last executing test programs: 3m48.364921377s ago: executing program 2 (id=285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61122400000000006113340000000000bf1000000000000015000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee600f06702000014000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25f40c87bf25b750bbaa"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) syz_open_dev$sg(0x0, 0x0, 0x0) 3m47.414223832s ago: executing program 2 (id=287): r0 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x2) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 3m46.401802034s ago: executing program 2 (id=292): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$cgroup_int(r3, &(0x7f0000000180)=0x8, 0x12) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@remote, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0x800b2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r4 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r4, &(0x7f0000000100)=""/253, 0xfd, 0x1) 3m46.334806411s ago: executing program 2 (id=294): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4040) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") socket$nl_route(0x10, 0x3, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000540)='./bus\x00', 0x84000, 0x0) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 3m45.421579483s ago: executing program 2 (id=298): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r0, &(0x7f00000003c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0xd4, 0x81}]}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) 3m45.040754979s ago: executing program 2 (id=302): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000080)={0x0, 0x8000}, 0x8) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) pwritev2(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0xffffff6e, 0x18) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @remote, 0x100000}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="d3d0666d223e4686", 0x8) 3m44.916296775s ago: executing program 32 (id=302): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000080)={0x0, 0x8000}, 0x8) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) pwritev2(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0xffffff6e, 0x18) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @remote, 0x100000}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="d3d0666d223e4686", 0x8) 10.881343121s ago: executing program 4 (id=1391): syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, @perf_config_ext={0x0, 0x41}, 0x0, 0x0, 0x0, 0x0, 0x558, 0xbb1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f00000000c0), 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.880526971s ago: executing program 4 (id=1395): r0 = fsopen(&(0x7f00000000c0)='minix\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) fsmount(r0, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x8887, 0x10000, 0x8, 0x1, 0x80a, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 9.947446699s ago: executing program 3 (id=1397): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), 0x0) syz_io_uring_setup(0x7b, 0x0, &(0x7f00000005c0), 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) lsm_list_modules(0x0, 0x0, 0x10000000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, '\x00', 0x26}, 0x9}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 8.030347275s ago: executing program 4 (id=1404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f0000002000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80e093, 0x0, @perf_config_ext={0x3, 0x7}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x100, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000080) rename(0x0, &(0x7f0000000180)='./file1\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) read$watch_queue(0xffffffffffffffff, &(0x7f0000000100)=""/97, 0x61) syz_usb_connect$uac1(0x0, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 8.009218111s ago: executing program 3 (id=1405): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x62000000) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x401, 0x6, 0xfffffff9, 0x9, 0x6]}, &(0x7f0000000040)=0x54) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 7.032109321s ago: executing program 3 (id=1409): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) pidfd_send_signal(r1, 0x14, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x6a040000) 5.091853663s ago: executing program 1 (id=1419): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) kcmp(r0, r0, 0x5, r3, r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 5.001509215s ago: executing program 3 (id=1421): syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, @perf_config_ext={0x0, 0x41}, 0x0, 0x0, 0x0, 0x0, 0x558, 0xbb1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f00000000c0), 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.402501038s ago: executing program 5 (id=1422): r0 = syz_io_uring_setup(0xb7f, &(0x7f0000000500)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) r3 = open(&(0x7f0000000480)='.\x00', 0x68800, 0x101) r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(0x0, &(0x7f0000000080)='./file2\x00') getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a14000000000a010300000000000000000400000314000000090a01010000000000000000010000011400000011000100000000000000000002ec000a"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x12, r5, 0x0, 0x0, 0x0, 0x40002262, 0x0, {0x1}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="b79231ed96b547e7ce122f5d972da1f4a8558579f7e038c35480e9a7cc88714eb89066f5a3765285d133c2d8729819abe5d73b3dfc8aa303fc3fb377c0dcbc36a61c8ff5d1ba2deb8a17147d7c65db3cfb9e582598e3b00c1525c96d967ebf156aa0adf232de1adca71a90fb2375", 0x6e}, {&(0x7f0000000100)="009bba7c07c5f58648efe690f93cd8670f79b039d8826b914fe5fe", 0x1b}, {&(0x7f00000001c0)}], 0x4, 0xa) pidfd_getfd(r6, r0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 4.402188318s ago: executing program 3 (id=1423): perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r1, 0x0, 0x7) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x110c, 0x0, &(0x7f0000000180), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000080), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.315333291s ago: executing program 5 (id=1424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$kcm(0x2, 0x3, 0x106) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) 4.15241235s ago: executing program 1 (id=1425): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2) 3.780817227s ago: executing program 1 (id=1426): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) syz_io_uring_setup(0x5038, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c081}, 0x80) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, 0x0) 3.569055565s ago: executing program 0 (id=1428): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./bus\x00', 0x228010, &(0x7f00000000c0)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00aaed2e6322e12ca43d55f4e47d9fb6f319fab9c81cd7b9b508d5df5619dad30ed85701f46d5bb2b85a6aecd28cb992054878a859b15b1598ee0b05192ff4df579d2dd32fb9a6a092bb22740cfe0636a3d8ff4e975e21fc6d6e2d6ece2beac2098361fe652ea69917e6d47463ceb0b35bc7a2f8799debe5e7b6e82c84ab25d06157c08f006d90e62a8026a845835dbf4ac25eec51c3ec73c82014eee15eaaa123084415546ca2e37c23d441b343cec1f74e52bc1f21eb18053a9b98d3a304fba3751bd0121940bc9d276f1e5352b9f4e674bb80ffeaaff6843ef1c8a7a7e0d592893a77ae91e025a35840e7ff4fdb3571d1986ed6f5a23d9ee6bf1cec94fb17af0627c04bf47586ce288a466c039a1ead7fd99feacc51d9f7a2e67f46a0b86b45e5d7cb4affc1c539a764f5", @ANYRES32, @ANYRESDEC], 0x1, 0x321, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0xb1, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8) 3.49149934s ago: executing program 1 (id=1429): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800001801"], 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x4}}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000100)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$eJzs3E1oXNUeAPD/nXz26zXvvb6+176+Z2oVg8WkTavNQpCKggsFsYK6DElaatNGmhRsqTIFqUspuBeXbl24VTdFXAlu61KQQpFu2griyJ25dzIzmUmaSTJjmt8Pbuace2fuOeeee+6ce07mBrBlDad/kkr4VkTsjohC4xuGKy/3716denD36lQUS6VTvyblj91L45lsN7Eji4wUIgofJYsbasxfvnJucnZ25mIWH1s4/97Y/OUrz5wdzNZMTCS9bRaqSXppue7t/3DuwL5X3rnx2lR1z3lqteVYL8Mx3CwrZU+ud2Jdtqsm3Ha90XHp+Z9WV1+5/e+Onliu8oodzBmw0UqlUmmg9eZiqdG1JWuATSsGu50DoDvyL/r0/jdfmnUE+jem+9F1d05WboDSct/PlojHyivzcZC+hvvb9TQcEW8Xf/ssXWKDxiEAAGp9czLvCTb0/4YqMyO/X7r5Qvr6t2wOZSgi/h4R/4iIf0bEnoj4V0TsjYh/R8R/GvbfExGlZdIfbohX069OQhVur1NRm0r7f89nc1vpsjj3VQ0N9WSxXRF5h3nmSHZMRqJv4PTZ2Zmjy6Tx7Us/ftJqW23/L13SPOR9wSwft3sbBuimJxcm2yvtUneuRezvXSx/pf+b9EYk1ZmAJCL2RcT+Vex3qCZ89ukvDlQjffXvW7n8ZaWm82jrMM9U+jziqUr9F6Na/qibREzq5ifPT56ZOTNzYXxi4vixoyeeG392bDBmZ46MpWfBkaZpfP/D9ddbpb9i+b/6ufEjL5/4+lTWstYurf/tNed/5PO3i+UfSiKS6nzt/OrTuP7Txy3vado9//uTN8vh/L70/cmFhYtHI/qTV5euH1/8bB5PX6NYKf/Iocbzv5xu+RqXH4n/RkR6Ev8vIv4flTvENO8HI+LxiDi0TPm/e/GJd9sv/8ZKyz8d9eWv1Hxd/S/O17cKJNncYN2m/kgDPecO3nrQ4uLxcPV/vBwaydY0v/4ldZeIVjnNv+3SNX+s+egBAADA5lCIiJ01Y0k7o1AYHa2MAe2J7YXZufmFw6fnLl2YTrdFDEVfIR/pqowH9yX5+OdQTXy8IX4sGzf+tGdbOT46NTc73dWSAzvKbT4pjEa81VPT/lO/rM8QM/BX5vdasHUt1/7TTvzeGx3MDNBRD//9f/ODDc0I0HE17b/VL/yLbfzfF7AJPPT3f9LyeTbAI2PlB/0YM4TNr6Qtw5a2qvZ/2EMA4VHSG29Uw4Wu5gToNP1/2JJW/F3/mgKlgeabBmPpm2Nw+R32RHvZ2NYkra4E0p5VV1Lf1s6n8omelu+Jwup2OBD1a/rbrNPTazwaxYvzZ/Yunvz5s0XWeJxL2f/Kr3cNftmRdtos0PFLEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIb4MwAA///GJdfC") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x20, 0x1, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.430150038s ago: executing program 4 (id=1430): r0 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x15b}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_open_procfs(0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) io_uring_enter(r0, 0x6f58, 0x0, 0x0, 0x0, 0x0) 2.458706379s ago: executing program 5 (id=1431): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$rxrpc(0x21, 0x2, 0xa) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) bind$rxrpc(r2, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000100)={r6, 0x1}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 2.377410973s ago: executing program 3 (id=1432): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) r1 = socket(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r1, r0, 0x0, 0x8010002b) 2.161578561s ago: executing program 0 (id=1433): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x28, 0x0, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0xd3) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x109081) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='.\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_logger_exec_t:s0\x00', 0x2b, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_misc(r5, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r6 = fsmount(r5, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) 1.557891024s ago: executing program 0 (id=1434): syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f00000000c0), 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.276004439s ago: executing program 4 (id=1435): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x18002, &(0x7f0000000080)={[{@data_err_ignore}, {@errors_remount}, {@sysvgroups}, {@norecovery}, {@nodioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nobh}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000380)=[&(0x7f00005e4000/0x3000)=nil], 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mprotect(&(0x7f000028d000/0x2000)=nil, 0x2000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = open(0x0, 0x4827e, 0xdc) fallocate(r1, 0x0, 0x0, 0x8800000) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0xe, 0x0}}], 0x40000cf, 0x0) r3 = open(0x0, 0x66842, 0x21) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 612.471559ms ago: executing program 0 (id=1436): munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x40) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/31) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) io_uring_setup(0x6c0, &(0x7f0000000880)={0x0, 0xd3d5, 0x10000, 0x5, 0x351}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) 611.94877ms ago: executing program 1 (id=1437): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000080)=@v3={0x3000000, [{0x6, 0x1}, {0x100, 0xfffff60c}], 0xffffffffffffffff}, 0x18, 0x3) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x40000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x400c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b"], 0x70}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000020000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 464.841491ms ago: executing program 4 (id=1438): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3}, 0x0, 0x3a, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) epoll_create1(0x80000) socket$inet6_sctp(0xa, 0x5, 0x84) 464.241491ms ago: executing program 0 (id=1448): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0xfffffd65) shutdown(0xffffffffffffffff, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x2e, 0x301, 0x70bd26, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001000010825bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000726706938a7ecc850aa69cf266a204d77c37e7a49f8287b83612be63850489601df39d680065d6c553a1ab4d1a31abfbb10de0a454113f5df7aa88f265344e1c"], 0x30}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 324.666033ms ago: executing program 5 (id=1439): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) 217.352893ms ago: executing program 5 (id=1440): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x4, 0x4, 0x1}, 0x48) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='cgroup\x00', 0x0, &(0x7f0000000380)='source') socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004000000001"], 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1a, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000"], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) 185.718476ms ago: executing program 1 (id=1441): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") socket$key(0xf, 0x3, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x4400, &(0x7f00000005c0)=ANY=[], 0xfc, 0x2e2, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r3, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) sendfile(r3, r0, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x140}, {0xffffffffffffffff, 0x50f0}, {0xffffffffffffffff, 0x400}], 0x3, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x2]}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x80047210, 0x0) linkat(r4, &(0x7f00000000c0)='./bus\x00', r0, 0x0, 0x400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xac, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) 101.31735ms ago: executing program 0 (id=1442): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x14) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x4) unshare(0x62000000) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r4, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) 0s ago: executing program 5 (id=1443): socket$kcm(0x10, 0x400000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8, 0x80800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x1b7b, &(0x7f00000003c0)={0x0, 0xc724, 0xc000, 0x0, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4) r1 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.478067][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 196.485149][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 197.517909][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 197.525050][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 197.543651][ T6462] loop4: detected capacity change from 0 to 1024 [ 197.645779][ T6473] syz_tun: entered allmulticast mode [ 197.697689][ T6462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.966490][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.856'. [ 198.023416][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.856'. [ 198.170540][ T28] audit: type=1400 audit(1771975475.459:606): avc: denied { setopt } for pid=6524 comm="syz.5.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 198.247722][ T28] audit: type=1400 audit(1771975475.529:607): avc: denied { getopt } for pid=6524 comm="syz.5.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 198.272940][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.316812][ T6527] lo speed is unknown, defaulting to 1000 [ 198.327596][ T6527] xfrm0 speed is unknown, defaulting to 1000 [ 198.397872][ T3585] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 198.421235][ T28] audit: type=1400 audit(1771975475.709:608): avc: denied { map } for pid=6528 comm="syz.4.858" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 198.558069][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 198.565190][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 199.597939][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 199.605055][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 199.756700][ T6545] sctp: [Deprecated]: syz.4.865 (pid 6545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.756700][ T6545] Use struct sctp_sack_info instead [ 199.834179][ T28] audit: type=1400 audit(1771975477.119:609): avc: denied { setcurrent } for pid=6544 comm="syz.4.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 199.874818][ T28] audit: type=1401 audit(1771975477.119:610): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 199.922690][ T6547] loop5: detected capacity change from 0 to 1024 [ 199.939827][ T6547] EXT4-fs: Ignoring removed orlov option [ 199.945762][ T6547] EXT4-fs: Ignoring removed nobh option [ 200.124632][ T6547] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.145391][ T28] audit: type=1400 audit(1771975477.429:611): avc: denied { execute } for pid=6542 comm="syz.5.863" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=19038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 200.638030][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 200.645240][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 201.677913][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 201.685015][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 202.016873][ T28] audit: type=1400 audit(1771975479.299:612): avc: denied { name_bind } for pid=6570 comm="syz.0.871" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 202.082252][ T4467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.122705][ T28] audit: type=1400 audit(1771975479.299:613): avc: denied { name_connect } for pid=6570 comm="syz.0.871" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 202.342023][ T28] audit: type=1400 audit(1771975479.399:614): avc: denied { shutdown } for pid=6572 comm="syz.0.873" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 202.718193][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 202.725358][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 202.853278][ T28] audit: type=1400 audit(1771975479.399:615): avc: denied { read } for pid=6572 comm="syz.0.873" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 203.730819][ T6595] loop4: detected capacity change from 0 to 512 [ 203.741628][ T6595] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 203.761319][ T6595] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 203.771196][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 203.775788][ T6595] EXT4-fs (loop4): 1 truncate cleaned up [ 203.784454][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 203.788431][ T6595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.193891][ T28] audit: type=1400 audit(1771975481.359:616): avc: denied { rename } for pid=6594 comm="syz.4.877" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.695157][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.745580][ T28] audit: type=1400 audit(1771975481.359:617): avc: denied { rmdir } for pid=6594 comm="syz.4.877" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.798044][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 204.805132][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 204.991960][ T6619] loop1: detected capacity change from 0 to 256 [ 205.007910][ T28] audit: type=1400 audit(1771975482.289:618): avc: denied { create } for pid=6620 comm="syz.4.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 205.054056][ T6619] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 205.082790][ T6619] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2048) [ 205.109154][ T6619] FAT-fs (loop1): Filesystem has been set read-only [ 205.130335][ T6619] FAT-fs (loop1): error, invalid FAT chain (i_pos 196, last_block 8200) [ 205.837899][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 205.845027][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 205.874601][ T6624] tipc: Enabled bearer , priority 0 [ 205.885566][ T6624] syzkaller0: entered promiscuous mode [ 205.891383][ T6624] syzkaller0: entered allmulticast mode [ 205.900545][ T6624] tipc: Resetting bearer [ 205.907743][ T6623] tipc: Resetting bearer [ 205.915494][ T6623] tipc: Disabling bearer [ 205.981966][ T6622] FAT-fs (loop1): error, invalid FAT chain (i_pos 196, last_block 8200) [ 206.301844][ T6628] syzkaller0: entered promiscuous mode [ 206.307401][ T6628] syzkaller0: entered allmulticast mode [ 206.626633][ T6646] loop5: detected capacity change from 0 to 512 [ 206.654534][ T6647] lo speed is unknown, defaulting to 1000 [ 206.674310][ T6647] xfrm0 speed is unknown, defaulting to 1000 [ 206.792416][ T6646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.857618][ T6646] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.887998][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 206.895135][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 207.044189][ T28] audit: type=1326 audit(1771975484.319:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6644 comm="syz.5.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b6e0c629 code=0x7ffc0000 [ 207.129378][ T28] audit: type=1326 audit(1771975484.359:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6644 comm="syz.5.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b6e0c629 code=0x7ffc0000 [ 207.169973][ T28] audit: type=1326 audit(1771975484.449:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6644 comm="syz.5.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f53b6e0c629 code=0x7ffc0000 [ 207.233636][ T6664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.898'. [ 207.257273][ T28] audit: type=1326 audit(1771975484.539:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6644 comm="syz.5.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b6e0c629 code=0x7ffc0000 [ 207.296725][ T28] audit: type=1326 audit(1771975484.539:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6644 comm="syz.5.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b6e0c629 code=0x7ffc0000 [ 207.469424][ T6673] netlink: 52 bytes leftover after parsing attributes in process `syz.3.901'. [ 207.485168][ T4467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.927922][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 207.935018][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 208.651487][ T6683] delete_channel: no stack [ 208.656521][ T6683] delete_channel: no stack [ 208.665116][ T28] audit: type=1400 audit(1771975485.939:624): avc: denied { create } for pid=6679 comm="syz.1.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 208.826830][ T6697] loop1: detected capacity change from 0 to 512 [ 208.845758][ T6697] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 208.864623][ T6697] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.909: bg 0: block 288: padding at end of block bitmap is not set [ 208.883210][ T6697] loop1: lost filesystem error report for type 5 error -117 [ 208.883400][ T6697] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 208.891042][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 208.891066][ C1] EXT4-fs (loop1): initial error at time 1771975486: ext4_validate_block_bitmap:441 [ 208.891096][ C1] EXT4-fs (loop1): last error at time 1771975486: ext4_validate_block_bitmap:441 [ 208.925724][ T6697] loop1: lost filesystem error report for type 5 error -117 [ 208.926131][ T6697] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.909: attempt to clear invalid blocks 1024 len 1 [ 208.947829][ T6697] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 208.948384][ T6697] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.909: invalid indirect mapped block 1819239214 (level 0) [ 208.971812][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 208.971904][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 208.986675][ T6697] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 208.987106][ T6697] EXT4-fs (loop1): 1 truncate cleaned up [ 209.002879][ T6697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.397720][ T6709] netlink: 'syz.5.911': attribute type 1 has an invalid length. [ 209.586296][ T6709] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.706751][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.726239][ T6710] bond2: (slave ip6gretap0): making interface the new active one [ 209.750225][ T6710] bond2: (slave ip6gretap0): Enslaving as an active interface with an up link [ 209.762099][ T6711] macvlan2: entered promiscuous mode [ 209.767444][ T6711] macvlan2: entered allmulticast mode [ 209.773547][ T6711] bond2: entered promiscuous mode [ 209.778751][ T6711] ip6gretap0: entered promiscuous mode [ 209.784894][ T6711] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 209.792742][ T6711] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 209.810423][ T6711] bond2: left promiscuous mode [ 209.815486][ T6711] ip6gretap0: left promiscuous mode [ 209.912620][ T6716] bridge_slave_1: left allmulticast mode [ 209.918753][ T6716] bridge_slave_1: left promiscuous mode [ 209.926243][ T28] audit: type=1400 audit(1771975487.209:625): avc: denied { read write } for pid=6718 comm="syz.4.915" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 209.935877][ T6725] loop1: detected capacity change from 0 to 1024 [ 209.950203][ T6716] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.963510][ T28] audit: type=1400 audit(1771975487.209:626): avc: denied { open } for pid=6718 comm="syz.4.915" path="/dev/rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 209.989471][ T6716] bridge_slave_0: left allmulticast mode [ 209.995364][ T6716] bridge_slave_0: left promiscuous mode [ 210.007900][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 210.015027][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 210.030751][ T28] audit: type=1400 audit(1771975487.209:627): avc: denied { ioctl } for pid=6718 comm="syz.4.915" path="/dev/rtc0" dev="devtmpfs" ino=245 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 210.064111][ T6716] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.142028][ T6725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.684036][ T6739] lo speed is unknown, defaulting to 1000 [ 210.708483][ T6739] xfrm0 speed is unknown, defaulting to 1000 [ 210.926142][ T6741] loop0: detected capacity change from 0 to 1024 [ 211.003561][ T6741] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 211.021788][ T6748] netlink: 44 bytes leftover after parsing attributes in process `syz.4.921'. [ 211.022534][ T6741] System zones: [ 211.038147][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 211.039844][ T6741] 0-1 [ 211.041844][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 211.048963][ T6748] netlink: 43 bytes leftover after parsing attributes in process `syz.4.921'. [ 211.049064][ T6748] netlink: 'syz.4.921': attribute type 5 has an invalid length. [ 211.049077][ T6748] netlink: 43 bytes leftover after parsing attributes in process `syz.4.921'. [ 211.131535][ T6748] loop4: detected capacity change from 0 to 512 [ 211.158845][ T6748] EXT4-fs: Ignoring removed nobh option [ 211.169060][ T6741] , 3-8 [ 211.224049][ T6741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 211.245476][ T6748] EXT4-fs (loop4): orphan cleanup on readonly fs [ 211.255975][ T6741] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.292930][ T6748] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.921: EA inode hash validation failed [ 211.315686][ T6748] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 211.331632][ T6748] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.921: corrupted inode contents [ 211.353215][ T6748] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 211.354850][ T6748] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #15: comm syz.4.921: mark_inode_dirty error [ 211.364629][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 211.364719][ C1] EXT4-fs (loop4): initial error at time 1771975488: ext4_do_update_inode:5569: inode 15 [ 211.365268][ C1] EXT4-fs (loop4): last error at time 1771975488: ext4_do_update_inode:5569: inode 15 [ 211.371326][ T6725] lo speed is unknown, defaulting to 1000 [ 211.385939][ T6741] EXT4-fs error (device loop0): ext4_free_blocks:6724: comm syz.0.920: Freeing blocks not in datazone - block = 0, count = 16 [ 211.394612][ T6725] xfrm0 speed is unknown, defaulting to 1000 [ 211.431781][ T6748] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 211.433548][ T6748] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.921: corrupted inode contents [ 211.459281][ T6748] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 211.460275][ T6748] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.921: mark_inode_dirty error [ 211.493919][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 211.496840][ T6748] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 211.540440][ T6748] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3002: inode #15: comm syz.4.921: mark inode dirty (error -117) [ 211.575811][ T6748] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 211.577174][ T6748] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117) [ 211.599168][ T6748] EXT4-fs (loop4): 1 orphan inode deleted [ 211.616841][ T6748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 211.698904][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.801828][ T6761] syzkaller0: entered promiscuous mode [ 211.812999][ T6761] syzkaller0: entered allmulticast mode [ 211.860653][ T28] audit: type=1400 audit(1771975489.149:628): avc: denied { write } for pid=6753 comm="syz.0.922" path="socket:[20124]" dev="sockfs" ino=20124 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 212.077952][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 212.085083][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 212.202705][ T6767] loop0: detected capacity change from 0 to 2048 [ 212.214697][ T6767] EXT4-fs: Ignoring removed orlov option [ 212.225195][ T6767] EXT4-fs warning (device loop0): read_mmp_block:111: Error -117 while reading MMP block 64 [ 212.243374][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.669146][ T6789] loop4: detected capacity change from 0 to 128 [ 212.678547][ T6787] veth0: entered promiscuous mode [ 212.702976][ T6785] veth0: left promiscuous mode [ 212.897361][ T6793] lo speed is unknown, defaulting to 1000 [ 212.907759][ T6794] loop0: detected capacity change from 0 to 128 [ 212.920763][ T6793] xfrm0 speed is unknown, defaulting to 1000 [ 212.938876][ T6794] FAT-fs (loop0): bogus number of reserved sectors [ 212.973040][ T6794] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 212.998613][ T6795] lo speed is unknown, defaulting to 1000 [ 213.008591][ T6794] FAT-fs (loop0): Can't find a valid FAT filesystem [ 213.112898][ T6795] xfrm0 speed is unknown, defaulting to 1000 [ 213.119348][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 213.119451][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 213.422945][ T6803] loop5: detected capacity change from 0 to 512 [ 213.448318][ T6803] EXT4-fs: Ignoring removed nobh option [ 213.480318][ T6801] loop0: detected capacity change from 0 to 4096 [ 213.488489][ T6803] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 213.540880][ T6803] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 213.558724][ T6801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.595312][ T1979] bio_check_eod: 28 callbacks suppressed [ 213.595330][ T1979] kworker/u8:7: attempt to access beyond end of device [ 213.595330][ T1979] loop4: rw=1, sector=129, nr_sectors = 8 limit=128 [ 213.617762][ T6803] EXT4-fs (loop5): 1 truncate cleaned up [ 213.658513][ T6803] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.668053][ T1979] kworker/u8:7: attempt to access beyond end of device [ 213.668053][ T1979] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 213.722042][ T6803] netlink: 52 bytes leftover after parsing attributes in process `syz.5.938'. [ 213.728115][ T1979] kworker/u8:7: attempt to access beyond end of device [ 213.728115][ T1979] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 213.765055][ T1979] kworker/u8:7: attempt to access beyond end of device [ 213.765055][ T1979] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 213.787891][ T1979] kworker/u8:7: attempt to access beyond end of device [ 213.787891][ T1979] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 213.817859][ T1979] kworker/u8:7: attempt to access beyond end of device [ 213.817859][ T1979] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 213.862701][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.868889][ T1979] kworker/u8:7: attempt to access beyond end of device [ 213.868889][ T1979] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 213.915542][ T1979] kworker/u8:7: attempt to access beyond end of device [ 213.915542][ T1979] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 213.937995][ T1979] kworker/u8:7: attempt to access beyond end of device [ 213.937995][ T1979] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 213.967949][ T1979] kworker/u8:7: attempt to access beyond end of device [ 213.967949][ T1979] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 214.015432][ T6810] syzkaller0: entered promiscuous mode [ 214.027851][ T6810] syzkaller0: entered allmulticast mode [ 214.095294][ T4467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.157896][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 214.165131][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 214.651516][ T28] audit: type=1326 audit(1771975491.939:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.5.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b6e0c629 code=0x7ffc0000 [ 214.708561][ T28] audit: type=1326 audit(1771975491.939:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.5.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b6e0c629 code=0x7ffc0000 [ 214.784794][ T28] audit: type=1326 audit(1771975491.979:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.5.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f53b6e0c629 code=0x7ffc0000 [ 214.808833][ T28] audit: type=1326 audit(1771975491.979:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.5.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b6e0c629 code=0x7ffc0000 [ 214.908083][ T28] audit: type=1326 audit(1771975491.979:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.5.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b6e0c629 code=0x7ffc0000 [ 214.931763][ T6825] loop4: detected capacity change from 0 to 512 [ 214.998686][ T28] audit: type=1326 audit(1771975491.979:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.5.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f53b6dccece code=0x7ffc0000 [ 215.059047][ T6825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.087903][ T6825] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.208088][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 215.215167][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 215.631609][ T28] audit: type=1326 audit(1771975491.979:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.5.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b6e0c629 code=0x7ffc0000 [ 215.712471][ T28] audit: type=1326 audit(1771975491.979:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.5.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b6e0c629 code=0x7ffc0000 [ 215.773259][ T6835] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 215.787865][ T28] audit: type=1326 audit(1771975491.979:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.5.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53b6e0c629 code=0x7ffc0000 [ 215.867570][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.899099][ T28] audit: type=1326 audit(1771975491.979:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.5.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b6e0c629 code=0x7ffc0000 [ 215.962415][ T28] audit: type=1326 audit(1771975491.979:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.5.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b6e0c629 code=0x7ffc0000 [ 216.063644][ T6845] SELinux: Context system_u:object_r:admin_passwd_exec_t:s0 is not valid (left unmapped). [ 216.237957][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 216.245067][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 216.277147][ T28] audit: type=1326 audit(1771975491.979:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.5.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f53b6e0c629 code=0x7ffc0000 [ 216.458186][ T28] audit: type=1326 audit(1771975491.979:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b6e0c629 code=0x7ffc0000 [ 216.571306][ T28] audit: type=1326 audit(1771975491.979:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b6e0c629 code=0x7ffc0000 [ 216.623609][ T28] audit: type=1326 audit(1771975491.979:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53b6e0c629 code=0x7ffc0000 [ 216.734603][ T6849] sctp: [Deprecated]: syz.0.959 (pid 6849) Use of int in maxseg socket option. [ 216.734603][ T6849] Use struct sctp_assoc_value instead [ 216.764421][ T6848] lo speed is unknown, defaulting to 1000 [ 216.774773][ T6851] loop5: detected capacity change from 0 to 128 [ 216.781593][ T6848] xfrm0 speed is unknown, defaulting to 1000 [ 216.798328][ T6852] IPVS: set_ctl: invalid protocol: 60 10.1.1.4:20257 [ 216.847350][ T6851] FAT-fs (loop5): bogus number of reserved sectors [ 216.854124][ T6851] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 216.873749][ T6851] FAT-fs (loop5): Can't find a valid FAT filesystem [ 217.078878][ T6857] loop4: detected capacity change from 0 to 512 [ 217.128197][ T6857] EXT4-fs (loop4): orphan cleanup on readonly fs [ 217.158078][ T6857] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #11: block 1: comm syz.4.949: lblock 0 mapped to illegal pblock 1 (length 1) [ 217.201747][ T6857] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 217.201972][ T6857] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 217.211250][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 217.211281][ C0] EXT4-fs (loop4): initial error at time 1771975494: ext4_map_blocks:776: inode 11: block 1 [ 217.211318][ C0] EXT4-fs (loop4): last error at time 1771975494: ext4_map_blocks:776: inode 11: block 1 [ 217.251006][ T6857] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.949: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 217.266244][ T6857] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 217.268042][ T6857] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.4.949: ea_inode dec ref err=-117 [ 217.298010][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 217.305132][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 217.318025][ T6857] EXT4-fs (loop4): 1 orphan inode deleted [ 217.328422][ T6857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 217.348952][ T6858] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 217.476645][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.540958][ T6864] loop4: detected capacity change from 0 to 512 [ 217.567479][ T6864] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 217.605484][ T6864] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 217.742135][ T6866] loop4: detected capacity change from 0 to 2048 [ 217.890635][ T6866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.178455][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.317922][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 218.325169][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 218.729604][ T6883] loop5: detected capacity change from 0 to 1024 [ 218.829972][ T6883] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 218.853765][ T6883] System zones: 0-1, 3-36 [ 219.132174][ T6883] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.960: bad orphan inode 134217728 [ 219.147380][ T6883] loop5: lost filesystem error report for type 5 error -117 [ 219.162300][ T6883] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.358005][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 219.365105][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 219.601796][ T4467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.663548][ T6905] lo speed is unknown, defaulting to 1000 [ 219.683575][ T6905] xfrm0 speed is unknown, defaulting to 1000 [ 219.780205][ T6908] loop4: detected capacity change from 0 to 128 [ 219.812820][ T6908] FAT-fs (loop4): bogus number of reserved sectors [ 219.827862][ T6908] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 220.102999][ T6914] loop1: detected capacity change from 0 to 1024 [ 220.259281][ T6914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.311252][ T6912] loop0: detected capacity change from 0 to 512 [ 220.407928][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 220.415065][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 220.419220][ T6912] EXT4-fs: Ignoring removed nobh option [ 220.475458][ T6908] FAT-fs (loop4): Can't find a valid FAT filesystem [ 220.606649][ T6919] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.969: Allocating blocks 449-513 which overlap fs metadata [ 220.628828][ T6912] EXT4-fs (loop0): orphan cleanup on readonly fs [ 220.649032][ T6912] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.968: corrupted inode contents [ 220.665608][ T6912] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 220.668974][ T6912] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 220.679264][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 220.679517][ C1] EXT4-fs (loop0): initial error at time 1771975497: ext4_do_update_inode:5569: inode 15 [ 220.679977][ C1] EXT4-fs (loop0): last error at time 1771975497: ext4_do_update_inode:5569: inode 15 [ 220.681995][ T6914] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.969: Allocating blocks 449-513 which overlap fs metadata [ 220.731580][ T6913] EXT4-fs (loop1): pa ffff8881082b18c0: logic 48, phys. 177, len 21 [ 220.741362][ T6912] loop0: lost filesystem error report for type 5 error -117 [ 220.747196][ T6913] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 4 [ 220.768596][ T6912] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.968: corrupted inode contents [ 220.783284][ T6912] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 220.788000][ T6912] EXT4-fs error (device loop0): ext4_evict_inode:303: inode #15: comm syz.0.968: mark_inode_dirty error [ 220.826820][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.839661][ T6912] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 220.841045][ T6912] EXT4-fs (loop0): 1 orphan inode deleted [ 220.926731][ T6912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 221.136495][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.239433][ T6936] lo speed is unknown, defaulting to 1000 [ 221.245723][ T6936] xfrm0 speed is unknown, defaulting to 1000 [ 221.448044][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 221.455166][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 221.771222][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 221.771240][ T28] audit: type=1326 audit(1771975499.059:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6948 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08adc629 code=0x7ffc0000 [ 221.826387][ T28] audit: type=1326 audit(1771975499.059:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6948 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08adc629 code=0x7ffc0000 [ 221.877879][ T28] audit: type=1326 audit(1771975499.099:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6948 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbc08adc629 code=0x7ffc0000 [ 221.910471][ T28] audit: type=1326 audit(1771975499.099:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6948 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08adc629 code=0x7ffc0000 [ 221.953254][ T28] audit: type=1326 audit(1771975499.099:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6948 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08adc629 code=0x7ffc0000 [ 221.974655][ T6952] lo speed is unknown, defaulting to 1000 [ 221.978586][ T28] audit: type=1326 audit(1771975499.109:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6948 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc08adc629 code=0x7ffc0000 [ 221.987094][ T6952] xfrm0 speed is unknown, defaulting to 1000 [ 222.036634][ T28] audit: type=1326 audit(1771975499.109:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6948 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08adc629 code=0x7ffc0000 [ 222.068209][ T28] audit: type=1326 audit(1771975499.109:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6948 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08adc629 code=0x7ffc0000 [ 222.095651][ T28] audit: type=1326 audit(1771975499.109:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6948 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc08adc629 code=0x7ffc0000 [ 222.266139][ T28] audit: type=1326 audit(1771975499.109:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6948 comm="syz.0.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08adc629 code=0x7ffc0000 [ 222.477942][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 222.485078][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 222.919146][ T6966] lo speed is unknown, defaulting to 1000 [ 222.942244][ T6966] xfrm0 speed is unknown, defaulting to 1000 [ 222.985802][ T6982] loop1: detected capacity change from 0 to 128 [ 222.992419][ T6985] netlink: 14 bytes leftover after parsing attributes in process `syz.0.989'. [ 223.003483][ T6982] FAT-fs (loop1): bogus number of reserved sectors [ 223.032980][ T6982] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 223.062580][ T6982] FAT-fs (loop1): Can't find a valid FAT filesystem [ 223.062958][ T6985] bond0 (unregistering): (slave 30): Releasing backup interface [ 223.109753][ T6980] siw: device registration error -23 [ 223.119973][ T6985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.173148][ T6985] bond0 (unregistering): Released all slaves [ 223.241570][ T6990] loop4: detected capacity change from 0 to 2048 [ 223.252614][ T6990] EXT4-fs: Ignoring removed orlov option [ 223.268901][ T6990] EXT4-fs warning (device loop4): read_mmp_block:111: Error -117 while reading MMP block 64 [ 223.500512][ T6998] loop4: detected capacity change from 0 to 4096 [ 223.523353][ T6998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.528417][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 223.542988][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 223.566821][ T7002] lo speed is unknown, defaulting to 1000 [ 223.582170][ T7002] xfrm0 speed is unknown, defaulting to 1000 [ 223.738923][ T7009] tipc: Started in network mode [ 223.754087][ T7009] tipc: Node identity 169bdbdc82d8, cluster identity 4711 [ 223.778019][ T7009] tipc: Enabled bearer , priority 0 [ 223.791196][ T7010] syzkaller0: entered promiscuous mode [ 223.811626][ T7010] syzkaller0: entered allmulticast mode [ 223.890175][ T7009] tipc: Resetting bearer [ 223.900107][ T7009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.908276][ T7009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.959213][ T7008] tipc: Resetting bearer [ 223.986611][ T7008] tipc: Disabling bearer [ 224.567925][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 224.575064][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 224.586775][ T7025] loop1: detected capacity change from 0 to 512 [ 224.597123][ T7025] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 224.629053][ T7025] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 224.772502][ T7028] loop1: detected capacity change from 0 to 2048 [ 224.810308][ T7028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.883808][ T7037] loop5: detected capacity change from 0 to 512 [ 224.906833][ T7037] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 224.926480][ T7037] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1007: bg 0: block 288: padding at end of block bitmap is not set [ 224.943535][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.955648][ T7037] loop5: lost filesystem error report for type 5 error -117 [ 224.957847][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 224.961689][ T7037] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 224.965276][ C1] EXT4-fs (loop5): initial error at time 1771975502: ext4_validate_block_bitmap:441 [ 224.989929][ C1] EXT4-fs (loop5): last error at time 1771975502: ext4_validate_block_bitmap:441 [ 225.000947][ T7037] loop5: lost filesystem error report for type 5 error -117 [ 225.001784][ T7037] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1007: attempt to clear invalid blocks 1024 len 1 [ 225.036932][ T7037] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 225.037223][ T7037] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1007: invalid indirect mapped block 1819239214 (level 0) [ 225.061678][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.067352][ T7037] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 225.071383][ T7037] EXT4-fs (loop5): 1 truncate cleaned up [ 225.090604][ T7037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.158387][ T7045] netlink: 'syz.1.1010': attribute type 1 has an invalid length. [ 225.213278][ T7045] 8021q: adding VLAN 0 to HW filter on device bond5 [ 225.341275][ T7050] bond5: (slave ip6gretap1): making interface the new active one [ 225.350799][ T7050] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 225.496648][ T7033] lo speed is unknown, defaulting to 1000 [ 225.514659][ T7045] macvlan3: entered promiscuous mode [ 225.533158][ T7045] macvlan3: entered allmulticast mode [ 225.545567][ T7045] bond5: entered promiscuous mode [ 225.551312][ T7045] ip6gretap1: entered promiscuous mode [ 225.558567][ T7045] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 225.567122][ T7045] bond5: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 225.585029][ T7045] bond5: left promiscuous mode [ 225.590181][ T7045] ip6gretap1: left promiscuous mode [ 225.615475][ T7033] xfrm0 speed is unknown, defaulting to 1000 [ 225.835067][ T4467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.984033][ T7061] lo speed is unknown, defaulting to 1000 [ 226.009723][ T7061] xfrm0 speed is unknown, defaulting to 1000 [ 226.163307][ T7070] loop0: detected capacity change from 0 to 4096 [ 226.224897][ T7070] loop0: detected capacity change from 0 to 512 [ 226.575168][ T7079] lo speed is unknown, defaulting to 1000 [ 226.582241][ T7079] xfrm0 speed is unknown, defaulting to 1000 [ 226.649650][ C1] net_ratelimit: 2 callbacks suppressed [ 226.649748][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 226.665988][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 226.804491][ T7079] loop4: detected capacity change from 0 to 512 [ 226.812881][ T7085] tmpfs: Bad value for 'mpol' [ 226.819153][ T7079] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 4294443010)! [ 226.838219][ T7079] EXT4-fs (loop4): group descriptors corrupted! [ 226.990884][ T7093] netlink: 'syz.3.1024': attribute type 1 has an invalid length. [ 227.026922][ T7093] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.075329][ T7096] bond3: (slave ip6gretap1): making interface the new active one [ 227.100774][ T7096] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 227.138597][ T7093] macvlan2: entered promiscuous mode [ 227.154092][ T7093] macvlan2: entered allmulticast mode [ 227.177052][ T7093] bond3: entered promiscuous mode [ 227.197910][ T7093] ip6gretap1: entered promiscuous mode [ 227.216650][ T7093] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 227.231821][ T7093] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 227.265813][ T7093] bond3: left promiscuous mode [ 227.271988][ T7093] ip6gretap1: left promiscuous mode [ 227.296467][ T28] kauditd_printk_skb: 119 callbacks suppressed [ 227.296514][ T28] audit: type=1326 audit(1771975504.579:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.0.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08adc629 code=0x7ffc0000 [ 227.335183][ T7091] loop4: detected capacity change from 0 to 1024 [ 227.375123][ T28] audit: type=1326 audit(1771975504.619:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.0.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08adc629 code=0x7ffc0000 [ 227.447862][ T28] audit: type=1326 audit(1771975504.639:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.0.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fbc08adc629 code=0x7ffc0000 [ 227.472660][ T7091] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 227.479295][ T28] audit: type=1326 audit(1771975504.639:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.0.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbc08adc392 code=0x7ffc0000 [ 227.509232][ T7091] System zones: 0-1, 3-8 [ 227.519130][ T28] audit: type=1326 audit(1771975504.639:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.0.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbc08adc392 code=0x7ffc0000 [ 227.542923][ T28] audit: type=1326 audit(1771975504.639:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.0.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08adc629 code=0x7ffc0000 [ 227.545920][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1026'. [ 227.567166][ T28] audit: type=1326 audit(1771975504.639:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.0.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08adc629 code=0x7ffc0000 [ 227.631145][ T28] audit: type=1326 audit(1771975504.639:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.0.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08adc629 code=0x7ffc0000 [ 227.663366][ T7091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 227.680847][ T28] audit: type=1326 audit(1771975504.639:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.0.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08adc629 code=0x7ffc0000 [ 227.704531][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 227.704637][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 227.730634][ T7109] bond0: option lacp_active: invalid value (5) [ 227.738764][ T7091] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.759605][ T7109] bond0 (unregistering): Released all slaves [ 227.839776][ T7091] EXT4-fs error (device loop4): ext4_free_blocks:6724: comm syz.4.1023: Freeing blocks not in datazone - block = 0, count = 16 [ 227.863883][ T9] kernel read not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 227.912823][ T28] audit: type=1326 audit(1771975504.639:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7099 comm="syz.0.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc08adc629 code=0x7ffc0000 [ 227.996585][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 228.148737][ T7126] loop5: detected capacity change from 0 to 8192 [ 228.425446][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'. [ 228.450708][ T7132] loop4: detected capacity change from 0 to 1024 [ 228.525920][ T7132] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 228.545619][ T7132] System zones: 0-1, 3-8 [ 228.559028][ T7132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 228.573376][ T7132] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.717911][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 228.725017][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 228.755156][ T7147] loop0: detected capacity change from 0 to 1024 [ 228.783432][ T7147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.963550][ T7154] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.1051: Allocating blocks 449-513 which overlap fs metadata [ 229.021514][ T7159] loop1: detected capacity change from 0 to 128 [ 229.191014][ T7147] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.1051: Allocating blocks 449-513 which overlap fs metadata [ 229.236330][ T7146] EXT4-fs (loop0): pa ffff888108276ee0: logic 48, phys. 177, len 21 [ 229.244486][ T7146] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 4 [ 229.294437][ T7153] lo speed is unknown, defaulting to 1000 [ 229.329985][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.344191][ T7153] xfrm0 speed is unknown, defaulting to 1000 [ 229.758021][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 229.765108][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 229.885504][ T12] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 112: padding at end of block bitmap is not set [ 229.929036][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 117 [ 230.007398][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 230.007398][ T12] [ 230.063306][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 230.111227][ T329] bio_check_eod: 9 callbacks suppressed [ 230.111243][ T329] kworker/u8:6: attempt to access beyond end of device [ 230.111243][ T329] loop1: rw=1, sector=129, nr_sectors = 8 limit=128 [ 230.132475][ T329] kworker/u8:6: attempt to access beyond end of device [ 230.132475][ T329] loop1: rw=1, sector=145, nr_sectors = 8 limit=128 [ 230.148098][ T329] kworker/u8:6: attempt to access beyond end of device [ 230.148098][ T329] loop1: rw=1, sector=161, nr_sectors = 8 limit=128 [ 230.163413][ T329] kworker/u8:6: attempt to access beyond end of device [ 230.163413][ T329] loop1: rw=1, sector=177, nr_sectors = 8 limit=128 [ 230.176967][ T329] kworker/u8:6: attempt to access beyond end of device [ 230.176967][ T329] loop1: rw=1, sector=193, nr_sectors = 8 limit=128 [ 230.190672][ T329] kworker/u8:6: attempt to access beyond end of device [ 230.190672][ T329] loop1: rw=1, sector=209, nr_sectors = 8 limit=128 [ 230.204411][ T329] kworker/u8:6: attempt to access beyond end of device [ 230.204411][ T329] loop1: rw=1, sector=225, nr_sectors = 8 limit=128 [ 230.218160][ T329] kworker/u8:6: attempt to access beyond end of device [ 230.218160][ T329] loop1: rw=1, sector=241, nr_sectors = 8 limit=128 [ 230.231988][ T329] kworker/u8:6: attempt to access beyond end of device [ 230.231988][ T329] loop1: rw=1, sector=257, nr_sectors = 8 limit=128 [ 230.256051][ T329] kworker/u8:6: attempt to access beyond end of device [ 230.256051][ T329] loop1: rw=1, sector=273, nr_sectors = 8 limit=128 [ 230.377872][ T7166] loop5: detected capacity change from 0 to 1024 [ 230.480126][ T7166] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 230.596646][ T7166] System zones: 0-1, 3-8 [ 230.718335][ T7166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 230.777556][ T7166] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.808985][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 230.817841][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 230.905978][ T7166] EXT4-fs error (device loop5): ext4_free_blocks:6724: comm syz.5.1045: Freeing blocks not in datazone - block = 0, count = 16 [ 231.034604][ T4467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 231.178528][ T7192] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1054'. [ 231.219017][ T7192] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1054'. [ 231.228505][ T7192] netlink: 'syz.4.1054': attribute type 6 has an invalid length. [ 231.252387][ T7195] lo speed is unknown, defaulting to 1000 [ 231.259119][ T7195] xfrm0 speed is unknown, defaulting to 1000 [ 231.574307][ T7205] lo speed is unknown, defaulting to 1000 [ 231.588585][ T7205] xfrm0 speed is unknown, defaulting to 1000 [ 231.838070][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 231.845181][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 232.022984][ T7206] lo speed is unknown, defaulting to 1000 [ 232.057737][ T7206] xfrm0 speed is unknown, defaulting to 1000 [ 232.397847][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 232.397867][ T28] audit: type=1400 audit(1771975509.679:961): avc: denied { sys_module } for pid=7218 comm="syz.3.1062" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 232.449837][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1062'. [ 232.877916][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 232.885226][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 233.062719][ T7229] loop0: detected capacity change from 0 to 1024 [ 233.200412][ T7229] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 233.231437][ T7229] System zones: 0-1, 3-36 [ 233.272757][ T7229] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1074: bad orphan inode 134217728 [ 233.285111][ T7229] loop0: lost filesystem error report for type 5 error -117 [ 233.310594][ T7229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.519515][ T7238] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1067'. [ 233.590907][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.651842][ T7241] loop5: detected capacity change from 0 to 128 [ 233.846695][ T7243] loop0: detected capacity change from 0 to 512 [ 233.931751][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 233.941603][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 234.130986][ T7243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.196408][ T7243] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.359288][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.457857][ T28] audit: type=1400 audit(1771975511.729:962): avc: denied { bind } for pid=7252 comm="syz.0.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 234.481513][ T28] audit: type=1400 audit(1771975511.729:963): avc: denied { write } for pid=7252 comm="syz.0.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 234.588069][ T7256] loop1: detected capacity change from 0 to 512 [ 234.621283][ T7256] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 234.958266][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 234.967900][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 235.385094][ T28] audit: type=1400 audit(1771975512.669:964): avc: denied { append } for pid=7265 comm="syz.5.1078" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 235.410837][ T7266] ÿÿÿÿÿÿ: renamed from vlan1 [ 235.458400][ T28] audit: type=1400 audit(1771975512.749:965): avc: denied { connect } for pid=7268 comm="syz.1.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 235.498015][ T28] audit: type=1400 audit(1771975512.779:966): avc: denied { setopt } for pid=7268 comm="syz.1.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 235.562171][ T7272] loop0: detected capacity change from 0 to 1024 [ 235.583300][ T7274] tipc: Enabled bearer , priority 0 [ 235.592055][ T7274] syzkaller0: entered promiscuous mode [ 235.606445][ T7274] syzkaller0: entered allmulticast mode [ 235.624163][ T7272] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 235.654933][ T7274] tipc: Resetting bearer [ 235.668493][ T7272] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.688951][ T7270] tipc: Resetting bearer [ 235.698439][ T7270] tipc: Disabling bearer [ 235.715316][ T7272] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: block 3: comm syz.0.1080: lblock 3 mapped to illegal pblock 3 (length 1) [ 235.758786][ T7272] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 235.781664][ T7272] EXT4-fs (loop0): This should not happen!! Data will be lost [ 235.781664][ T7272] [ 235.792013][ T7287] EXT4-fs error (device loop0): ext4_ext_remove_space:2954: inode #15: comm syz.0.1080: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 235.817968][ T7287] EXT4-fs error (device loop0) in ext4_setattr:5983: Corrupt filesystem [ 235.844303][ T7272] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: comm syz.0.1080: lblock 0 mapped to illegal pblock 0 (length 1) [ 235.913210][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 236.008065][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 236.015242][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 236.659968][ T7301] loop5: detected capacity change from 0 to 2048 [ 236.699556][ T7300] loop0: detected capacity change from 0 to 8192 [ 236.748303][ T7300] loop0: p1 < > p2 p4 < p5 > [ 236.753172][ T7300] loop0: partition table partially beyond EOD, truncated [ 236.760789][ T7300] loop0: p1 start 134217728 is beyond EOD, truncated [ 236.768017][ T7300] loop0: p2 size 591360 extends beyond EOD, truncated [ 236.849149][ T7300] loop0: p5 size 591360 extends beyond EOD, truncated [ 236.859463][ T3000] loop0: p1 < > p2 p4 < p5 > [ 236.864241][ T3000] loop0: partition table partially beyond EOD, truncated [ 236.877961][ T3000] loop0: p1 start 134217728 is beyond EOD, truncated [ 236.905575][ T3000] loop0: p2 size 591360 extends beyond EOD, truncated [ 236.917426][ T7301] Alternate GPT is invalid, using primary GPT. [ 236.925745][ T7289] loop1: detected capacity change from 0 to 128 [ 236.934611][ T3000] loop0: p5 size 591360 extends beyond EOD, truncated [ 236.940462][ T7301] loop5: p2 p3 p7 [ 237.037926][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 237.045054][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 237.472624][ T7310] syz_tun: entered allmulticast mode [ 237.480163][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1090'. [ 237.749813][ T7310] syz_tun (unregistering): left allmulticast mode [ 237.843890][ T7318] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1092'. [ 238.078029][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 238.084776][ T7322] loop0: detected capacity change from 0 to 4096 [ 238.085307][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 238.128253][ T7322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.267088][ T7316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.296057][ T7316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.735290][ T7330] tipc: Enabling of bearer rejected, failed to enable media [ 238.747487][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.117945][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 239.125180][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 239.253519][ T7352] loop0: detected capacity change from 0 to 1024 [ 239.261178][ T7352] EXT4-fs: inline encryption not supported [ 239.314213][ T7352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.158048][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 240.165159][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 241.197910][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 241.205017][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 242.248021][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 242.255143][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 242.599051][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.863894][ T7376] loop1: detected capacity change from 0 to 128 [ 243.277895][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 243.278007][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 243.533595][ T7393] loop0: detected capacity change from 0 to 1024 [ 243.621234][ T7393] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 243.637206][ T7393] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.655543][ T7393] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1118: bg 0: block 112: padding at end of block bitmap is not set [ 243.674440][ T7393] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: block 3: comm syz.0.1118: lblock 3 mapped to illegal pblock 3 (length 1) [ 243.695892][ T7393] EXT4-fs error (device loop0): ext4_ext_remove_space:2954: inode #15: comm syz.0.1118: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 243.718520][ T28] audit: type=1400 audit(1771975521.009:967): avc: denied { map } for pid=7391 comm="syz.0.1118" path="/237/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 243.743737][ T7391] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: comm syz.0.1118: lblock 0 mapped to illegal pblock 0 (length 1) [ 243.764815][ T7391] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.1118: lblock 0 mapped to illegal pblock 0 (length 1) [ 243.779040][ T7391] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.1118: lblock 0 mapped to illegal pblock 0 (length 1) [ 243.868518][ T7400] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.1118: lblock 0 mapped to illegal pblock 0 (length 1) [ 244.043988][ T7403] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.1117'. [ 244.054404][ T7403] netlink: zone id is out of range [ 244.060149][ T7403] netlink: zone id is out of range [ 244.068644][ T7403] netlink: zone id is out of range [ 244.234625][ T7403] netlink: set zone limit has 8 unknown bytes [ 244.327997][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 244.335095][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 244.493839][ T7392] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.1118: lblock 0 mapped to illegal pblock 0 (length 1) [ 244.526661][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 244.559166][ T7408] netlink: 'syz.0.1120': attribute type 2 has an invalid length. [ 244.567170][ T7408] netlink: 'syz.0.1120': attribute type 4 has an invalid length. [ 244.575382][ T7408] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1120'. [ 244.741485][ T28] audit: type=1400 audit(1771975522.029:968): avc: denied { write } for pid=7413 comm="syz.1.1122" path="socket:[25083]" dev="sockfs" ino=25083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 244.780567][ T28] audit: type=1326 audit(1771975522.029:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7413 comm="syz.1.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83995dc629 code=0x7ffc0000 [ 244.808561][ T28] audit: type=1326 audit(1771975522.029:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7413 comm="syz.1.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83995dc629 code=0x7ffc0000 [ 244.832554][ T28] audit: type=1326 audit(1771975522.029:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7413 comm="syz.1.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f83995dc629 code=0x7ffc0000 [ 244.861924][ T28] audit: type=1326 audit(1771975522.099:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7413 comm="syz.1.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83995dc629 code=0x7ffc0000 [ 244.885792][ T28] audit: type=1326 audit(1771975522.099:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7413 comm="syz.1.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83995dc629 code=0x7ffc0000 [ 245.032359][ T28] audit: type=1400 audit(1771975522.319:974): avc: denied { connect } for pid=7421 comm="syz.0.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 245.090596][ T7423] loop0: detected capacity change from 0 to 512 [ 245.643340][ T7430] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1126'. [ 245.766983][ T7423] EXT4-fs (loop0): 1 orphan inode deleted [ 245.781371][ T7423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.801738][ T28] audit: type=1400 audit(1771975523.089:975): avc: denied { lock } for pid=7421 comm="syz.0.1124" path="socket:[25919]" dev="sockfs" ino=25919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 246.027342][ T28] audit: type=1400 audit(1771975523.309:976): avc: denied { write } for pid=7421 comm="syz.0.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 246.366361][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.515654][ T7439] loop0: detected capacity change from 0 to 128 [ 247.211375][ T7445] loop1: detected capacity change from 0 to 1764 [ 247.241003][ T7443] tipc: Enabling of bearer rejected, failed to enable media [ 247.437915][ C1] net_ratelimit: 4 callbacks suppressed [ 247.437947][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 247.451749][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 247.541314][ T7458] loop5: detected capacity change from 0 to 512 [ 247.553154][ T7458] EXT4-fs: Ignoring removed nobh option [ 248.098639][ T7467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1136'. [ 248.333631][ T7468] bridge3: port 1(ip6gretap2) entered blocking state [ 248.348311][ T7468] bridge3: port 1(ip6gretap2) entered disabled state [ 248.355685][ T7468] ip6gretap2: entered allmulticast mode [ 248.362118][ T7468] ip6gretap2: entered promiscuous mode [ 248.379657][ T7467] bridge3: port 2(veth5) entered blocking state [ 248.386286][ T7467] bridge3: port 2(veth5) entered disabled state [ 248.392977][ T7467] veth5: entered allmulticast mode [ 248.399218][ T7467] veth5: entered promiscuous mode [ 248.404782][ T7467] bridge3: port 2(veth5) entered blocking state [ 248.411111][ T7467] bridge3: port 2(veth5) entered forwarding state [ 248.419508][ T5773] bridge3: port 2(veth5) entered disabled state [ 248.477991][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 248.485172][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 248.507568][ T7458] EXT4-fs (loop5): orphan cleanup on readonly fs [ 248.540033][ T7458] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.1133: corrupted inode contents [ 248.562979][ T7458] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 248.564781][ T7458] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 248.574507][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 248.574749][ C0] EXT4-fs (loop5): initial error at time 1771975525: ext4_do_update_inode:5569: inode 15 [ 248.574920][ C0] EXT4-fs (loop5): last error at time 1771975525: ext4_do_update_inode:5569: inode 15 [ 248.665128][ T7458] loop5: lost filesystem error report for type 5 error -117 [ 248.666550][ T7458] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.1133: corrupted inode contents [ 248.687548][ T7458] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 248.688269][ T7458] EXT4-fs error (device loop5): ext4_evict_inode:303: inode #15: comm syz.5.1133: mark_inode_dirty error [ 248.710455][ T7458] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 248.712673][ T7458] EXT4-fs (loop5): 1 orphan inode deleted [ 248.755562][ T7458] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 248.785919][ T7472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.805311][ T7472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.339087][ T4467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.527887][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 249.535188][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 249.853084][ T7493] lo speed is unknown, defaulting to 1000 [ 249.859457][ T7493] xfrm0 speed is unknown, defaulting to 1000 [ 250.076582][ T7488] loop0: detected capacity change from 0 to 512 [ 250.090925][ T7488] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 4294443010)! [ 250.129890][ T7488] EXT4-fs (loop0): group descriptors corrupted! [ 250.280292][ T7526] bridge_slave_0: left allmulticast mode [ 250.293118][ T7526] bridge_slave_0: left promiscuous mode [ 250.300867][ T7528] loop4: detected capacity change from 0 to 1764 [ 250.309110][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.330644][ T7526] bridge_slave_1: left allmulticast mode [ 250.336485][ T7526] bridge_slave_1: left promiscuous mode [ 250.445834][ T7526] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.499000][ T7526] bond0: (slave bond_slave_0): Releasing backup interface [ 250.518660][ T7526] team0: Port device team_slave_0 removed [ 250.525723][ T7526] team0: Port device team_slave_1 removed [ 250.558056][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 250.565163][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 250.912124][ T7540] loop1: detected capacity change from 0 to 1024 [ 251.009006][ T7526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.028210][ T7526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.049798][ T7526] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 251.077378][ T7532] team0: Mode changed to "loadbalance" [ 251.155071][ T7540] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 251.185675][ T7545] loop0: detected capacity change from 0 to 512 [ 251.194204][ T7540] System zones: 0-1, 3-36 [ 251.206986][ T7547] loop5: detected capacity change from 0 to 128 [ 251.224111][ T7545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.245694][ T7540] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1150: bad orphan inode 134217728 [ 251.263547][ T7540] loop1: lost filesystem error report for type 5 error -117 [ 251.277532][ T7545] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.360361][ T7540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.579381][ T12] bio_check_eod: 6 callbacks suppressed [ 251.579428][ T12] kworker/u8:0: attempt to access beyond end of device [ 251.579428][ T12] loop5: rw=1, sector=137, nr_sectors = 8 limit=128 [ 251.607920][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 251.613281][ T12] kworker/u8:0: attempt to access beyond end of device [ 251.613281][ T12] loop5: rw=1, sector=153, nr_sectors = 8 limit=128 [ 251.618741][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.632652][ T12] kworker/u8:0: attempt to access beyond end of device [ 251.632652][ T12] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 251.653450][ T12] kworker/u8:0: attempt to access beyond end of device [ 251.653450][ T12] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 251.680359][ T12] kworker/u8:0: attempt to access beyond end of device [ 251.680359][ T12] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 251.695099][ T12] kworker/u8:0: attempt to access beyond end of device [ 251.695099][ T12] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 251.710665][ T12] kworker/u8:0: attempt to access beyond end of device [ 251.710665][ T12] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 251.739439][ T12] kworker/u8:0: attempt to access beyond end of device [ 251.739439][ T12] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 251.768372][ T12] kworker/u8:0: attempt to access beyond end of device [ 251.768372][ T12] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 251.799545][ T12] kworker/u8:0: attempt to access beyond end of device [ 251.799545][ T12] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 252.176443][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.460029][ T7566] loop5: detected capacity change from 0 to 1024 [ 252.566234][ T7566] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 252.579939][ T7566] System zones: 0-1, 3-8 [ 252.598499][ T7566] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 252.615433][ T7566] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.637988][ C1] net_ratelimit: 1 callbacks suppressed [ 252.638023][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 252.650779][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 252.885774][ T5773] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:9: bg 0: block 112: padding at end of block bitmap is not set [ 252.916302][ T5773] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 252.934805][ T5773] EXT4-fs (loop5): This should not happen!! Data will be lost [ 252.934805][ T5773] [ 252.945069][ T5773] EXT4-fs (loop5): Total free blocks count 0 [ 252.951338][ T5773] EXT4-fs (loop5): Free/Dirty block details [ 252.957536][ T5773] EXT4-fs (loop5): free_blocks=0 [ 252.964442][ T5773] EXT4-fs (loop5): dirty_blocks=16 [ 252.970462][ T5773] EXT4-fs (loop5): Block reservation details [ 252.976656][ T5773] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 252.983875][ T4467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 253.007891][ T7580] loop1: detected capacity change from 0 to 1024 [ 253.015256][ T7580] EXT4-fs: Ignoring removed orlov option [ 253.021937][ T7580] EXT4-fs: Ignoring removed nobh option [ 253.044883][ T7580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.106507][ T7583] lo speed is unknown, defaulting to 1000 [ 253.124120][ T7583] xfrm0 speed is unknown, defaulting to 1000 [ 253.167951][ T7588] loop0: detected capacity change from 0 to 128 [ 253.209244][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 253.209262][ T28] audit: type=1400 audit(1771975530.499:981): avc: denied { connect } for pid=7587 comm="syz.0.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 253.278512][ T28] audit: type=1400 audit(1771975530.539:982): avc: denied { read } for pid=7587 comm="syz.0.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 253.320131][ T28] audit: type=1400 audit(1771975530.539:983): avc: denied { ioctl } for pid=7575 comm="syz.1.1161" path="/210/file1/cpu.stat" dev="loop1" ino=18 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 253.378333][ T28] audit: type=1400 audit(1771975530.599:984): avc: denied { bind } for pid=7587 comm="syz.0.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 253.419439][ T28] audit: type=1400 audit(1771975530.699:985): avc: denied { write } for pid=7587 comm="syz.0.1163" path="socket:[25300]" dev="sockfs" ino=25300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 253.660490][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.678414][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 253.686532][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 254.173689][ T7595] loop0: detected capacity change from 0 to 2048 [ 254.223461][ T7595] Alternate GPT is invalid, using primary GPT. [ 254.231536][ T7595] loop0: p2 p3 p7 [ 254.718053][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 254.725241][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 254.798700][ T28] audit: type=1326 audit(1771975532.079:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7603 comm="syz.1.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83995dc629 code=0x7ffc0000 [ 254.820769][ T7609] loop0: detected capacity change from 0 to 128 [ 254.847821][ T28] audit: type=1326 audit(1771975532.079:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7603 comm="syz.1.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83995dc629 code=0x7ffc0000 [ 254.908506][ T28] audit: type=1326 audit(1771975532.089:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7603 comm="syz.1.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f83995dc629 code=0x7ffc0000 [ 254.959624][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1167'. [ 254.977999][ T28] audit: type=1326 audit(1771975532.089:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7603 comm="syz.1.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f83995dc392 code=0x7ffc0000 [ 255.005467][ T7613] /dev/loop5: Can't open blockdev [ 255.085329][ T7614] bond6: option lacp_active: invalid value (5) [ 255.212744][ T3307] udevd[3307]: incorrect ext4 checksum on /dev/loop5 [ 255.287140][ T3304] udevd[3304]: incorrect ext4 checksum on /dev/loop5 [ 255.382530][ T7614] bond6 (unregistering): Released all slaves [ 255.426309][ T7622] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 255.501711][ T7623] team0: Unable to change to the same mode the team is in [ 255.706426][ T7629] set_capacity_and_notify: 1 callbacks suppressed [ 255.706444][ T7629] loop5: detected capacity change from 0 to 1024 [ 255.757190][ T7629] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.769495][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 255.769588][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 255.842891][ T7629] audit: audit_backlog=65 > audit_backlog_limit=64 [ 256.798111][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 257.251284][ T7645] loop1: detected capacity change from 0 to 4096 [ 257.262210][ T4467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.286504][ T7645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.615686][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.837940][ C1] net_ratelimit: 1 callbacks suppressed [ 257.837955][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 257.850620][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 258.484923][ T7675] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1193'. [ 258.495012][ T7675] netlink: zone id is out of range [ 258.500666][ T7675] netlink: zone id is out of range [ 258.510246][ T7675] netlink: zone id is out of range [ 258.674871][ T7675] netlink: set zone limit has 8 unknown bytes [ 258.882202][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 258.892950][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 259.039639][ T7674] loop1: detected capacity change from 0 to 1024 [ 259.121404][ T7680] netlink: 'syz.5.1186': attribute type 1 has an invalid length. [ 259.148800][ T7680] netlink: 'syz.5.1186': attribute type 2 has an invalid length. [ 259.178989][ T7680] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1186'. [ 259.345282][ T7674] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 259.355326][ T7674] System zones: 0-1, 3-36 [ 259.376060][ T7674] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1182: bad orphan inode 134217728 [ 259.417163][ T7674] loop1: lost filesystem error report for type 5 error -117 [ 259.418037][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 259.433249][ C1] EXT4-fs (loop1): initial error at time 1771975536: ext4_orphan_get:1417 [ 259.442388][ C1] EXT4-fs (loop1): last error at time 1771975536: ext4_orphan_get:1417 [ 259.467642][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 259.475652][ T7674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.867196][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.917871][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 259.925042][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 260.118383][ T7703] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1194'. [ 260.148184][ T7705] loop4: detected capacity change from 0 to 512 [ 260.219938][ T7705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.570100][ T7705] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.832421][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.153515][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 261.153531][ T28] audit: type=1326 audit(1771975538.439:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.3.1201" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ded68c629 code=0x0 [ 261.527822][ T6456] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 261.534032][ T3585] Bluetooth: hci0: command 0x1003 tx timeout [ 261.815947][ T28] audit: type=1400 audit(1771975539.099:1058): avc: denied { write } for pid=7742 comm="syz.1.1205" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 261.816596][ T7743] random: crng reseeded on system resumption [ 262.451566][ T7743] loop1: detected capacity change from 0 to 128 [ 262.654768][ T7754] netlink: 'syz.1.1208': attribute type 16 has an invalid length. [ 262.667821][ T7754] netlink: 'syz.1.1208': attribute type 17 has an invalid length. [ 262.853106][ T35] IPVS: starting estimator thread 0... [ 262.963273][ T7759] IPVS: using max 1824 ests per chain, 91200 per kthread [ 263.022922][ T7761] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1211'. [ 263.038821][ C1] net_ratelimit: 4 callbacks suppressed [ 263.038881][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 263.056525][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 264.077899][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 264.085043][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 265.125427][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 265.137905][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 266.157936][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 266.165040][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 266.347800][ T7786] random: crng reseeded on system resumption [ 266.375270][ T7790] netlink: 'syz.5.1221': attribute type 16 has an invalid length. [ 266.420124][ T7790] netlink: 'syz.5.1221': attribute type 17 has an invalid length. [ 266.448526][ T7796] loop0: detected capacity change from 0 to 128 [ 266.542450][ T7802] loop1: detected capacity change from 0 to 1024 [ 266.558383][ T7802] EXT4-fs: Ignoring removed nobh option [ 266.567028][ T7802] EXT4-fs: Ignoring removed nomblk_io_submit option [ 266.621289][ T7802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.785350][ T28] audit: type=1400 audit(1771975544.039:1059): avc: denied { link } for pid=7801 comm="syz.1.1223" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 266.811665][ T7812] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 266.946824][ T28] audit: type=1400 audit(1771975544.049:1060): avc: denied { execute } for pid=7801 comm="syz.1.1223" path="/223/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 267.125375][ T7811] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 267.198058][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 267.205237][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 268.223245][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.237923][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 268.245147][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 269.277997][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 269.285105][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 269.363942][ T7857] loop1: detected capacity change from 0 to 8192 [ 269.762198][ T7861] netlink: 'syz.4.1234': attribute type 16 has an invalid length. [ 269.776340][ T7861] netlink: 'syz.4.1234': attribute type 17 has an invalid length. [ 269.788776][ T3304] loop1: p1 < > p2 p4 < p5 > [ 269.803307][ T3304] loop1: partition table partially beyond EOD, truncated [ 269.820354][ T7863] loop5: detected capacity change from 0 to 2048 [ 269.839595][ T3304] loop1: p1 start 134217728 is beyond EOD, truncated [ 269.856509][ T3304] loop1: p2 size 591360 extends beyond EOD, truncated [ 269.868623][ T7863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.881354][ T3304] loop1: p5 size 591360 extends beyond EOD, truncated [ 269.894105][ T7857] loop1: p1 < > p2 p4 < p5 > [ 269.902775][ T7857] loop1: partition table partially beyond EOD, truncated [ 269.910323][ T7857] loop1: p1 start 134217728 is beyond EOD, truncated [ 269.917151][ T7857] loop1: p2 size 591360 extends beyond EOD, truncated [ 269.925813][ T7857] loop1: p5 size 591360 extends beyond EOD, truncated [ 270.090670][ T36] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 270.125724][ T36] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 270.158086][ T36] EXT4-fs (loop5): This should not happen!! Data will be lost [ 270.158086][ T36] [ 270.183732][ T36] EXT4-fs (loop5): Total free blocks count 0 [ 270.189900][ T36] EXT4-fs (loop5): Free/Dirty block details [ 270.195848][ T36] EXT4-fs (loop5): free_blocks=2415919504 [ 270.213625][ T36] EXT4-fs (loop5): dirty_blocks=48 [ 270.219235][ T36] EXT4-fs (loop5): Block reservation details [ 270.239989][ T36] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 270.246873][ T36] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 2 with error 28 [ 270.317901][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 270.325046][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 270.769025][ T7885] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 270.867245][ T7889] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 271.358007][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 271.365130][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 272.397890][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 272.405015][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 272.594538][ T28] audit: type=1400 audit(1771975549.879:1061): avc: denied { map } for pid=7901 comm="syz.4.1249" path="/dev/vcsa1" dev="devtmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 273.441716][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 273.451516][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 273.864763][ T28] audit: type=1400 audit(1771975551.149:1062): avc: denied { map } for pid=7980 comm="syz.0.1253" path="socket:[26818]" dev="sockfs" ino=26818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 274.034814][ T7981] tipc: Enabling of bearer rejected, already enabled [ 274.056818][ T7985] loop4: detected capacity change from 0 to 512 [ 274.064188][ T7981] tipc: Bearer : already 2 bearers with priority 10 [ 274.080820][ T7981] tipc: Bearer : trying with adjusted priority [ 274.088351][ T7981] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 274.312002][ T7985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.326130][ T7985] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 274.478081][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 274.489014][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 274.545113][ T7997] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1257'. [ 274.556467][ T7997] netlink: zone id is out of range [ 274.562634][ T7997] netlink: zone id is out of range [ 274.574077][ T7997] netlink: zone id is out of range [ 274.869693][ T7997] netlink: set zone limit has 8 unknown bytes [ 275.462685][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1261'. [ 275.517989][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 275.525156][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 276.750991][ T8021] loop0: detected capacity change from 0 to 512 [ 276.779683][ T8021] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 276.787655][ T8021] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 276.796581][ T8021] System zones: 0-1, 15-15, 18-18, 34-34 [ 276.802771][ T8021] EXT4-fs (loop0): orphan cleanup on readonly fs [ 276.809609][ T8021] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 276.819249][ T8021] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 276.834053][ T8021] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 276.841404][ T8021] EXT4-fs (loop0): 1 truncate cleaned up [ 276.847673][ T8021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 277.138402][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.904353][ T8035] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1270'. [ 278.158180][ T8042] netlink: 'syz.3.1272': attribute type 1 has an invalid length. [ 278.184741][ T8042] 8021q: adding VLAN 0 to HW filter on device bond5 [ 278.490324][ T8047] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.1271'. [ 278.500562][ T8047] net_ratelimit: 4 callbacks suppressed [ 278.500702][ T8047] netlink: zone id is out of range [ 278.512310][ T8047] netlink: zone id is out of range [ 278.521190][ T8047] netlink: zone id is out of range [ 278.637888][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 278.645019][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 278.671484][ T8047] netlink: set zone limit has 8 unknown bytes [ 278.718092][ T8048] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1272'. [ 278.754097][ T8042] bond4: (slave bond5): making interface the new active one [ 278.783052][ T8042] bond4: (slave bond5): Enslaving as an active interface with an up link [ 278.809500][ T8045] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 278.832001][ T8048] 8021q: adding VLAN 0 to HW filter on device bond4 [ 278.850989][ T8042] vlan2: entered promiscuous mode [ 278.862510][ T8042] bond4: entered promiscuous mode [ 278.874819][ T8042] bond5: entered promiscuous mode [ 278.973156][ T8055] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8055 comm=syz.1.1274 [ 279.679671][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 279.690586][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 280.051462][ T8070] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1280'. [ 280.083009][ T28] audit: type=1400 audit(1771975557.359:1063): avc: denied { read write } for pid=8066 comm="syz.5.1280" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 280.160231][ T28] audit: type=1400 audit(1771975557.359:1064): avc: denied { open } for pid=8066 comm="syz.5.1280" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 280.190316][ T8067] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 280.212309][ T8067] SELinux: failed to load policy [ 280.287187][ T8073] loop1: detected capacity change from 0 to 8192 [ 280.314993][ T8073] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 280.331213][ T8073] FAT-fs (loop1): Filesystem has been set read-only [ 280.434465][ T8091] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8091 comm=syz.1.1284 [ 280.717891][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 280.725032][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 282.735037][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.660327][ T8130] xt_CT: No such helper "snmp_trap" [ 283.838054][ C1] net_ratelimit: 4 callbacks suppressed [ 283.838076][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 283.850901][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 284.052821][ T28] audit: type=1400 audit(1771975561.339:1065): avc: denied { write } for pid=8146 comm="syz.0.1293" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 284.208829][ T8149] loop0: detected capacity change from 0 to 512 [ 284.296012][ T8149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.311242][ T8149] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.539541][ T8149] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 284.564368][ T8153] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 284.704262][ T8156] loop1: detected capacity change from 0 to 1024 [ 284.725574][ T8156] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 284.735094][ T8156] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 284.745068][ T8156] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.1295: Failed to acquire dquot type 0 [ 284.757175][ T8156] loop1: lost filesystem error report for type 5 error -117 [ 284.757613][ T8156] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, [ 284.765006][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 284.765026][ C0] EXT4-fs (loop1): initial error at time 1771975562: ext4_acquire_dquot:7001 [ 284.765047][ C0] EXT4-fs (loop1): last error at time 1771975562: ext4_acquire_dquot:7001 [ 284.796737][ T8156] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 284.809188][ T8156] EXT4-fs (loop1): 1 truncate cleaned up [ 284.815368][ T8156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.838038][ T8156] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 284.847122][ T8156] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 284.867799][ T8156] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.1295: Failed to acquire dquot type 0 [ 284.878079][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 284.886149][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 284.949033][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.994325][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.095190][ T8162] Set syz1 is full, maxelem 65536 reached [ 285.182228][ T8167] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1298'. [ 285.321783][ T8178] loop0: detected capacity change from 0 to 164 [ 285.918002][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 285.925114][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 286.364465][ T28] audit: type=1400 audit(1771975563.649:1066): avc: denied { create } for pid=8186 comm="syz.5.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 286.384908][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1306'. [ 286.396684][ T8187] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1306'. [ 286.408620][ T28] audit: type=1400 audit(1771975563.699:1067): avc: denied { write } for pid=8186 comm="syz.5.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 286.957876][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 286.965014][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 287.966722][ T8210] loop0: detected capacity change from 0 to 512 [ 287.976709][ T8208] lo speed is unknown, defaulting to 1000 [ 287.986773][ T8208] xfrm0 speed is unknown, defaulting to 1000 [ 287.998098][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 288.029785][ T8210] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 288.228997][ T8219] netlink: 'syz.4.1317': attribute type 1 has an invalid length. [ 288.316402][ T8219] 8021q: adding VLAN 0 to HW filter on device bond2 [ 288.357865][ T8209] lo speed is unknown, defaulting to 1000 [ 288.383565][ T8228] loop5: detected capacity change from 0 to 512 [ 288.391078][ T8228] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 288.403332][ T8228] EXT4-fs (loop5): 1 truncate cleaned up [ 288.409818][ T8228] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.450575][ T8222] macvlan2: entered promiscuous mode [ 288.456423][ T3318] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 288.479386][ T8236] netlink: 'syz.0.1321': attribute type 7 has an invalid length. [ 288.490978][ T8222] macvlan2: entered allmulticast mode [ 288.506283][ T8209] xfrm0 speed is unknown, defaulting to 1000 [ 288.540879][ T8219] bond2: (slave ip6gretap0): making interface the new active one [ 288.590740][ T8219] bond2: (slave ip6gretap0): Enslaving as an active interface with an up link [ 289.037906][ C1] net_ratelimit: 1 callbacks suppressed [ 289.037925][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 289.050683][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 289.510843][ T4467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.570384][ T8249] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1324'. [ 289.658674][ T28] audit: type=1400 audit(1771975566.939:1068): avc: denied { read } for pid=8254 comm="syz.5.1325" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 289.702661][ T28] audit: type=1400 audit(1771975566.939:1069): avc: denied { open } for pid=8254 comm="syz.5.1325" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 289.761184][ T28] audit: type=1400 audit(1771975567.019:1070): avc: denied { append } for pid=8254 comm="syz.5.1325" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 290.185843][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 290.195701][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 290.320655][ T8268] tipc: Enabled bearer , priority 10 [ 291.197870][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 291.204992][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 291.624467][ T35] tipc: Node number set to 2487475164 [ 291.808182][ T8289] syzkaller0: entered promiscuous mode [ 291.814139][ T8289] syzkaller0: entered allmulticast mode [ 291.999890][ T8291] loop0: detected capacity change from 0 to 512 [ 292.238021][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 292.245121][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 292.305103][ T8301] loop5: detected capacity change from 0 to 256 [ 292.450179][ T8301] FAT-fs (loop5): Directory bread(block 64) failed [ 292.456931][ T8301] FAT-fs (loop5): Directory bread(block 65) failed [ 292.463859][ T8301] FAT-fs (loop5): Directory bread(block 66) failed [ 292.470469][ T8301] FAT-fs (loop5): Directory bread(block 67) failed [ 292.477345][ T8301] FAT-fs (loop5): Directory bread(block 68) failed [ 292.484018][ T8301] FAT-fs (loop5): Directory bread(block 69) failed [ 292.490785][ T8301] FAT-fs (loop5): Directory bread(block 70) failed [ 292.497461][ T8301] FAT-fs (loop5): Directory bread(block 71) failed [ 292.504107][ T8301] FAT-fs (loop5): Directory bread(block 72) failed [ 292.510726][ T8301] FAT-fs (loop5): Directory bread(block 73) failed [ 293.209777][ T8308] lo speed is unknown, defaulting to 1000 [ 293.222043][ T8308] xfrm0 speed is unknown, defaulting to 1000 [ 293.277851][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 293.284961][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 293.524830][ T8317] netlink: 'syz.5.1349': attribute type 1 has an invalid length. [ 293.689973][ T8321] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1349'. [ 293.714588][ T8322] bond3: (slave gretap1): making interface the new active one [ 293.770685][ T8322] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 294.037735][ T8321] 8021q: adding VLAN 0 to HW filter on device bond3 [ 294.056956][ T8317] vlan1: entered promiscuous mode [ 294.069275][ T8317] bond3: entered promiscuous mode [ 294.085406][ T8317] gretap1: entered promiscuous mode [ 294.204587][ T28] audit: type=1400 audit(1771975571.489:1071): avc: denied { ioctl } for pid=8332 comm="syz.5.1352" path="socket:[27436]" dev="sockfs" ino=27436 ioctlcmd=0x586b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 294.318025][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 294.325180][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 295.357861][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 295.365188][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 295.773688][ T28] audit: type=1400 audit(1771975573.059:1072): avc: denied { write } for pid=8346 comm="syz.1.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 295.828980][ T28] audit: type=1400 audit(1771975573.059:1073): avc: denied { ioctl } for pid=8346 comm="syz.1.1357" path="socket:[27465]" dev="sockfs" ino=27465 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 296.401319][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 296.411197][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 297.437930][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 297.445044][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 297.654864][ T8366] tipc: Enabled bearer , priority 0 [ 297.662310][ T8366] syzkaller0: entered promiscuous mode [ 297.669622][ T8366] syzkaller0: entered allmulticast mode [ 297.686158][ T8368] vlan2: entered allmulticast mode [ 297.691992][ T8368] bond0: entered allmulticast mode [ 297.697332][ T8368] bond_slave_0: entered allmulticast mode [ 297.703258][ T8368] bond_slave_1: entered allmulticast mode [ 297.711031][ T8366] tipc: Resetting bearer [ 297.716178][ T8368] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1363'. [ 297.726018][ T8365] tipc: Resetting bearer [ 297.734671][ T8365] tipc: Disabling bearer [ 297.747288][ T8368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.756561][ T8368] bond_slave_0: left allmulticast mode [ 297.763039][ T8368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.772556][ T8368] bond_slave_1: left allmulticast mode [ 297.784764][ T8368] bond0 (unregistering): Released all slaves [ 298.273105][ T8386] loop5: detected capacity change from 0 to 512 [ 298.488011][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 298.495218][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 299.257854][ T8386] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 299.265851][ T8386] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 299.293000][ T8386] System zones: 0-1, 15-15, 18-18, 34-34 [ 299.299792][ T8386] EXT4-fs (loop5): orphan cleanup on readonly fs [ 299.306301][ T8386] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 299.517910][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 299.525196][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 299.718299][ T8386] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 299.733182][ T8386] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 299.750129][ T8386] EXT4-fs (loop5): 1 truncate cleaned up [ 299.757690][ T8386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 299.838568][ T8404] tipc: Enabling of bearer rejected, failed to enable media [ 300.070651][ T4467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.494248][ T8414] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.1379'. [ 300.504557][ T8414] netlink: zone id is out of range [ 300.510034][ T8414] netlink: zone id is out of range [ 300.520112][ T8414] netlink: zone id is out of range [ 300.558023][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 300.565176][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 300.680414][ T8414] netlink: set zone limit has 8 unknown bytes [ 301.597860][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 301.604957][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 302.183245][ T28] audit: type=1400 audit(1771975579.469:1074): avc: denied { create } for pid=8427 comm="syz.0.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 304.193439][ T8473] netlink: 'syz.4.1395': attribute type 4 has an invalid length. [ 304.718016][ C1] net_ratelimit: 4 callbacks suppressed [ 304.718035][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 304.730803][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 305.255241][ T8479] loop5: detected capacity change from 0 to 32768 [ 305.450968][ T8483] vlan2: entered allmulticast mode [ 305.767854][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 305.774960][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 305.871715][ T8483] bridge_slave_0: entered allmulticast mode [ 306.614056][ T8497] loop1: detected capacity change from 0 to 512 [ 306.666076][ T8497] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 306.677893][ T8495] lo speed is unknown, defaulting to 1000 [ 306.684429][ T8495] xfrm0 speed is unknown, defaulting to 1000 [ 306.737165][ T8497] EXT4-fs (loop1): 1 truncate cleaned up [ 306.797980][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 306.805100][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 306.826071][ T8497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.862967][ T8502] syzkaller0: entered promiscuous mode [ 306.871354][ T8502] syzkaller0: entered allmulticast mode [ 306.888219][ T8502] 0: reclassify loop, rule prio 0, protocol 700 [ 306.955940][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.975612][ T8508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.988191][ T8504] lo speed is unknown, defaulting to 1000 [ 306.994457][ T8504] xfrm0 speed is unknown, defaulting to 1000 [ 307.137131][ T28] audit: type=1400 audit(1771975584.419:1075): avc: denied { listen } for pid=8509 comm="syz.5.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 307.196142][ T8508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.291701][ T28] audit: type=1400 audit(1771975584.519:1076): avc: denied { accept } for pid=8509 comm="syz.5.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 307.839710][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 307.847194][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 308.050554][ T8507] lo speed is unknown, defaulting to 1000 [ 308.066941][ T8507] xfrm0 speed is unknown, defaulting to 1000 [ 308.881731][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 309.917854][ C1] net_ratelimit: 1 callbacks suppressed [ 309.917872][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 309.930536][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 310.348599][ T8565] loop0: detected capacity change from 0 to 128 [ 310.581982][ T8569] loop1: detected capacity change from 0 to 512 [ 310.646221][ T8569] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 310.845460][ T8569] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1429: invalid block [ 310.957947][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 310.965051][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 311.424931][ T28] audit: type=1400 audit(1771975588.199:1077): avc: denied { read } for pid=8570 comm="syz.4.1430" name="file0" dev="tmpfs" ino=1425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 311.453058][ T8569] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 311.465234][ T8569] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1429: invalid indirect mapped block 4294967295 (level 1) [ 311.475113][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 311.475223][ C1] EXT4-fs (loop1): initial error at time 1771975588: ext4_get_branch:178: inode 11: block 4294967295 [ 311.475643][ C1] EXT4-fs (loop1): last error at time 1771975588: ext4_get_branch:178: inode 11: block 4294967295 [ 311.554418][ T28] audit: type=1400 audit(1771975588.199:1078): avc: denied { open } for pid=8570 comm="syz.4.1430" path="/265/file0" dev="tmpfs" ino=1425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 311.767249][ T8569] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 311.775647][ T8569] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1429: invalid indirect mapped block 4294967295 (level 1) [ 311.997851][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 312.005011][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 312.055352][ T28] audit: type=1400 audit(1771975589.139:1079): avc: denied { connect } for pid=8580 comm="syz.3.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 312.138091][ T8585] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 312.228392][ T8569] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 312.237205][ T8579] loop5: detected capacity change from 0 to 512 [ 312.268938][ T8569] EXT4-fs (loop1): 2 truncates cleaned up [ 312.285529][ T28] audit: type=1400 audit(1771975589.549:1080): avc: denied { relabelto } for pid=8584 comm="syz.0.1433" name="304" dev="tmpfs" ino=1640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 312.377284][ T8569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.402595][ T28] audit: type=1400 audit(1771975589.559:1081): avc: denied { associate } for pid=8584 comm="syz.0.1433" name="304" dev="tmpfs" ino=1640 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 312.503142][ T28] audit: type=1400 audit(1771975589.619:1082): avc: denied { write } for pid=8584 comm="syz.0.1433" name="304" dev="tmpfs" ino=1640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 312.564879][ T8579] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.581226][ T3313] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 312.593073][ T8579] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.617157][ T3313] CPU: 0 UID: 0 PID: 3313 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 312.617191][ T3313] Tainted: [W]=WARN [ 312.617197][ T3313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 312.617233][ T3313] Call Trace: [ 312.617239][ T3313] [ 312.617246][ T3313] __dump_stack+0x1d/0x30 [ 312.617270][ T3313] dump_stack_lvl+0x95/0xd0 [ 312.617291][ T3313] dump_stack+0x15/0x1b [ 312.617321][ T3313] dump_header+0x80/0x240 [ 312.617344][ T3313] oom_kill_process+0x295/0x350 [ 312.617363][ T3313] out_of_memory+0x97d/0xb80 [ 312.617382][ T3313] try_charge_memcg+0x62e/0xa10 [ 312.617457][ T3313] __mem_cgroup_charge+0x65/0x150 [ 312.617483][ T3313] filemap_add_folio+0x110/0x350 [ 312.617519][ T3313] __filemap_get_folio_mpol+0x326/0x680 [ 312.617570][ T3313] filemap_fault+0x486/0xb90 [ 312.617593][ T3313] __do_fault+0xbc/0x200 [ 312.617658][ T3313] handle_mm_fault+0x11d7/0x3020 [ 312.617685][ T3313] ? vma_start_read+0x1c7/0x2c0 [ 312.617814][ T3313] do_user_addr_fault+0x62f/0x1050 [ 312.617857][ T3313] ? trace_page_fault_user+0x1f/0xe0 [ 312.617974][ T3313] exc_page_fault+0x62/0xa0 [ 312.618012][ T3313] asm_exc_page_fault+0x26/0x30 [ 312.618047][ T3313] RIP: 0033:0x7f83994aa6b4 [ 312.618068][ T3313] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b1 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 af ed 00 48 01 d1 [ 312.618090][ T3313] RSP: 002b:00007fff5b79d990 EFLAGS: 00010206 [ 312.618124][ T3313] RAX: 0000001b33924000 RBX: 000000000000031c RCX: 000000000004c2c0 [ 312.618137][ T3313] RDX: 000000000848668c RSI: 00007fff5b79da20 RDI: 0000000000000001 [ 312.618150][ T3313] RBP: 00007fff5b79d9cc R08: 000000001f98afb1 R09: 7fffffffffffffff [ 312.618165][ T3313] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 312.618220][ T3313] R13: 00000000000927c0 R14: 000000000004bcb3 R15: 00007fff5b79da20 [ 312.618243][ T3313] [ 312.619195][ T28] audit: type=1400 audit(1771975589.619:1083): avc: denied { add_name } for pid=8584 comm="syz.0.1433" name="cpuacct.usage_all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 312.666396][ T3313] memory: usage 307200kB, limit 307200kB, failcnt 4527 [ 312.667597][ T28] audit: type=1400 audit(1771975589.619:1084): avc: denied { associate } for pid=8584 comm="syz.0.1433" name="cpuacct.usage_all" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 312.686323][ T3313] memory+swap: usage 307664kB, limit 9007199254740988kB, failcnt 0 [ 312.686829][ T28] audit: type=1400 audit(1771975589.639:1085): avc: denied { remove_name } for pid=3318 comm="syz-executor" name="cpuacct.usage_all" dev="tmpfs" ino=1645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 312.734256][ T3313] kmem: usage 303924kB, limit 9007199254740988kB, failcnt 0 [ 312.737670][ T28] audit: type=1400 audit(1771975589.639:1086): avc: denied { unlink } for pid=3318 comm="syz-executor" name="cpuacct.usage_all" dev="tmpfs" ino=1645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 312.756838][ T3313] Memory cgroup stats for [ 312.762367][ T28] audit: type=1400 audit(1771975589.639:1087): avc: denied { rmdir } for pid=3318 comm="syz-executor" name="304" dev="tmpfs" ino=1640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 312.802894][ T3313] /syz1 [ 312.817144][ T28] audit: type=1400 audit(1771975589.909:1088): avc: denied { unlink } for pid=3314 comm="syz-executor" name="file0" dev="tmpfs" ino=1425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 312.908605][ T3313] : [ 312.964296][ T8595] loop4: detected capacity change from 0 to 1024 [ 313.002325][ T8595] EXT4-fs: Ignoring removed orlov option [ 313.016687][ T8595] EXT4-fs: Ignoring removed nobh option [ 313.023018][ T3313] cache 8192 [ 313.026376][ T3313] rss 24576 [ 313.030835][ T3313] shmem 0 [ 313.033937][ T3313] mapped_file 0 [ 313.037464][ T3313] dirty 0 [ 313.040717][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 313.040805][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 313.055438][ T3313] writeback 0 [ 313.059496][ T3313] workingset_refault_anon 789 [ 313.064255][ T3313] workingset_refault_file 3503 [ 313.069961][ T3313] swap 446464 [ 313.073380][ T3313] swapcached 25231360 [ 313.077459][ T3313] pgpgin 272422 [ 313.081267][ T3313] pgpgout 272411 [ 313.085031][ T3313] pgfault 251832 [ 313.089010][ T3313] pgmajfault 224 [ 313.092670][ T3313] inactive_anon 0 [ 313.096467][ T3313] active_anon 28672 [ 313.101291][ T8595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.101433][ T3313] inactive_file 0 [ 313.117402][ T3313] active_file 12288 [ 313.121430][ T3313] unevictable 0 [ 313.124982][ T3313] hierarchical_memory_limit 314572800 [ 313.130650][ T3313] hierarchical_memsw_limit 9223372036854771712 [ 313.136872][ T3313] total_cache 8192 [ 313.141287][ T3313] total_rss 24576 [ 313.144992][ T3313] total_shmem 0 [ 313.148705][ T3313] total_mapped_file 0 [ 313.152769][ T3313] total_dirty 0 [ 313.156307][ T3313] total_writeback 0 [ 313.160505][ T3313] total_workingset_refault_anon 789 [ 313.165804][ T3313] total_workingset_refault_file 3503 [ 313.171191][ T3313] total_swap 446464 [ 313.175076][ T3313] total_swapcached 25231360 [ 313.179854][ T3313] total_pgpgin 272448 [ 313.184018][ T3313] total_pgpgout 272437 [ 313.188216][ T3313] total_pgfault 251887 [ 313.192432][ T3313] total_pgmajfault 224 [ 313.196675][ T3313] total_inactive_anon 0 [ 313.201013][ T3313] total_active_anon 28672 [ 313.205454][ T3313] total_inactive_file 0 [ 313.212217][ T3313] total_active_file 12288 [ 313.218622][ T8579] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 313.227484][ T3313] total_unevictable 0 [ 313.231547][ T3313] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1429,pid=8566,uid=0 [ 313.247547][ T3313] Memory cgroup out of memory: Killed process 8566 (syz.1.1429) total-vm:96208kB, anon-rss:1248kB, file-rss:22404kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 313.283604][ T8593] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 313.324657][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.389638][ T8602] xt_hashlimit: size too large, truncated to 1048576 [ 313.422162][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.434815][ T8603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1437'. [ 313.450435][ T30] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.459128][ T30] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.467456][ T30] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.477148][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1437'. [ 313.490388][ T30] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.521332][ T8605] team0: Port device dummy0 removed [ 313.557608][ T8605] team0: Port device team_slave_0 removed [ 313.577290][ T8605] team0: Port device team_slave_1 removed [ 313.585677][ T4467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.595544][ T8605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.613622][ T8605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.630006][ T8605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.642380][ T8605] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 313.712122][ T8613] Non-string source [ 313.734256][ T8613] Ÿë: port 1(gretap0) entered blocking state [ 313.740595][ T8615] loop1: detected capacity change from 0 to 1024 [ 313.741088][ T8613] Ÿë: port 1(gretap0) entered disabled state [ 313.753049][ T8615] EXT4-fs: Ignoring removed oldalloc option [ 313.757532][ T8613] gretap0: entered allmulticast mode [ 313.765430][ T8615] EXT4-fs: Ignoring removed bh option [ 313.772269][ T8613] gretap0: entered promiscuous mode [ 313.785374][ T8613] Ÿë: port 2(veth0_to_team) entered blocking state [ 313.794415][ T8613] Ÿë: port 2(veth0_to_team) entered disabled state [ 313.822013][ T8615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.842681][ T8613] veth0_to_team: entered allmulticast mode [ 313.850281][ T8613] veth0_to_team: entered promiscuous mode [ 313.933670][ T28] audit: type=1326 audit(1771975591.219:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.5.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b6e0c629 code=0x7ffc0000 [ 314.077899][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 314.095857][ T8627] lo speed is unknown, defaulting to 1000 [ 314.103913][ T8627] xfrm0 speed is unknown, defaulting to 1000 [ 314.533490][ T8615] ================================================================== [ 314.541743][ T8615] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 314.549815][ T8615] [ 314.552191][ T8615] write to 0xffff88811a43ae4c of 4 bytes by task 8625 on cpu 0: [ 314.559844][ T8615] xas_set_mark+0x12b/0x140 [ 314.564488][ T8615] __folio_start_writeback+0x17b/0x370 [ 314.570003][ T8615] ext4_bio_write_folio+0x5ad/0x9f0 [ 314.575251][ T8615] mpage_process_page_bufs+0x4a1/0x620 [ 314.580760][ T8615] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 314.586640][ T8615] ext4_do_writepages+0xa07/0x2840 [ 314.591818][ T8615] ext4_writepages+0x18f/0x320 [ 314.596627][ T8615] do_writepages+0x1c6/0x310 [ 314.601259][ T8615] file_write_and_wait_range+0x178/0x2f0 [ 314.606958][ T8615] generic_buffers_fsync_noflush+0x45/0x130 [ 314.612904][ T8615] ext4_sync_file+0x1aa/0x6b0 [ 314.617712][ T8615] vfs_fsync_range+0xc5/0xe0 [ 314.622374][ T8615] ext4_buffered_write_iter+0x34f/0x3c0 [ 314.623625][ T8625] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.1441: Allocating blocks 1-17 which overlap fs metadata [ 314.627981][ T8615] ext4_file_write_iter+0x380/0xfa0 [ 314.628023][ T8615] iter_file_splice_write+0x6c4/0xa80 [ 314.628045][ T8615] direct_splice_actor+0x156/0x2a0 [ 314.628067][ T8615] splice_direct_to_actor+0x311/0x670 [ 314.662739][ T8615] do_splice_direct+0x119/0x1a0 [ 314.667635][ T8615] do_sendfile+0x382/0x650 [ 314.672088][ T8615] __x64_sys_sendfile64+0x105/0x150 [ 314.677331][ T8615] x64_sys_call+0x2dc4/0x3020 [ 314.682052][ T8615] do_syscall_64+0x12c/0x370 [ 314.686697][ T8615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.692635][ T8615] [ 314.694984][ T8615] read to 0xffff88811a43ae4c of 4 bytes by task 8615 on cpu 1: [ 314.702648][ T8615] file_write_and_wait_range+0x130/0x2f0 [ 314.708343][ T8615] generic_buffers_fsync_noflush+0x45/0x130 [ 314.714275][ T8615] ext4_sync_file+0x1aa/0x6b0 [ 314.718985][ T8615] vfs_fsync_range+0xc5/0xe0 [ 314.723617][ T8615] ext4_buffered_write_iter+0x34f/0x3c0 [ 314.729227][ T8615] ext4_file_write_iter+0x380/0xfa0 [ 314.734477][ T8615] iter_file_splice_write+0x6c4/0xa80 [ 314.739898][ T8615] direct_splice_actor+0x156/0x2a0 [ 314.745055][ T8615] splice_direct_to_actor+0x311/0x670 [ 314.750476][ T8615] do_splice_direct+0x119/0x1a0 [ 314.755382][ T8615] do_sendfile+0x382/0x650 [ 314.759842][ T8615] __x64_sys_sendfile64+0x105/0x150 [ 314.765089][ T8615] x64_sys_call+0x2dc4/0x3020 [ 314.769815][ T8615] do_syscall_64+0x12c/0x370 [ 314.774456][ T8615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.780393][ T8615] [ 314.782745][ T8615] value changed: 0x0a000021 -> 0x04000021 [ 314.788492][ T8615] [ 314.790834][ T8615] Reported by Kernel Concurrency Sanitizer on: [ 314.797019][ T8615] CPU: 1 UID: 0 PID: 8615 Comm: syz.1.1441 Tainted: G W syzkaller #0 PREEMPT(full) [ 314.808006][ T8615] Tainted: [W]=WARN [ 314.811836][ T8615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 314.821928][ T8615] ================================================================== [ 314.838853][ T8615] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.1441: Allocating blocks 1-17 which overlap fs metadata [ 314.916025][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.117998][ C1] net_ratelimit: 1 callbacks suppressed [ 315.118032][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 315.130864][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 316.157915][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 316.165029][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 317.198049][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 317.205110][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 318.237904][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 318.245070][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 319.278050][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 319.285317][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 320.317930][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 320.325038][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 321.358022][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 321.365093][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 322.397969][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 322.405077][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 323.437988][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 323.445136][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 324.477931][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 324.485210][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available