pid=3994 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 127.186800][ T4003] bridge1: entered promiscuous mode [ 127.192385][ T4003] bridge1: entered allmulticast mode [ 127.604117][ T4005] loop0: detected capacity change from 0 to 1024 [ 127.636833][ T4005] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 127.702382][ T4005] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 127.736841][ T4011] loop4: detected capacity change from 0 to 512 [ 127.776443][ T4011] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 127.791471][ T4005] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.120: lblock 2 mapped to illegal pblock 2 (length 1) [ 127.817085][ T4011] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.122: bad orphan inode 131083 [ 127.832134][ T4008] loop1: detected capacity change from 0 to 512 [ 127.860268][ T4011] loop4: lost filesystem error report for type 5 error -117 [ 127.860784][ T4011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.864623][ T4005] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 127.881327][ T4008] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.883113][ T4005] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.120: lblock 0 mapped to illegal pblock 48 (length 1) [ 127.883190][ T4005] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 127.883274][ T4005] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.120: Failed to acquire dquot type 0 [ 127.902901][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 127.902923][ C1] EXT4-fs (loop0): initial error at time 1777561124: ext4_map_blocks:791: inode 3: block 2 [ 127.902970][ C1] EXT4-fs (loop0): last error at time 1777561124: ext4_map_blocks:791: inode 3: block 48 [ 127.975339][ T4005] loop0: lost filesystem error report for type 5 error -117 [ 127.975548][ T4005] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 128.012056][ T4008] EXT4-fs (loop1): 1 truncate cleaned up [ 128.019644][ T4005] loop0: lost filesystem error report for type 5 error -117 [ 128.021376][ T4005] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.120: mark_inode_dirty error [ 128.075237][ T4018] loop3: detected capacity change from 0 to 512 [ 128.091679][ T4018] ext4: Unknown parameter 'smackfshat' [ 128.111204][ T4005] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 128.111366][ T4005] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 128.149368][ T4008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.172295][ T4005] EXT4-fs (loop0): 1 orphan inode deleted [ 128.188882][ T4005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.201424][ T49] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 128.228737][ T49] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 0 [ 128.246438][ T4018] loop3: detected capacity change from 0 to 512 [ 128.266734][ T4018] ext3: Bad value for 'mb_optimize_scan' [ 128.338248][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.347889][ T49] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 128.363164][ T49] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 128.369813][ T49] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 0 [ 128.409219][ T49] loop0: lost filesystem error report for type 5 error -117 [ 128.410714][ T3313] EXT4-fs error (device loop0): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 128.410992][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.433362][ T3313] loop0: lost filesystem error report for type 5 error -117 [ 128.461453][ T3313] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 128.592735][ T3313] loop0: lost filesystem error report for type 5 error -117 [ 128.594364][ T3313] EXT4-fs error (device loop0): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 128.640069][ T3313] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 130.104775][ T4040] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.165234][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.240357][ T4043] loop4: detected capacity change from 0 to 512 [ 130.262857][ T4040] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.293679][ T4043] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 130.345044][ T4043] EXT4-fs (loop4): 1 truncate cleaned up [ 130.363370][ T4043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.433600][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 130.433619][ T28] audit: type=1400 audit(1777561127.479:415): avc: denied { ioctl } for pid=4042 comm="syz.4.131" path="/22/file2/file1" dev="loop4" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 130.473496][ T4040] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.561573][ T28] audit: type=1400 audit(1777561127.539:416): avc: denied { getopt } for pid=4042 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 130.594610][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.699373][ T4040] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.763820][ T4049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.132'. [ 131.096841][ T4052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.133'. [ 131.231896][ T28] audit: type=1400 audit(1777561128.269:417): avc: denied { sqpoll } for pid=4051 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 131.354227][ T28] audit: type=1400 audit(1777561128.399:418): avc: denied { create } for pid=4051 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 131.377334][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.388402][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.406207][ T28] audit: type=1400 audit(1777561128.449:419): avc: denied { write } for pid=4051 comm="syz.1.133" path="socket:[6704]" dev="sockfs" ino=6704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 131.410250][ T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.458566][ T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.520633][ T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.530027][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.539115][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.548225][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.632158][ T4059] netlink: 40 bytes leftover after parsing attributes in process `syz.4.135'. [ 131.867294][ T4068] netlink: 84 bytes leftover after parsing attributes in process `syz.4.135'. [ 131.879809][ T4057] loop0: detected capacity change from 0 to 512 [ 131.982862][ T4057] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 132.036863][ T4057] EXT4-fs (loop0): orphan cleanup on readonly fs [ 132.144122][ T28] audit: type=1400 audit(1777561129.189:420): avc: denied { ioctl } for pid=4071 comm="syz.1.137" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.147827][ T4057] Quota error (device loop0): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 132.171265][ T4072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.171408][ T4072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.220495][ T28] audit: type=1400 audit(1777561129.229:421): avc: denied { bind } for pid=4071 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.243420][ T4057] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 132.286226][ T28] audit: type=1400 audit(1777561129.249:422): avc: denied { listen } for pid=4071 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.306956][ T4057] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 132.337906][ T4057] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.134: bg 0: block 15: invalid block bitmap [ 132.370556][ T28] audit: type=1400 audit(1777561129.309:423): avc: denied { accept } for pid=4071 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.378905][ T4075] loop3: detected capacity change from 0 to 512 [ 132.397779][ T4057] loop0: lost filesystem error report for type 5 error -117 [ 132.402184][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 132.416509][ C1] EXT4-fs (loop0): initial error at time 1777561129: ext4_validate_block_bitmap:432 [ 132.426218][ C1] EXT4-fs (loop0): last error at time 1777561129: ext4_validate_block_bitmap:432 [ 132.431919][ T4057] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 132.448339][ T4057] loop0: lost filesystem error report for type 5 error -117 [ 132.455585][ T4057] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #16: comm syz.0.134: data will be lost [ 132.479354][ T4057] EXT4-fs (loop0): 1 truncate cleaned up [ 132.479459][ T4075] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 132.502277][ T4075] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 132.517092][ T4057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.524426][ T4075] EXT4-fs (loop3): 1 truncate cleaned up [ 132.550662][ T4075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.629131][ T4079] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 132.655841][ T4057] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.134: iget: bad i_size value: 360287970189639690 [ 132.729332][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.764321][ T4079] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 132.788472][ T4084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.801260][ T4084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.849652][ T4084] bridge_slave_0: left allmulticast mode [ 132.856992][ T4084] bridge_slave_0: left promiscuous mode [ 132.867482][ T4084] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.876213][ T4083] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=4083 comm=syz.3.138 [ 132.892551][ T4084] bridge_slave_1: left allmulticast mode [ 132.898916][ T4084] bridge_slave_1: left promiscuous mode [ 132.905726][ T4084] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.919213][ T4084] bond0: (slave bond_slave_0): Releasing backup interface [ 132.951363][ T4084] bond0: (slave bond_slave_1): Releasing backup interface [ 132.968776][ T4084] team0: Port device team_slave_0 removed [ 132.981749][ T4075] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 132.999797][ T4084] team0: Port device team_slave_1 removed [ 133.009570][ T4084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.028637][ T4084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.050923][ T4084] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 133.078925][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.074532][ T4110] loop0: detected capacity change from 0 to 1024 [ 134.083925][ T4110] EXT4-fs: test_dummy_encryption option not supported [ 134.665794][ T4111] syz.4.147 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 134.763735][ T4111] CPU: 0 UID: 0 PID: 4111 Comm: syz.4.147 Tainted: G W syzkaller #0 PREEMPT(full) [ 134.763837][ T4111] Tainted: [W]=WARN [ 134.763845][ T4111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 134.763858][ T4111] Call Trace: [ 134.763865][ T4111] [ 134.763873][ T4111] __dump_stack+0x1d/0x30 [ 134.763901][ T4111] dump_stack_lvl+0x95/0xd0 [ 134.763925][ T4111] dump_stack+0x15/0x1b [ 134.764013][ T4111] dump_header+0x80/0x240 [ 134.764043][ T4111] oom_kill_process+0x295/0x350 [ 134.764070][ T4111] out_of_memory+0x97d/0xb80 [ 134.764176][ T4111] try_charge_memcg+0x62f/0xa10 [ 134.764214][ T4111] ? radix_tree_lookup+0xfa/0x140 [ 134.764250][ T4111] charge_memcg+0x6d/0x120 [ 134.764279][ T4111] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 134.764367][ T4111] __swap_cache_prepare_and_add+0x69/0x4a0 [ 134.764396][ T4111] ? alloc_pages_mpol+0x217/0x260 [ 134.764425][ T4111] swap_cache_alloc_folio+0xa2/0x120 [ 134.764491][ T4111] swap_cluster_readahead+0x25f/0x3c0 [ 134.764517][ T4111] swapin_readahead+0xde/0x840 [ 134.764584][ T4111] ? tick_program_event+0x79/0xc0 [ 134.764616][ T4111] ? __hrtimer_rearm_deferred+0x58d/0x670 [ 134.764662][ T4111] ? __rcu_read_unlock+0x4e/0x70 [ 134.764681][ T4111] ? swap_cache_get_folio+0x1e0/0x1f0 [ 134.764703][ T4111] do_swap_page+0x31e/0x2180 [ 134.764799][ T4111] ? __schedule+0x936/0xd20 [ 134.764823][ T4111] ? __rcu_read_lock+0x36/0x50 [ 134.764841][ T4111] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 134.764880][ T4111] handle_mm_fault+0xb2e/0x2e70 [ 134.764910][ T4111] ? vma_start_read+0x1c7/0x2c0 [ 134.765011][ T4111] do_user_addr_fault+0x62f/0x1050 [ 134.765042][ T4111] ? trace_page_fault_user+0x1f/0xa0 [ 134.765136][ T4111] exc_page_fault+0x62/0xa0 [ 134.765165][ T4111] asm_exc_page_fault+0x26/0x30 [ 134.765188][ T4111] RIP: 0033:0x7fb0941fa750 [ 134.765214][ T4111] Code: c4 4c 0f 42 e0 83 3d 7a d6 3a 00 00 0f 8e d9 fd ff ff e8 f3 7d fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d 3e af ed 00 e8 03 00 00 48 8d 1d 3f b8 3a 00 e8 8a 31 13 00 [ 134.765234][ T4111] RSP: 002b:00007ffff23afeb0 EFLAGS: 00010212 [ 134.765330][ T4111] RAX: 0000000000020d98 RBX: 00007fb0945a7da0 RCX: 0000000000020b70 [ 134.765345][ T4111] RDX: 0000000000000228 RSI: 00007ffff23afe90 RDI: 0000000000000001 [ 134.765385][ T4111] RBP: 00007fb0945a7da0 R08: 0000000020f37f6f R09: 3fffffffffffffff [ 134.765398][ T4111] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000020f22 [ 134.765412][ T4111] R13: 00007fb0945a618c R14: 0000000000020d14 R15: 00007fb0945a6180 [ 134.765433][ T4111] [ 135.123731][ T4111] memory: usage 307200kB, limit 307200kB, failcnt 377 [ 135.138346][ T4111] memory+swap: usage 301440kB, limit 9007199254740988kB, failcnt 0 [ 135.193522][ T4111] kmem: usage 227004kB, limit 9007199254740988kB, failcnt 0 [ 135.227429][ T4111] Memory cgroup stats for /syz4: [ 135.227682][ T4111] cache 0 [ 135.273245][ T4111] rss 0 [ 135.289183][ T4111] shmem 0 [ 135.304891][ T4111] mapped_file 0 [ 135.320079][ T4111] dirty 0 [ 135.332622][ T4111] writeback 0 [ 135.343525][ T4111] workingset_refault_anon 25 [ 135.361764][ T4111] workingset_refault_file 228 [ 135.379084][ T4111] swap 225280 [ 135.393030][ T4111] swapcached 733184 [ 135.408611][ T4111] pgpgin 23717 [ 135.419346][ T4111] pgpgout 23716 [ 135.433353][ T4111] pgfault 29348 [ 135.445644][ T4111] pgmajfault 16 [ 135.458040][ T4111] inactive_anon 0 [ 135.470506][ T4111] active_anon 4096 [ 135.481825][ T4111] inactive_file 0 [ 135.485878][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 135.485894][ T28] audit: type=1326 audit(1777561132.529:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.2.151" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba1e8cdd9 code=0x7ffc0000 [ 135.526438][ T4111] active_file 0 [ 135.537437][ T4111] unevictable 0 [ 135.548524][ T4111] hierarchical_memory_limit 314572800 [ 135.565599][ T4111] hierarchical_memsw_limit 9223372036854771712 [ 135.571883][ T28] audit: type=1326 audit(1777561132.529:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.2.151" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba1e8cdd9 code=0x7ffc0000 [ 135.584363][ T4111] total_cache 0 [ 135.599742][ T28] audit: type=1326 audit(1777561132.529:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.2.151" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba1e8cdd9 code=0x7ffc0000 [ 135.629163][ T28] audit: type=1326 audit(1777561132.529:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.2.151" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fcba1e8cdd9 code=0x7ffc0000 [ 135.642211][ T4111] total_rss 0 [ 135.659156][ T28] audit: type=1326 audit(1777561132.529:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.2.151" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba1e8cdd9 code=0x7ffc0000 [ 135.686843][ T28] audit: type=1326 audit(1777561132.529:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.2.151" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcba1e4d60e code=0x7ffc0000 [ 135.692172][ T4111] total_shmem 0 [ 135.713523][ T28] audit: type=1326 audit(1777561132.529:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.2.151" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba1e8cdd9 code=0x7ffc0000 [ 135.742140][ T28] audit: type=1326 audit(1777561132.579:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.2.151" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba1e8cdd9 code=0x7ffc0000 [ 135.762119][ T4111] total_mapped_file 0 [ 135.774623][ T28] audit: type=1326 audit(1777561132.579:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.2.151" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcba1e8cdd9 code=0x7ffc0000 [ 135.780545][ T4111] total_dirty 0 [ 135.800463][ T28] audit: type=1326 audit(1777561132.579:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4124 comm="syz.2.151" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fcba1e8cdd9 code=0x7ffc0000 [ 135.831803][ T4111] total_writeback 0 [ 135.835652][ T4111] total_workingset_refault_anon 25 [ 135.840866][ T4111] total_workingset_refault_file 228 [ 135.846221][ T4111] total_swap 225280 [ 135.850132][ T4111] total_swapcached 733184 [ 135.854560][ T4111] total_pgpgin 23717 [ 135.858810][ T4111] total_pgpgout 23716 [ 135.862886][ T4111] total_pgfault 29348 [ 135.867209][ T4111] total_pgmajfault 16 [ 135.871283][ T4111] total_inactive_anon 0 [ 135.913526][ T4111] total_active_anon 4096 [ 135.918023][ T4111] total_inactive_file 0 [ 135.922775][ T4111] total_active_file 0 [ 135.927003][ T4111] total_unevictable 0 [ 135.931173][ T4111] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.147,pid=4111,uid=0 [ 135.947677][ T4111] Memory cgroup out of memory: Killed process 4111 (syz.4.147) total-vm:161884kB, anon-rss:1232kB, file-rss:22492kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 136.054897][ T4141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 136.069356][ T4143] loop1: detected capacity change from 0 to 512 [ 136.078334][ T4143] EXT4-fs: Ignoring removed bh option [ 136.078425][ T4141] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.097888][ T4143] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.151858][ T4143] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.154: corrupted in-inode xattr: e_value size too large [ 136.167066][ T4143] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 136.167440][ T4143] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.154: couldn't read orphan inode 15 (err -117) [ 136.190283][ T4143] loop1: lost filesystem error report for type 5 error -117 [ 136.190811][ T4143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.345016][ T4141] bridge_slave_0 (unregistering): left allmulticast mode [ 136.356553][ T4141] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.197246][ T4150] loop3: detected capacity change from 0 to 512 [ 137.701973][ T4172] loop2: detected capacity change from 0 to 512 [ 137.718189][ T4172] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 137.833627][ T4175] loop4: detected capacity change from 0 to 128 [ 137.840937][ T4172] EXT4-fs (loop2): 1 truncate cleaned up [ 137.847120][ T4172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.939555][ T4175] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.970576][ T4175] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.188930][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.213471][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.234861][ T4234] syz.3.162 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 138.260751][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.355264][ T4244] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.380643][ T4244] bridge0: port 1(team0) entered disabled state [ 138.429197][ T4241] netlink: 36 bytes leftover after parsing attributes in process `syz.4.164'. [ 138.470500][ T4248] loop3: detected capacity change from 0 to 8192 [ 138.525895][ T4248] loop3: p1 < > p2 p4 < p5 > [ 138.532370][ T4248] loop3: partition table partially beyond EOD, truncated [ 138.552118][ T4248] loop3: p1 start 134217728 is beyond EOD, truncated [ 138.560350][ T4254] loop6: detected capacity change from 0 to 7 [ 138.573251][ T4252] random: crng reseeded on system resumption [ 138.580532][ T4248] loop3: p2 size 591360 extends beyond EOD, truncated [ 138.587716][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.597190][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 138.605637][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.613120][ T4248] loop3: p5 size 591360 extends beyond EOD, [ 138.615188][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 138.618040][ T4248] truncated [ 138.633053][ T4254] loop6: unable to read partition table [ 138.646662][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.646672][ T4254] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 138.670436][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 138.680050][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.689526][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 138.690242][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.690274][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 138.695112][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.726095][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 138.742554][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.751846][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 138.761059][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.771050][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 139.411222][ T4272] loop0: detected capacity change from 0 to 512 [ 139.455582][ T4272] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.480707][ T4272] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.542758][ T4272] tmpfs: Unknown parameter 'inode31' [ 139.779827][ T4288] loop4: detected capacity change from 0 to 512 [ 139.788609][ T4288] EXT4-fs: Ignoring removed bh option [ 139.794475][ T4288] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.803247][ T4288] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.176: corrupted in-inode xattr: e_value size too large [ 139.817688][ T4288] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 139.820302][ T4288] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.176: couldn't read orphan inode 15 (err -117) [ 139.829945][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 139.829979][ C1] EXT4-fs (loop4): initial error at time 1777561136: ext4_iget_extra_inode:5128: inode 15 [ 139.830030][ C1] EXT4-fs (loop4): last error at time 1777561136: ext4_iget_extra_inode:5128: inode 15 [ 139.877129][ T4288] loop4: lost filesystem error report for type 5 error -117 [ 139.877720][ T4288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.279073][ T28] kauditd_printk_skb: 108 callbacks suppressed [ 141.279167][ T28] audit: type=1400 audit(1777561138.149:596): avc: denied { write } for pid=4291 comm="syz.3.177" path="socket:[7179]" dev="sockfs" ino=7179 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 141.728684][ T4302] netlink: 'syz.1.179': attribute type 3 has an invalid length. [ 143.010340][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.053735][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.131808][ T28] audit: type=1400 audit(1777561140.169:597): avc: denied { append } for pid=4324 comm="syz.1.184" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 143.208004][ T4337] loop3: detected capacity change from 0 to 512 [ 143.250128][ T4337] ext3: Unknown parameter 'noquota"test_dummy_encryption' [ 143.251170][ T4342] netlink: 'syz.4.187': attribute type 1 has an invalid length. [ 143.290252][ T28] audit: type=1400 audit(1777561140.329:598): avc: denied { ioctl } for pid=4324 comm="syz.1.184" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 143.482936][ T4342] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 143.492884][ T4348] loop0: detected capacity change from 0 to 512 [ 143.503316][ T4342] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 143.545729][ T4348] bio_check_eod: 47 callbacks suppressed [ 143.545747][ T4348] syz.0.188: attempt to access beyond end of device [ 143.545747][ T4348] loop0: rw=0, sector=17179852721, nr_sectors = 1 limit=512 [ 143.575370][ T28] audit: type=1400 audit(1777561140.619:599): avc: denied { create } for pid=4341 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 143.624934][ T4348] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 143.654304][ T28] audit: type=1400 audit(1777561140.619:600): avc: denied { write } for pid=4341 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 143.762530][ T4348] FAT-fs (loop0): Filesystem has been set read-only [ 143.800051][ T4348] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 143.837564][ T28] audit: type=1400 audit(1777561140.879:601): avc: denied { ioctl } for pid=4347 comm="syz.0.188" path="socket:[7160]" dev="sockfs" ino=7160 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 143.870354][ T4361] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 143.987126][ T4350] loop3: detected capacity change from 0 to 512 [ 144.140046][ T4350] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.186: inode has both inline data and extents flags [ 144.162716][ T4350] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 144.171732][ T4350] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.186: couldn't read orphan inode 15 (err -117) [ 144.172618][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 144.172867][ C1] EXT4-fs (loop3): initial error at time 1777561141: ext4_orphan_get:1397: inode 15 [ 144.174389][ C1] EXT4-fs (loop3): last error at time 1777561141: ext4_orphan_get:1397: inode 15 [ 144.245247][ T4350] loop3: lost filesystem error report for type 5 error -117 [ 144.288273][ T4350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.966336][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.001333][ T4464] loop3: detected capacity change from 0 to 512 [ 145.010983][ T4354] bond1: (slave gretap1): making interface the new active one [ 145.019959][ T4354] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 145.029361][ T4464] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.055465][ T4464] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.190: iget: bad i_size value: 38620345925642 [ 145.071012][ T4464] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 145.072174][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 145.088966][ C1] EXT4-fs (loop3): initial error at time 1777561142: ext4_orphan_get:1397: inode 15 [ 145.099245][ C1] EXT4-fs (loop3): last error at time 1777561142: ext4_orphan_get:1397: inode 15 [ 145.114246][ T4464] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.190: couldn't read orphan inode 15 (err -117) [ 145.127689][ T4464] loop3: lost filesystem error report for type 5 error -117 [ 145.133599][ T4464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.167041][ T4474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.192'. [ 145.339731][ T4482] loop1: detected capacity change from 0 to 512 [ 145.351571][ T28] audit: type=1400 audit(1777561142.369:602): avc: denied { create } for pid=4463 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 145.426116][ T28] audit: type=1400 audit(1777561142.369:603): avc: denied { bind } for pid=4463 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 145.468772][ T12] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:0: bg 0: block 5: invalid block bitmap [ 145.496852][ T4482] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.506908][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1016 with error 28 [ 145.542113][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 145.542113][ T12] [ 145.548090][ T4482] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.194: iget: bad i_size value: 38620345925642 [ 145.565889][ T4482] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 145.566079][ T4482] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.194: couldn't read orphan inode 15 (err -117) [ 145.572200][ T12] EXT4-fs (loop3): Total free blocks count 0 [ 145.575423][ T4482] loop1: lost filesystem error report for type 5 error -117 [ 145.576133][ T4482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.599131][ T4477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.191'. [ 145.625970][ T12] EXT4-fs (loop3): Free/Dirty block details [ 145.655772][ T12] EXT4-fs (loop3): free_blocks=0 [ 145.661503][ T12] EXT4-fs (loop3): dirty_blocks=1016 [ 145.667417][ T12] EXT4-fs (loop3): Block reservation details [ 145.674180][ T12] EXT4-fs (loop3): i_reserved_data_blocks=1016 [ 145.807343][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.042579][ T4493] netlink: 'syz.0.197': attribute type 16 has an invalid length. [ 146.106143][ T4501] loop2: detected capacity change from 0 to 512 [ 146.116786][ T4493] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.124453][ T4493] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.134302][ T4482] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.194: bg 0: block 5: invalid block bitmap [ 146.139976][ T4501] EXT4-fs: Ignoring removed oldalloc option [ 146.149794][ T4482] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 146.189527][ T4493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.207967][ T4482] EXT4-fs (loop1): This should not happen!! Data will be lost [ 146.207967][ T4482] [ 146.217383][ T4499] loop3: detected capacity change from 0 to 512 [ 146.218107][ T4482] EXT4-fs (loop1): Total free blocks count 0 [ 146.218127][ T4482] EXT4-fs (loop1): Free/Dirty block details [ 146.218140][ T4482] EXT4-fs (loop1): free_blocks=0 [ 146.218154][ T4482] EXT4-fs (loop1): dirty_blocks=2236 [ 146.218216][ T4482] EXT4-fs (loop1): Block reservation details [ 146.218228][ T4482] EXT4-fs (loop1): i_reserved_data_blocks=2236 [ 146.218453][ T4493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.230707][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 180 with error 28 [ 146.258994][ T4499] EXT4-fs: Ignoring removed bh option [ 146.304368][ T4501] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 146.306978][ T4499] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.330563][ T4499] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 146.356935][ T184] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.401720][ T184] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.417491][ T4501] EXT4-fs (loop2): 1 truncate cleaned up [ 146.423727][ T4501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.434283][ T184] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.445803][ T184] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.468834][ T28] audit: type=1400 audit(1777561143.499:604): avc: denied { watch } for pid=4500 comm="syz.2.200" path="/33/bus" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.493832][ T4499] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 146.518067][ T4499] EXT4-fs (loop3): orphan cleanup on readonly fs [ 146.549799][ T3310] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 146.550190][ T4499] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 146.575236][ T4499] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 146.589908][ T4499] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.199: Failed to acquire dquot type 1 [ 146.603458][ T4499] loop3: lost filesystem error report for type 5 error -5 [ 146.621592][ T4499] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.199: Invalid block bitmap block 0 in block_group 0 [ 146.645741][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 146.646243][ C1] EXT4-fs (loop3): last error at time 1777561143: ext4_acquire_dquot:7034 [ 146.682719][ T4499] loop3: lost filesystem error report for type 5 error -117 [ 146.689291][ T4499] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.199: Invalid block bitmap block 0 in block_group 0 [ 146.721053][ T4507] loop1: detected capacity change from 0 to 512 [ 146.726429][ T4499] loop3: lost filesystem error report for type 5 error -117 [ 146.735563][ T4499] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.199: Invalid block bitmap block 0 in block_group 0 [ 146.757754][ T4507] EXT4-fs: test_dummy_encryption option not supported [ 146.796739][ T4511] netlink: 'syz.4.203': attribute type 12 has an invalid length. [ 146.813699][ T4499] loop3: lost filesystem error report for type 5 error -117 [ 146.822959][ T4499] Quota error (device loop3): write_blk: dquota write failed [ 146.852476][ T4499] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 146.862697][ T4499] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.199: Failed to acquire dquot type 1 [ 146.874638][ T4499] loop3: lost filesystem error report for type 5 error -28 [ 146.876197][ T4499] Quota error (device loop3): write_blk: dquota write failed [ 146.892060][ T4499] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 146.902637][ T4499] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.199: Failed to acquire dquot type 1 [ 146.914528][ T4499] loop3: lost filesystem error report for type 5 error -28 [ 146.919246][ T4499] EXT4-fs (loop3): 1 orphan inode deleted [ 147.005594][ T4519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.204'. [ 147.160693][ T4499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.237304][ T4517] loop0: detected capacity change from 0 to 512 [ 147.274744][ T28] audit: type=1400 audit(1777561144.309:605): avc: denied { bind } for pid=4520 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 147.536408][ T4517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.552000][ T4517] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.576720][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.614930][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.627645][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.715875][ T28] audit: type=1400 audit(1777561144.759:606): avc: denied { bind } for pid=4532 comm="syz.2.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 147.771225][ T28] audit: type=1400 audit(1777561144.759:607): avc: denied { name_bind } for pid=4532 comm="syz.2.210" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 147.802521][ T4533] loop2: detected capacity change from 0 to 1024 [ 147.819547][ T4533] EXT4-fs: Ignoring removed orlov option [ 148.361756][ T4533] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 148.376376][ T4533] System zones: 0-1, 3-12 [ 148.385754][ T4533] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.421184][ T4547] loop1: detected capacity change from 0 to 256 [ 148.423978][ T4533] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 16: comm syz.2.210: bad entry in directory: directory entry overrun - offset=60, inode=21519, rec_len=1024, size=1024 fake=0 [ 148.448422][ T4547] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.511223][ T4533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.210'. [ 148.520794][ T4533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 148.535093][ T4547] Set syz1 is full, maxelem 6117 reached [ 148.669206][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 148.771358][ T4562] loop3: detected capacity change from 0 to 512 [ 148.772225][ T4558] loop2: detected capacity change from 0 to 164 [ 148.778552][ T4562] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 148.802527][ T4562] EXT4-fs (loop3): 1 truncate cleaned up [ 148.813494][ T4562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.856271][ T4558] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 148.867128][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.879756][ T4558] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 148.884451][ T4558] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 148.935448][ T4571] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 148.936215][ T4571] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 148.988472][ T4571] EXT4-fs (loop3): failed to open journal device unknown-block(0,3) -6 [ 149.157399][ T4577] netlink: 156 bytes leftover after parsing attributes in process `syz.1.223'. [ 149.161862][ T4571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.220'. [ 149.197384][ T4571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.220'. [ 149.228428][ T4571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.220'. [ 149.260317][ T4579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.296736][ T4579] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.402816][ T23] IPVS: starting estimator thread 0... [ 149.462310][ T4579] tmpfs: Unknown parameter 'inode31' [ 149.522637][ T4588] IPVS: using max 2736 ests per chain, 136800 per kthread [ 150.501303][ T4603] syzkaller0: entered promiscuous mode [ 150.520223][ T4603] syzkaller0: entered allmulticast mode [ 150.551635][ T4603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.922749][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.038065][ T4610] netlink: 'syz.3.232': attribute type 1 has an invalid length. [ 151.058876][ T4612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.230'. [ 151.462055][ T4610] set_capacity_and_notify: 2 callbacks suppressed [ 151.471240][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 151.471325][ T28] audit: type=1400 audit(1777561148.509:621): avc: denied { getopt } for pid=4611 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.489995][ T4610] loop3: detected capacity change from 0 to 1024 [ 151.551151][ T4622] loop2: detected capacity change from 0 to 128 [ 151.574037][ T4622] msdos: Bad value for 'gid' [ 151.579100][ T4622] msdos: Bad value for 'gid' [ 151.584898][ T4610] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 151.633529][ T4622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.235'. [ 151.662887][ T4622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.235'. [ 151.692419][ T4622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.235'. [ 151.694211][ T4625] loop4: detected capacity change from 0 to 512 [ 151.702062][ T4622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.235'. [ 151.736136][ T4625] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 151.746279][ T4625] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.236: bg 0: block 104: invalid block bitmap [ 151.759596][ T4625] loop4: lost filesystem error report for type 5 error -117 [ 151.759779][ T4625] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 151.767831][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 151.767853][ C0] EXT4-fs (loop4): initial error at time 1777561148: ext4_validate_block_bitmap:432 [ 151.767880][ C0] EXT4-fs (loop4): last error at time 1777561148: ext4_validate_block_bitmap:432 [ 151.780602][ T4610] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.232: Invalid block bitmap block 0 in block_group 0 [ 151.784565][ T4625] loop4: lost filesystem error report for type 5 error -117 [ 151.784829][ T4625] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.236: invalid indirect mapped block 1 (level 1) [ 151.795223][ T4610] loop3: lost filesystem error report for type 5 error -117 [ 151.804676][ T4625] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 151.805200][ T4625] EXT4-fs (loop4): 1 truncate cleaned up [ 151.805843][ T4625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.822149][ T4610] Quota error (device loop3): write_blk: dquota write failed [ 151.842983][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 151.843093][ C1] EXT4-fs (loop3): initial error at time 1777561148: ext4_read_block_bitmap_nowait:483 [ 151.843215][ C1] EXT4-fs (loop3): last error at time 1777561148: ext4_read_block_bitmap_nowait:483 [ 151.855524][ T4625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.236'. [ 151.865069][ T4610] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 151.884932][ T28] audit: type=1400 audit(1777561148.929:622): avc: denied { map } for pid=4624 comm="syz.4.236" path="pipe:[1451]" dev="pipefs" ino=1451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 151.885045][ T28] audit: type=1400 audit(1777561148.929:623): avc: denied { execute } for pid=4624 comm="syz.4.236" path="pipe:[1451]" dev="pipefs" ino=1451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 151.989995][ T4610] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.232: Failed to acquire dquot type 0 [ 152.003958][ T4610] loop3: lost filesystem error report for type 5 error -117 [ 152.020491][ T4610] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.232: Freeing blocks not in datazone - block = 0, count = 4096 [ 152.046404][ T4610] loop3: lost filesystem error report for type 5 error -117 [ 152.069272][ T4610] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.232: Invalid inode bitmap blk 0 in block_group 0 [ 152.098147][ T4610] loop3: lost filesystem error report for type 5 error -117 [ 152.103287][ T4610] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 152.192362][ T4610] loop3: lost filesystem error report for type 5 error -117 [ 152.195343][ T4610] EXT4-fs (loop3): 1 orphan inode deleted [ 152.221291][ T4610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.229138][ T36] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7 [ 152.244897][ T36] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 0 [ 152.256947][ T36] loop3: lost filesystem error report for type 5 error -117 [ 152.299463][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.851696][ T4634] loop1: detected capacity change from 0 to 128 [ 153.118458][ T28] audit: type=1400 audit(1777561150.159:624): avc: denied { setopt } for pid=4637 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 153.141430][ T4638] netlink: 'syz.3.241': attribute type 3 has an invalid length. [ 153.162108][ T28] audit: type=1400 audit(1777561150.179:625): avc: denied { nlmsg_read } for pid=4637 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.230023][ T4634] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 153.275200][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.387560][ T28] audit: type=1400 audit(1777561150.419:626): avc: denied { shutdown } for pid=4641 comm="syz.4.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 153.876620][ T4655] random: crng reseeded on system resumption [ 154.256957][ T28] audit: type=1400 audit(1777561151.299:627): avc: denied { ioctl } for pid=4660 comm="syz.1.247" path="socket:[9304]" dev="sockfs" ino=9304 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 154.781557][ T4675] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 154.787414][ T4675] bond2 (unregistering): Released all slaves [ 155.634947][ T4667] loop4: detected capacity change from 0 to 1024 [ 155.652862][ T4667] EXT4-fs: Mount option(s) incompatible with ext3 [ 155.669049][ T4667] loop4: detected capacity change from 0 to 512 [ 155.679953][ T4667] EXT4-fs: test_dummy_encryption option not supported [ 155.879300][ T4692] loop1: detected capacity change from 0 to 128 [ 155.891412][ T4688] loop3: detected capacity change from 0 to 512 [ 155.898650][ T4688] EXT4-fs: Ignoring removed oldalloc option [ 155.928770][ T4688] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.962706][ T4694] 9pnet_fd: p9_fd_create_unix (4694): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 156.058706][ T4697] loop2: detected capacity change from 0 to 1024 [ 156.189640][ T4697] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 156.203444][ T4697] EXT4-fs (loop2): group descriptors corrupted! [ 156.244506][ T4688] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.252: iget: bad i_size value: 38620345925642 [ 156.275276][ T4688] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 156.276583][ T4688] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.252: couldn't read orphan inode 15 (err -117) [ 156.335888][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 156.342672][ C0] EXT4-fs (loop3): initial error at time 1777561153: ext4_orphan_get:1397: inode 15 [ 156.352459][ C0] EXT4-fs (loop3): last error at time 1777561153: ext4_orphan_get:1397: inode 15 [ 156.370658][ T4694] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 156.380902][ T4688] loop3: lost filesystem error report for type 5 error -117 [ 156.397177][ T4692] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.417444][ T4692] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.429237][ T4688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.450804][ T4694] loop4: detected capacity change from 0 to 256 [ 156.526368][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 156.526418][ T28] audit: type=1400 audit(1777561153.569:629): avc: denied { remove_name } for pid=4685 comm="syz.3.252" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.591949][ T4686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.252'. [ 156.732593][ T3310] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.776182][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.817219][ T28] audit: type=1400 audit(1777561153.569:630): avc: denied { rmdir } for pid=4685 comm="syz.3.252" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 157.264151][ T4706] loop1: detected capacity change from 0 to 256 [ 157.275029][ T4706] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.547460][ T4705] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 157.610859][ T4705] FAT-fs (loop1): Filesystem has been set read-only [ 157.617702][ T4705] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 157.645941][ T28] audit: type=1400 audit(1777561154.679:631): avc: denied { ioctl } for pid=4711 comm="syz.0.259" path="socket:[7838]" dev="sockfs" ino=7838 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 157.678164][ T4712] loop0: detected capacity change from 0 to 512 [ 157.693874][ T4712] EXT4-fs: Ignoring removed bh option [ 157.711511][ T4712] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 157.798173][ T4712] EXT4-fs (loop0): 1 truncate cleaned up [ 157.854805][ T4724] loop3: detected capacity change from 0 to 512 [ 157.854951][ T4712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.886481][ T4724] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 157.906841][ T28] audit: type=1400 audit(1777561154.949:632): avc: denied { connect } for pid=4716 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 157.942704][ T4724] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 157.962201][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 157.962224][ C0] EXT4-fs (loop3): initial error at time 1777561155: mb_free_blocks:2049: inode 11: block 64 [ 157.962258][ C0] EXT4-fs (loop3): last error at time 1777561155: mb_free_blocks:2049: inode 11: block 64 [ 157.992563][ T4724] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #11: comm syz.3.274: corrupted inode contents [ 157.992594][ T4724] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 157.994365][ T4724] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #11: comm syz.3.274: mark_inode_dirty error [ 157.994395][ T4724] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 157.995676][ T4724] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.274: invalid indirect mapped block 1 (level 1) [ 157.995706][ T4724] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 157.997642][ T4724] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #11: comm syz.3.274: corrupted inode contents [ 157.997670][ T4724] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 157.999280][ T4724] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 157.999372][ T4724] loop3: lost filesystem error report for type 5 error -117 [ 158.001151][ T4724] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #11: comm syz.3.274: corrupted inode contents [ 158.001225][ T4724] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 158.002343][ T4724] EXT4-fs error (device loop3): ext4_truncate:4690: inode #11: comm syz.3.274: mark_inode_dirty error [ 158.002372][ T4724] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 158.004182][ T4724] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 158.004204][ T4724] loop3: lost filesystem error report for type 5 error -117 [ 158.005721][ T4724] EXT4-fs (loop3): 1 truncate cleaned up [ 158.006310][ T4724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.063200][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.495946][ T4783] netlink: 'syz.2.266': attribute type 27 has an invalid length. [ 158.552545][ T4783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.568327][ T4783] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.588938][ T4783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.638083][ T4783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 158.649311][ T4783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.663947][ T4783] veth1_vlan: left promiscuous mode [ 158.682007][ T4783] veth0_vlan: left promiscuous mode [ 158.693600][ T4783] veth0_vlan: entered promiscuous mode [ 158.711667][ T4783] veth1_vlan: entered promiscuous mode [ 158.732099][ T4783] veth1_macvtap: left promiscuous mode [ 158.749400][ T4783] veth0_macvtap: left promiscuous mode [ 158.764173][ T4783] veth0_macvtap: entered promiscuous mode [ 158.842918][ T4783] veth1_macvtap: entered promiscuous mode [ 158.858474][ T4783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 158.868226][ T4783] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 158.886917][ T4783] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 158.911217][ T4783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 158.922455][ T4783] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.939218][ T4790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 158.968868][ T62] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.978411][ T62] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.992923][ T4812] syz_tun: entered allmulticast mode [ 159.019715][ T62] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.044127][ T62] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.106901][ T4825] IPv6: NLM_F_REPLACE set, but no existing node found! [ 159.247857][ T28] audit: type=1400 audit(1777561156.289:633): avc: denied { getopt } for pid=4829 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 159.802320][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.857381][ T28] audit: type=1400 audit(2000000000.500:634): avc: denied { setopt } for pid=4876 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 159.913344][ T28] audit: type=1400 audit(2000000000.500:635): avc: denied { setopt } for pid=4873 comm="syz.0.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.269339][ T4883] support for the xor transformation has been removed. [ 160.492996][ T4882] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.650586][ T4882] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.747124][ T28] audit: type=1400 audit(2000000001.420:636): avc: denied { read } for pid=4884 comm="syz.3.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 160.821914][ T4882] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.931300][ T4882] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.195101][ T4894] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 161.249048][ T184] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.273690][ T184] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.295729][ T4897] loop1: detected capacity change from 0 to 512 [ 161.307537][ T184] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.327846][ T184] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.361217][ T4897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.383772][ T4897] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.400415][ T4897] tmpfs: Unknown parameter 'inode31' [ 161.888534][ T4910] ref_ctr_offset mismatch. inode: 0x14d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 161.916332][ T4910] xt_hashlimit: size too large, truncated to 1048576 [ 162.101810][ T4915] loop3: detected capacity change from 0 to 512 [ 162.162352][ T4917] loop0: detected capacity change from 0 to 512 [ 162.204701][ T4915] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 162.216030][ T4915] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 162.274984][ T4915] EXT4-fs (loop3): mount failed [ 162.363309][ T4924] netlink: 700 bytes leftover after parsing attributes in process `syz.3.288'. [ 162.363505][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.387217][ T4924] loop3: detected capacity change from 0 to 128 [ 162.477979][ T4917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.552914][ T4917] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.621141][ T28] audit: type=1400 audit(2000000003.270:637): avc: denied { append } for pid=4925 comm="syz.1.287" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 162.644911][ T28] audit: type=1400 audit(2000000003.270:638): avc: denied { allowed } for pid=4925 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 162.701231][ T4935] netlink: 68 bytes leftover after parsing attributes in process `syz.2.290'. [ 162.789612][ T28] audit: type=1326 audit(2000000003.460:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4933 comm="syz.4.291" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fb094326b57 code=0x0 [ 162.968799][ T4227] kworker/u8:17: attempt to access beyond end of device [ 162.968799][ T4227] loop3: rw=1, sector=145, nr_sectors = 8 limit=128 [ 162.990739][ T4227] kworker/u8:17: attempt to access beyond end of device [ 162.990739][ T4227] loop3: rw=1, sector=161, nr_sectors = 6 limit=128 [ 163.076640][ T4945] loop1: detected capacity change from 0 to 512 [ 163.104229][ T4945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.121160][ T4941] loop2: detected capacity change from 0 to 256 [ 163.135515][ T4945] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.461839][ T4952] loop3: detected capacity change from 0 to 512 [ 163.469084][ T4952] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 163.482258][ T4952] EXT4-fs (loop3): 1 truncate cleaned up [ 163.488594][ T4952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.637382][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.712894][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.736498][ T4956] loop0: detected capacity change from 0 to 512 [ 163.759092][ T4958] loop2: detected capacity change from 0 to 1024 [ 163.759772][ T4956] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 163.786392][ T4958] EXT4-fs: test_dummy_encryption option not supported [ 163.806488][ T4956] EXT4-fs (loop0): 1 truncate cleaned up [ 163.822946][ T4956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.565748][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.991457][ T4968] loop4: detected capacity change from 0 to 512 [ 165.014505][ T28] audit: type=1400 audit(2000000005.690:640): avc: denied { mounton } for pid=4967 comm="syz.4.300" path="/62/file0" dev="tmpfs" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 165.017409][ T4968] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 166.000847][ T4968] EXT4-fs (loop4): 1 truncate cleaned up [ 166.007639][ T4968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.020734][ T4970] loop0: detected capacity change from 0 to 1764 [ 166.027893][ T4970] iso9660: Unknown parameter 'de' [ 166.030736][ T4968] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.098183][ T4970] loop0: detected capacity change from 0 to 1024 [ 166.155877][ T4973] loop3: detected capacity change from 0 to 512 [ 166.163638][ T4973] EXT4-fs: Ignoring removed bh option [ 166.169395][ T4973] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.183676][ T4970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.201727][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.220723][ T4973] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 166.244947][ T4973] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 166.258306][ T28] audit: type=1400 audit(2000000006.890:641): avc: denied { execute } for pid=4967 comm="syz.4.300" name="file0" dev="tmpfs" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 166.287597][ T4973] EXT4-fs (loop3): orphan cleanup on readonly fs [ 166.330983][ T4968] netlink: 'syz.4.300': attribute type 13 has an invalid length. [ 166.466223][ T4977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.482196][ T4973] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 166.493709][ T4973] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 166.506444][ T4973] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.301: Failed to acquire dquot type 1 [ 166.532033][ T4973] loop3: lost filesystem error report for type 5 error -5 [ 166.553030][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 166.571508][ C1] EXT4-fs (loop3): last error at time 2000000007: ext4_acquire_dquot:7034 [ 166.815180][ T4973] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.301: Invalid block bitmap block 0 in block_group 0 [ 166.841432][ T4973] loop3: lost filesystem error report for type 5 error -117 [ 166.877386][ T4973] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.301: Invalid block bitmap block 0 in block_group 0 [ 166.975980][ T4973] loop3: lost filesystem error report for type 5 error -117 [ 166.984628][ T4973] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.301: Invalid block bitmap block 0 in block_group 0 [ 167.310329][ T4973] loop3: lost filesystem error report for type 5 error -117 [ 167.350577][ T4973] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.301: Invalid block bitmap block 0 in block_group 0 [ 167.378544][ T4968] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.413503][ T4973] loop3: lost filesystem error report for type 5 error -117 [ 167.438745][ T4968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.458785][ T4973] Quota error (device loop3): write_blk: dquota write failed [ 167.518950][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.546440][ T4968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.734274][ T4973] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 167.853873][ T4973] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.301: Failed to acquire dquot type 1 [ 167.869690][ T4973] loop3: lost filesystem error report for type 5 error -28 [ 167.872829][ T4973] Quota error (device loop3): write_blk: dquota write failed [ 167.887766][ T4973] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 168.535137][ T4973] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.301: Failed to acquire dquot type 1 [ 168.853141][ T4973] loop3: lost filesystem error report for type 5 error -28 [ 168.857213][ T4973] EXT4-fs (loop3): 1 orphan inode deleted [ 168.882553][ T4973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 169.342331][ T5012] set_capacity_and_notify: 1 callbacks suppressed [ 169.342350][ T5012] loop1: detected capacity change from 0 to 1024 [ 169.937543][ T1040] IPVS: starting estimator thread 0... [ 169.945486][ T28] audit: type=1400 audit(2000000009.750:642): avc: denied { accept } for pid=5009 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 170.073541][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.950353][ T5013] IPVS: using max 2736 ests per chain, 136800 per kthread [ 171.079286][ T5012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.099438][ T5012] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.677656][ T5020] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 171.749906][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 171.935422][ T5034] loop4: detected capacity change from 0 to 512 [ 171.954221][ T184] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.037534][ T184] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.049020][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.058775][ T184] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.080623][ T184] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.108695][ T5038] ALSA: seq fatal error: cannot create timer (-19) [ 172.115719][ T28] audit: type=1400 audit(2000000012.770:643): avc: denied { listen } for pid=5035 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 172.137009][ T5041] loop2: detected capacity change from 0 to 512 [ 172.162173][ T28] audit: type=1400 audit(2000000012.820:644): avc: denied { sqpoll } for pid=5037 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 172.184444][ T5038] loop0: detected capacity change from 0 to 512 [ 172.191237][ T5038] EXT4-fs: Ignoring removed orlov option [ 172.197061][ T5038] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.217303][ T5041] syz.2.312: attempt to access beyond end of device [ 172.217303][ T5041] loop2: rw=0, sector=17179852721, nr_sectors = 1 limit=512 [ 172.245449][ T5038] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.311: corrupted in-inode xattr: e_value size too large [ 172.262110][ T5038] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 172.262442][ T5038] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.311: couldn't read orphan inode 15 (err -117) [ 172.277407][ T5041] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 172.293818][ T5038] loop0: lost filesystem error report for type 5 error -117 [ 172.296159][ T5038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.325189][ T5041] FAT-fs (loop2): Filesystem has been set read-only [ 172.366917][ T5041] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 172.561415][ T5041] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 172.643902][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.669197][ T5054] loop2: detected capacity change from 0 to 512 [ 172.692371][ T5054] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 172.707826][ T5054] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 172.726984][ T28] audit: type=1400 audit(2000000013.400:645): avc: denied { create } for pid=5055 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 172.746423][ T5049] geneve2: entered promiscuous mode [ 172.751728][ T28] audit: type=1400 audit(2000000013.430:646): avc: denied { create } for pid=5053 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 172.754584][ T5049] geneve2: entered allmulticast mode [ 172.792626][ T184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 172.809967][ T184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 172.825439][ T184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 172.860032][ T184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 172.932499][ T5062] loop0: detected capacity change from 0 to 512 [ 172.946660][ T5062] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 172.963027][ T5062] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 172.976881][ T28] audit: type=1400 audit(2000000013.650:647): avc: denied { ioctl } for pid=5061 comm="syz.0.317" path="socket:[11316]" dev="sockfs" ino=11316 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 173.120623][ T28] audit: type=1400 audit(2000000013.790:648): avc: denied { listen } for pid=5067 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 173.242594][ T5066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'. [ 173.439916][ T5080] loop2: detected capacity change from 0 to 512 [ 173.499775][ T5064] loop4: detected capacity change from 0 to 4096 [ 173.520477][ T5064] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0002] [ 173.529012][ T5064] System zones: 0-5 [ 173.565250][ T5080] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.323: bg 0: block 169: padding at end of block bitmap is not set [ 173.569003][ T5077] tipc: Enabling of bearer rejected, failed to enable media [ 173.600385][ T28] audit: type=1400 audit(2000000014.270:649): avc: denied { connect } for pid=5076 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 173.616866][ T5080] loop2: lost filesystem error report for type 5 error -117 [ 173.637235][ T5080] Quota error (device loop2): write_blk: dquota write failed [ 173.642597][ T28] audit: type=1400 audit(2000000014.300:650): avc: denied { setopt } for pid=5076 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 173.645058][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 173.680993][ C1] EXT4-fs (loop2): initial error at time 2000000014: ext4_validate_block_bitmap:441 [ 173.690729][ C1] EXT4-fs (loop2): last error at time 2000000014: ext4_validate_block_bitmap:441 [ 173.718328][ T5080] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 173.724842][ T28] audit: type=1400 audit(2000000014.380:651): avc: denied { cpu } for pid=5082 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 173.732995][ T5080] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.323: Failed to acquire dquot type 0 [ 173.752277][ T5064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.775128][ T5089] loop3: detected capacity change from 0 to 512 [ 173.779829][ T5089] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 173.779950][ T5089] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 173.780238][ T5080] loop2: lost filesystem error report for type 5 error -117 [ 173.851041][ T5091] loop3: detected capacity change from 0 to 512 [ 173.852785][ T5080] EXT4-fs (loop2): 1 truncate cleaned up [ 173.872019][ T5080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.890882][ T5080] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.897351][ T5091] syz.3.326: attempt to access beyond end of device [ 173.897351][ T5091] loop3: rw=0, sector=17179852721, nr_sectors = 1 limit=512 [ 173.946349][ T5091] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 173.947364][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.963899][ T5091] FAT-fs (loop3): Filesystem has been set read-only [ 173.984635][ T5093] tipc: Started in network mode [ 174.000251][ T5093] tipc: Node identity 6274bedd22a2, cluster identity 4711 [ 174.012433][ T5091] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 174.023277][ T5093] tipc: Enabled bearer , priority 0 [ 174.036039][ T5093] syzkaller0: entered promiscuous mode [ 174.047131][ T5093] syzkaller0: entered allmulticast mode [ 174.064083][ T5091] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 174.087559][ T5093] tipc: Resetting bearer [ 174.094201][ T5093] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.327' sets config #1 [ 174.109200][ T5092] tipc: Resetting bearer [ 174.134273][ T5092] tipc: Disabling bearer [ 174.170718][ T5099] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 174.213164][ T5099] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 174.710963][ T5104] IPv6: NLM_F_REPLACE set, but no existing node found! [ 174.752529][ T28] audit: type=1400 audit(2000000015.370:652): avc: denied { watch watch_reads } for pid=5105 comm="syz.3.331" path="/76" dev="tmpfs" ino=429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 174.781215][ T5107] process 'syz.3.331' launched '/dev/fd/9' with NULL argv: empty string added [ 174.793241][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.832550][ T5112] set_capacity_and_notify: 1 callbacks suppressed [ 174.832568][ T5112] loop2: detected capacity change from 0 to 1024 [ 174.854616][ T5113] loop0: detected capacity change from 0 to 164 [ 174.864332][ T5109] loop1: detected capacity change from 0 to 512 [ 174.929857][ T5109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.942973][ T5109] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.010296][ T5112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.044400][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.089240][ T5121] loop1: detected capacity change from 0 to 512 [ 175.108905][ T5121] EXT4-fs: Ignoring removed bh option [ 175.114899][ T5121] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.124870][ T5121] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.335: corrupted in-inode xattr: e_value size too large [ 175.140342][ T5121] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 175.140782][ T5121] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.335: couldn't read orphan inode 15 (err -117) [ 175.150255][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 175.150283][ C1] EXT4-fs (loop1): initial error at time 2000000015: ext4_iget_extra_inode:5128: inode 15 [ 175.150312][ C1] EXT4-fs (loop1): last error at time 2000000015: ext4_iget_extra_inode:5128: inode 15 [ 175.192122][ T5121] loop1: lost filesystem error report for type 5 error -117 [ 175.271417][ T5124] Unsupported NM flag settings (240) [ 175.287676][ T5124] Unsupported NM flag settings (240) [ 175.324007][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.334933][ T5121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.482654][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.666431][ T5139] syzkaller0: entered promiscuous mode [ 177.680775][ T5139] syzkaller0: entered allmulticast mode [ 177.695945][ T5141] tipc: Started in network mode [ 177.712737][ T5141] tipc: Node identity 266f16d701ba, cluster identity 4711 [ 177.729855][ T5141] tipc: Enabled bearer , priority 0 [ 177.737719][ T5139] 0: reclassify loop, rule prio 0, protocol 800 [ 177.791056][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 177.791072][ T28] audit: type=1400 audit(2000000018.460:656): avc: denied { write } for pid=5149 comm="syz.4.342" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 177.844967][ T5143] loop2: detected capacity change from 0 to 1024 [ 177.863163][ T5143] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 177.871950][ T5143] EXT4-fs (loop2): The Hurd can't support 64-bit file systems [ 177.887319][ T5154] loop4: detected capacity change from 0 to 1024 [ 177.909086][ T5154] EXT4-fs: inline encryption not supported [ 177.929293][ T5154] EXT4-fs (loop4): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 178.036725][ T5154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.090930][ T5141] syzkaller0: entered promiscuous mode [ 178.096677][ T5141] syzkaller0: entered allmulticast mode [ 178.113570][ T5151] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 178.137152][ T5160] tipc: Resetting bearer [ 178.183703][ T5140] tipc: Resetting bearer [ 178.196277][ T28] audit: type=1400 audit(2000000018.860:657): avc: denied { listen } for pid=5161 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.231897][ T5154] Cannot find map_set index 65533 as target [ 178.248083][ T5140] tipc: Disabling bearer [ 178.273757][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.291248][ T5162] loop0: detected capacity change from 0 to 2048 [ 178.300826][ T5162] EXT4-fs: Ignoring removed mblk_io_submit option [ 178.307738][ T5162] EXT4-fs: Ignoring removed bh option [ 178.313751][ T5162] EXT4-fs: dax option not supported [ 178.314518][ T5166] loop4: detected capacity change from 0 to 512 [ 178.370490][ T5166] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.345: bg 0: block 169: padding at end of block bitmap is not set [ 178.402463][ T5166] loop4: lost filesystem error report for type 5 error -117 [ 178.402684][ T5166] Quota error (device loop4): write_blk: dquota write failed [ 178.417643][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 178.417662][ C0] EXT4-fs (loop4): initial error at time 2000000019: ext4_validate_block_bitmap:441 [ 178.417687][ C0] EXT4-fs (loop4): last error at time 2000000019: ext4_validate_block_bitmap:441 [ 178.443619][ T5166] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 178.454074][ T5166] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.345: Failed to acquire dquot type 0 [ 178.482219][ T5166] loop4: lost filesystem error report for type 5 error -117 [ 178.483166][ T5166] EXT4-fs (loop4): 1 truncate cleaned up [ 178.513327][ T5166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.526364][ T5166] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.529668][ T5175] capability: warning: `syz.0.360' uses deprecated v2 capabilities in a way that may be insecure [ 178.537056][ T28] audit: type=1400 audit(2000000019.210:658): avc: denied { accept } for pid=5173 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 178.579449][ T5179] loop3: detected capacity change from 0 to 512 [ 178.606041][ T5179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.629379][ T5179] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.629587][ T28] audit: type=1400 audit(2000000019.250:659): avc: denied { ioctl } for pid=5173 comm="syz.0.360" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 178.710203][ T5186] loop0: detected capacity change from 0 to 512 [ 178.747799][ T28] audit: type=1326 audit(2000000019.300:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5181 comm="syz.1.350" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f560a36cdd9 code=0x0 [ 178.764815][ T5186] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 178.949456][ T5186] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 178.972590][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.009661][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.106073][ T5198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.445988][ T5205] EXT4-fs: inline encryption not supported [ 179.455274][ T5205] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 179.467445][ T5205] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 179.930289][ T5209] set_capacity_and_notify: 2 callbacks suppressed [ 179.930307][ T5209] loop0: detected capacity change from 0 to 1024 [ 179.996363][ T5209] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 180.018282][ T5209] EXT4-fs (loop0): The Hurd can't support 64-bit file systems [ 180.165651][ T28] audit: type=1400 audit(2000000020.820:661): avc: denied { ioctl } for pid=5219 comm="syz.0.365" path="socket:[10819]" dev="sockfs" ino=10819 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 180.192598][ T5220] netlink: 14 bytes leftover after parsing attributes in process `syz.0.365'. [ 180.218638][ T28] audit: type=1400 audit(2000000020.890:662): avc: denied { bind } for pid=5217 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 180.331317][ T28] audit: type=1400 audit(2000000020.920:663): avc: denied { node_bind } for pid=5217 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 180.392908][ T5225] loop3: detected capacity change from 0 to 2048 [ 180.430594][ T5225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.757992][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.818872][ T5233] syzkaller0: entered promiscuous mode [ 180.824703][ T5233] syzkaller0: entered allmulticast mode [ 180.832546][ T5233] tc action pedit offset must be on 32 bit boundaries [ 180.949790][ T5236] loop4: detected capacity change from 0 to 512 [ 180.957245][ T5236] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 180.966140][ T5236] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 181.010586][ T5239] loop4: detected capacity change from 0 to 512 [ 181.030813][ T5239] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.082989][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.141351][ T3314] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 181.177287][ T5248] loop2: detected capacity change from 0 to 512 [ 181.201257][ T5248] EXT4-fs: Ignoring removed bh option [ 181.220028][ T5248] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.228569][ T5248] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.373: corrupted in-inode xattr: e_value size too large [ 181.251200][ T5248] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 181.262714][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 181.282040][ C1] EXT4-fs (loop2): initial error at time 2000000021: ext4_iget_extra_inode:5128: inode 15 [ 181.286966][ T5248] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.373: couldn't read orphan inode 15 (err -117) [ 181.294453][ C1] EXT4-fs (loop2): last error at time 2000000021: ext4_iget_extra_inode:5128 [ 181.306818][ T5248] loop2: lost filesystem error report for type 5 error -117 [ 181.307680][ T5248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.340592][ C1] [ 183.738095][ T12] tipc: Subscription rejected, illegal request [ 183.746299][ T5266] loop3: detected capacity change from 0 to 164 [ 183.766977][ T3315] ================================================================== [ 183.775210][ T3315] BUG: KCSAN: data-race in rwsem_down_write_slowpath / rwsem_down_write_slowpath [ 183.784360][ T3315] [ 183.786902][ T3315] write to 0xffffc900015c7b78 of 1 bytes by task 5258 on cpu 1: [ 183.794832][ T3315] rwsem_down_write_slowpath+0x3dd/0xac0 [ 183.796487][ T5260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.372'. [ 183.800669][ T3315] down_write+0xab/0xc0 [ 183.800696][ T3315] kernfs_add_one+0x5a/0x280 [ 183.819219][ T3315] __kernfs_create_file+0x145/0x180 [ 183.825055][ T3315] sysfs_add_file_mode_ns+0x132/0x1b0 [ 183.830461][ T3315] internal_create_group+0x441/0x9e0 [ 183.835867][ T3315] sysfs_create_groups+0x3f/0xf0 [ 183.840839][ T3315] ib_setup_port_attrs+0x9e9/0x1400 [ 183.846322][ T3315] add_one_compat_dev+0x297/0x390 [ 183.851550][ T3315] rdma_dev_init_net+0x1b9/0x240 [ 183.856943][ T3315] ops_init+0x22a/0x2e0 [ 183.861140][ T3315] setup_net+0x9f/0x230 [ 183.865416][ T3315] copy_net_ns+0x310/0x450 [ 183.870294][ T3315] create_new_namespaces+0x20e/0x440 [ 183.876211][ T3315] unshare_nsproxy_namespaces+0x115/0x150 [ 183.882306][ T3315] ksys_unshare+0x402/0x740 [ 183.886823][ T3315] __x64_sys_unshare+0x1f/0x30 [ 183.891603][ T3315] x64_sys_call+0x1cef/0x3020 [ 183.896548][ T3315] do_syscall_64+0x12c/0x3b0 [ 183.901158][ T3315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.907158][ T3315] [ 183.909575][ T3315] read to 0xffffc900015c7b78 of 1 bytes by task 3315 on cpu 0: [ 183.917729][ T3315] rwsem_down_write_slowpath+0x44f/0xac0 [ 183.924215][ T3315] down_write+0xab/0xc0 [ 183.928476][ T3315] kernfs_remove_by_name_ns+0x6b/0x110 [ 183.933960][ T3315] sysfs_remove_group+0xa5/0x170 [ 183.938920][ T3315] sysfs_remove_groups+0x3a/0x80 [ 183.944143][ T3315] __kobject_del+0x4b/0x190 [ 183.948744][ T3315] kobject_del+0x2e/0x50 [ 183.953102][ T3315] ext4_unregister_sysfs+0x84/0xa0 [ 183.958334][ T3315] ext4_put_super+0x4c/0x7b0 [ 183.963157][ T3315] generic_shutdown_super+0xee/0x220 [ 183.968888][ T3315] kill_block_super+0x2a/0x70 [ 183.974120][ T3315] ext4_kill_sb+0x42/0x80 [ 183.978455][ T3315] deactivate_locked_super+0x75/0x1c0 [ 183.983943][ T3315] deactivate_super+0x97/0xa0 [ 183.988887][ T3315] cleanup_mnt+0x2bb/0x330 [ 183.993484][ T3315] __cleanup_mnt+0x19/0x20 [ 183.997998][ T3315] task_work_run+0x130/0x1a0 [ 184.003037][ T3315] exit_to_user_mode_loop+0x1f4/0x6f0 [ 184.008707][ T3315] do_syscall_64+0x232/0x3b0 [ 184.013574][ T3315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.019475][ T3315] [ 184.021836][ T3315] value changed: 0x00 -> 0x01 [ 184.026859][ T3315] [ 184.029197][ T3315] Reported by Kernel Concurrency Sanitizer on: [ 184.035811][ T3315] CPU: 0 UID: 0 PID: 3315 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 184.046944][ T3315] Tainted: [W]=WARN [ 184.050744][ T3315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 184.060979][ T3315] ================================================================== [ 184.215672][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.369471][ T5269] loop2: detected capacity change from 0 to 256 [ 184.399436][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 184.399454][ T28] audit: type=1400 audit(2000000025.040:670): avc: denied { write } for pid=5268 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1