last executing test programs: 1m43.455016677s ago: executing program 1 (id=46): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x3ff, 0x1}, 0x1186ca, 0xa7, 0x2, 0x5, 0xa5, 0x4, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0xfff8000000000001, 0xffffffffffffffff, 0x1) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1m42.367203825s ago: executing program 1 (id=65): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003, 0x2, @perf_config_ext={0xe82, 0x722}, 0x106200, 0x10004, 0x20da, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 1m41.9042099s ago: executing program 1 (id=76): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x2a02) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) read$watch_queue(r1, &(0x7f00000001c0)=""/178, 0xb2) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m41.833613463s ago: executing program 1 (id=78): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c0060001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 1m41.728455816s ago: executing program 1 (id=80): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}}, 0x20}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 1m41.685839357s ago: executing program 1 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000001540), 0x1000000, &(0x7f0000001640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m26.533712412s ago: executing program 32 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000001540), 0x1000000, &(0x7f0000001640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m6.799912132s ago: executing program 0 (id=884): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000001480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000f14010022bd7000f3dbdf250c0045"], 0x1c}, 0x1, 0x2000000, 0x0, 0x2000004c}, 0x80) 1m6.589112559s ago: executing program 0 (id=889): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000500)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x81, "129b00", "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"}}, 0x110) fcntl$setstatus(r1, 0x4, 0x12000) splice(r0, &(0x7f0000000040)=0x10, r2, 0x0, 0x807, 0x0) 1m6.533188991s ago: executing program 0 (id=892): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x462, &(0x7f0000000d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc842, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8541, 0x100) fallocate(r1, 0x8, 0x4000, 0x8000) write$selinux_validatetrans(r0, &(0x7f0000000140)={'system_u:object_r:agp_device_t:s0', 0x20, 'system_u:object_r:systemd_passwd_var_run_t:s0', 0x20, 0x0, 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}, 0x93) 1m6.27646577s ago: executing program 0 (id=900): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901) mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x1000, &(0x7f0000000200)={0x84, 0x70, 0x0, {r0}}, 0x20) 1m6.143819774s ago: executing program 0 (id=902): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1m5.931589131s ago: executing program 0 (id=907): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x1}, 0x20) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000019200)) 1m5.915985872s ago: executing program 33 (id=907): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x1}, 0x20) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000019200)) 58.768565275s ago: executing program 4 (id=1055): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)='\x00', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x5, 0x2, r1, 0x0}]) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 58.381475928s ago: executing program 4 (id=1065): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x126, 0xfffffffa, {{0xd, 0x4, 0x1, 0x20, 0x34, 0x65, 0x0, 0x6, 0x29, 0x0, @multicast2, @multicast1, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xb6, 0x0, 0x1, [0x8]}, @noop, @timestamp={0x44, 0x10, 0x6f, 0x0, 0x0, [0x3, 0x7, 0xffff4108]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 58.127319907s ago: executing program 4 (id=1073): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, 0x0) 57.886398865s ago: executing program 4 (id=1083): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 57.839087346s ago: executing program 4 (id=1084): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x0, @link_local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @broadcast}, 0x10) close(0x3) 57.455578939s ago: executing program 4 (id=1091): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x95, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x80}, 0x1c) 57.45200457s ago: executing program 34 (id=1091): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x95, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x80}, 0x1c) 44.431530511s ago: executing program 5 (id=1371): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4c840) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x5, 0x2}, 0xff19, 0x6, 0x1, 0x0, 0x1, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) 44.282605437s ago: executing program 5 (id=1378): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000002900)="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", 0x182}], 0x1) io_uring_enter(r0, 0x1a7c, 0x6933, 0x19, 0x0, 0x0) 44.010492036s ago: executing program 5 (id=1387): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f0000001040)=ANY=[@ANYBLOB="00085aeb3fcbabe8bda694c0"], 0x88, 0x29b, &(0x7f0000000180)="$eJzs3c9qK1UYAPBv0iRNVEgWrkRwQBeuwr33CW6QChezUrLQjV5sC5KEQgMB/2Dsyr3gynfwHXwAN76BC5eCO7sQR5KZSdI0bY3EVOrvt5kvc74v509OWyjMyUevjgbHZ+PTiy9+jkYjicrTeBqXSbSjEqWvAgB4SC6zLH7LcnflVqMeEVmreFXZw/AAgH/BNn//AYCH4b33P3in2+sdvZumjYjR15N+Evk1b++exicxjJN4FK34IyJbyOOXnvWOopqm5T8DJs3oR4w+/LF43f01Yl7/OFrRXq+vF1npXLwxmk76s55n11q8kER0syRPeRKteDkiq0XxJvnl7We9oyfp9fro1+PN178rxv/nSXSiFT99HGcxjOP5Wyzrv3ycpm9l3/7+eT6DfkQynfQP53lL2cFePhAAAAAAAAAAAAAAAAAAAAAAAP4XOulCe/X8nPI0wE5nc/uN5wMVJ/xMV87XeZSmaXmMz6Rfi7y+Gq9Uo3p/MwcAAAAAAAAAAAAAAAAAAID/jvGnnw2eD4cn51eCH7JZ0Lw1Zz2ortwpH+u/u2pzMPg+YvuqvxPEQTG0YXKti6Rs2kFfh9skNzd1GpWb1rA6jHzw32w/sNd2NcFbg3J3DZ4ncUdyY/MmWdl15TY8HydbbMhsw9Id3FhV39Hc6y/+0/LmxoWazbi2WMyrVY3ZJ7lyp7bjn5Q1yc5/9wAAAAAAAAAAAAAAAAAAAFctH/qNX641XtzLkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg75bf/78Ior1+Zz2YFsXzO5Xbkw/Pxxu6be95mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxwfwUAAP//5OlVhQ==") r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 43.856307131s ago: executing program 5 (id=1390): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x510, &(0x7f0000001a00)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0xe, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f283597399229a4c66810000000005683ae6d602000000000000000000000001", [0x8]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) 43.531171492s ago: executing program 5 (id=1394): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040)="0006", 0x2, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @loopback}, 0x1c) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="a1", 0x1}], 0x1) 43.043581289s ago: executing program 5 (id=1400): getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) 43.043481239s ago: executing program 35 (id=1400): getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) 24.279977116s ago: executing program 6 (id=1796): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0xfc) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r0, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x1}, 0x7) socket$igmp(0x2, 0x3, 0x2) 24.006868135s ago: executing program 6 (id=1801): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000840)="a6e0775c40424ae2fa17e3edddc8537453d7cfd2653ba66415126638cafc8a5503a38ea150c70731", 0x28, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) shutdown(r0, 0x1) 23.836278061s ago: executing program 6 (id=1813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@getchain={0x2c, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0x0, 0xfff1}, {0x10, 0x8}}, [{0x8, 0xb, 0xb81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x2) 23.685267736s ago: executing program 6 (id=1809): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8b101e, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_rdma(0x0, &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x20000, 0x0) 23.610241069s ago: executing program 6 (id=1814): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x0, 0x5, 0xfbfffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x16, 0x301, 0x274bd24, 0x25dfdbf8, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000000) 23.194353743s ago: executing program 6 (id=1826): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500030000000c0016"], 0x38}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23.154938804s ago: executing program 36 (id=1826): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500030000000c0016"], 0x38}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.186150102s ago: executing program 8 (id=2136): sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x20000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x20973, 0x1c080, 0x0, 0x201}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x1a, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xfffffffffffffffc, 0x41100, 0x19, '\x00', 0x0, 0x38}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.94348074s ago: executing program 8 (id=2141): r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x1) poll(&(0x7f0000000100)=[{r0, 0x84}], 0x1, 0x3ff) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 2.507277265s ago: executing program 9 (id=2151): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000008600)=@deltfilter={0xf04, 0x2d, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0xecc, 0x2, [@TCA_CGROUP_ACT={0xec8, 0x1, [@m_nat={0x2c, 0x1b, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_pedit={0x30, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_pedit={0xe68, 0xf, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x1, 0x5, 0x6, 0x56, 0x7fff}, 0x4, 0x50, [{0x7, 0x9, 0x0, 0x7, 0x1, 0x81}]}, [{0xe, 0xb909, 0x2, 0x1, 0x4, 0xe9}, {0x4, 0x0, 0x15754b9a, 0x8, 0x6, 0x401}, {0x6, 0x2, 0xd, 0x8, 0x7}, {0x4, 0xfdd, 0xa6, 0x4, 0x6, 0x93}, {0x200, 0x44f, 0x8, 0x9, 0x800, 0x8}, {0x80000000, 0xb, 0x0, 0x0, 0x5, 0x5}, {0x1fbd, 0x5, 0x4, 0x7, 0x1000, 0xffffff5c}, {0x9, 0x7, 0x1, 0x0, 0x3, 0x160000}, {0xbc, 0xa, 0xfffffffe, 0x1000, 0xe, 0x1}, {0x0, 0x7, 0xb4ad6423, 0x2062, 0x2, 0x4}, {0x7, 0xfffffffb, 0x8000, 0x7ff, 0x8, 0x4584}, {0x0, 0x9, 0x6, 0xfffffffb, 0xfffffffa, 0xffffffc0}, {0x7, 0x0, 0xe90, 0x7, 0xfffffff9, 0xd}, {0x1, 0xffff, 0x3ff, 0xcb56, 0x3, 0x8}, {0x0, 0x1, 0x3, 0x3000000, 0x10001, 0x7}, {0x0, 0x1, 0x9, 0x3, 0x10000, 0x1}, {0x9ab, 0x6, 0x2, 0x9, 0xd, 0x6}, {0x0, 0x4, 0x9, 0x0, 0x400, 0x5}, {0x0, 0x4, 0x1, 0x5, 0xff, 0xffffff01}, {0x80000001, 0x2, 0x0, 0x4, 0x5, 0x2}, {0x4, 0x1f, 0x8000000, 0x1, 0xdc, 0x8}, {0x5, 0x7fff, 0xfff, 0x4, 0x4f8403c6, 0xe}, {0x2, 0x1, 0xe9f9, 0x5, 0xfffffffc, 0x1}, {0x2, 0xffffffff, 0x7, 0x1, 0x6, 0x7}, {0x5, 0x9, 0x3, 0x0, 0x8000, 0x9}, {0x2800, 0x4, 0x8001, 0x0, 0xe8, 0x5}, {0x5, 0x4, 0xaee, 0x2, 0xffffffef, 0x9}, {0x0, 0x2, 0x6, 0x7f, 0x400, 0x5}, {0x3, 0x4, 0xfffffffe, 0x2, 0x0, 0xfff}, {0x8001, 0x2, 0x7fff, 0x2, 0x1, 0x1}, {0x4, 0xc6, 0x1, 0x4, 0x0, 0x4501}, {0x5, 0x4, 0x2, 0x10000, 0x0, 0x9}, {0x8, 0x6, 0x9, 0x1, 0x1, 0xea}, {0x5, 0x1, 0x401, 0xda80, 0x8ab6, 0x4}, {0x7ff, 0x12e, 0x3, 0x9a5, 0x1, 0x9}, {0x7, 0x8001, 0x0, 0xfffff142, 0x9, 0x4}, {0x9, 0x0, 0x3, 0x9, 0x8, 0x4}, {0x135, 0x6, 0x8, 0x9, 0x4ba7, 0x7}, {0x3, 0x2, 0x7, 0x8, 0xf, 0x9}, {0xc3b, 0xbb14, 0x9, 0x6, 0x5, 0x4}, {0x4, 0x7, 0x3c, 0x3, 0x6, 0x2}, {0x6, 0x4, 0x4, 0x2, 0x2, 0x86}, {0x1, 0x6, 0x1d4f, 0x7}, {0x7, 0x7fffffff, 0x9, 0xe, 0x1e2, 0x37}, {0xffffffff, 0x5, 0x80, 0x6, 0x6, 0x6}, {0x6, 0x4, 0x5, 0x5, 0xce, 0x3}, {0x0, 0x8, 0x5, 0x7, 0x5, 0x8}, {0xabc, 0x6, 0x1ff, 0x9, 0x1, 0x2}, {0xa1d, 0xa, 0x4, 0x34, 0x5000, 0x7}, {0x0, 0x370, 0x9, 0xfffffff8, 0x7}, {0x7f, 0x5, 0x7ff, 0x6, 0x2f1, 0x1}, {0xfff, 0x3, 0x2, 0x6, 0x87a6, 0x800}, {0x7fffffff, 0xd, 0x8, 0xfffffffa, 0x74, 0x1}, {0x1, 0x8, 0x2, 0x1, 0x1, 0xae6e}, {0x8, 0x8, 0x7, 0x7, 0x4, 0x101}, {0xe, 0xec, 0x1, 0x7, 0x9, 0x4}, {0xe, 0x8, 0x3, 0x6c4, 0x2, 0x7fffffff}, {0x2, 0xc, 0x8, 0x4, 0x8, 0xf2}, {0x9, 0x25c, 0x10001, 0x2, 0xfffffb00, 0x80000001}, {0x5f, 0x10001, 0x6, 0xb, 0x7f, 0x1ff}, {0x10001, 0x8, 0x8, 0x3, 0x8, 0x40}, {0x6, 0x7ff, 0xad, 0x476, 0xfffffffc, 0xabc}, {0xfffffffa, 0x7, 0xbc94, 0x400, 0x7fffffff, 0x7}, {0x4, 0x3, 0x20, 0xc7f, 0x200, 0x10}, {0x7, 0x60b3, 0x80, 0x7f, 0x19, 0x1}, {0x993, 0x80000001, 0x101, 0x3, 0x3, 0xffffffff}, {0x1, 0x6, 0x1000, 0xe, 0x4, 0x7}, {0xff, 0x1, 0x2, 0x6, 0x3, 0x2a9d}, {0x4, 0xf8, 0x5, 0x3ff, 0xf, 0x6}, {0xffff, 0x0, 0x28000000, 0x5, 0x8, 0x9b6}, {0x7fb4, 0x45ff405d, 0x3, 0x1, 0x78b6, 0x6}, {0xfff, 0x7, 0x2, 0xfffffc00, 0x5, 0x101}, {0x7, 0xb15e, 0x80, 0x7fad, 0x4, 0xff}, {0x81, 0x6, 0x2, 0xdbc, 0x5, 0x9}, {0x80000000, 0xffffff78, 0x40000000, 0xf7, 0xfffffff7, 0x5}, {0x3, 0x52, 0x7b28, 0xff, 0xfff}, {0x4, 0x48bb, 0xfffffff0, 0x0, 0x1, 0x7ff}, {0x3, 0x1, 0x4, 0x0, 0xfffffffa, 0x80}, {0xd22, 0x4000, 0x0, 0x668, 0x2, 0x4}, {0x401, 0xfffffff7, 0x9, 0x6, 0xfffffff0, 0x9}, {0x1, 0x1, 0x3, 0xffff, 0x1, 0xa}, {0x10000, 0x80000000, 0x7, 0x3, 0x1}, {0x56, 0xa96b, 0x9, 0x4, 0x3ff, 0x6}, {0x800, 0x8, 0x380000, 0x3bb9, 0x1, 0xe}, {0x8, 0x8, 0x4af9edf5, 0xd67a, 0x2, 0x45dd}, {0x8, 0x6, 0x78e, 0x6, 0x3, 0x2}, {0x8, 0x4e, 0x6, 0x100, 0x5, 0x200}, {0x5, 0x9, 0x4, 0x784, 0x1ff}, {0x10000000, 0xf, 0x200, 0x1, 0xffffffff, 0x6}, {0xfec1437, 0x38, 0x0, 0xe, 0x5cc8, 0x5}, {0x8, 0x4, 0xfffffe00, 0x3, 0x4, 0xfffffff8}, {0x400, 0x9, 0x0, 0x9ab6, 0x6, 0x700000}, {0x200, 0x7d0e3b03, 0x6, 0x8, 0x9, 0x7}, {0x7, 0x1, 0x3, 0x400, 0x6, 0x97}, {0x8, 0x319, 0xbf7, 0x2, 0x5, 0x3}, {0xe6f, 0xffffff81, 0x2, 0x4, 0x4, 0x5}, {0x3, 0xc05, 0x4, 0xfffffff1, 0x3, 0x8e}, {0xc, 0x1, 0x3, 0x255, 0x696, 0x2}, {0x7fffffff, 0x4d4, 0x56d, 0xa, 0x5, 0x4}, {0x1, 0x9, 0x100, 0x9, 0xfffffff1, 0x1}, {0x6, 0x10000, 0xffffffff, 0x81, 0x8, 0x1}, {0x10001, 0x6, 0x5, 0x6, 0x7fff, 0x101}, {0x6, 0xfffffffe, 0x9, 0xc, 0x0, 0x1}, {0x4, 0x9, 0x100, 0x9, 0x5}, {0x1000, 0x2, 0x0, 0x1, 0x5, 0xa20c}, {0x40, 0x1, 0x9, 0xfffffffa, 0xffffffff, 0x5}, {0xd, 0x2312c86f, 0xfffffba9, 0x8, 0xfffffff8, 0x1}, {0x1, 0xc0, 0x1, 0x7fff, 0x1ac, 0x2}, {0x0, 0x5, 0x8, 0x4, 0xfe7, 0x1ff}, {0x3, 0x7, 0x4, 0x5, 0xeb, 0x7dced482}, {0x9, 0x7, 0x7, 0x7, 0x9, 0x101}, {0x6, 0xf002, 0x7ff, 0x5, 0x4, 0x4}, {0x2, 0x80, 0x5, 0x80000000, 0x4af, 0x4}, {0x3, 0x1, 0x851, 0x2, 0x4, 0x1}, {0x0, 0x1, 0x8, 0x5, 0x1, 0x9}, {0x6, 0x8, 0x1000, 0x18, 0x9, 0x7}, {0x2, 0x327a883f, 0x71, 0x80000001, 0x101, 0x1ff}, {0x3, 0xfffffff8, 0x213, 0x4, 0xef40, 0xd1}, {0x0, 0xffff, 0x3, 0xf, 0x4}, {0x9, 0x8001, 0x7, 0xaef, 0x8, 0x80000000}, {0x7, 0xfffffffc, 0x15a3, 0x7d, 0xcd35, 0x8}, {0x4, 0x3, 0x4, 0x423, 0x6ad}, {0x5, 0x8, 0x908, 0x0, 0xb35, 0xa7}, {0x7, 0x30, 0x1, 0x80000001, 0x2, 0xff}, {0x0, 0x800, 0x5, 0x8001, 0x2, 0x8000}, {0x1, 0x2b0eccd5, 0x7f, 0xc0, 0xb1, 0x8}, {0xa, 0x80, 0xfffffffd, 0x3ff, 0x2}, {0xffffff00, 0x40000, 0x7, 0x683, 0xe1, 0x3}], [{0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x82fd130e52950f21}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x2}, {0x7}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {}, {0x3}, {0x3}, {0x5, 0x1}, {0x2, 0x5a06391464af8c75}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x5df81d976022f41d}, {}, {0x6}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {}, {0x1}, {0x1}, {0x7}, {}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0xea80881ebaa5e974}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x4}, {0x1}, {0x4}, {0x2}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x3}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0xf04}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.427970148s ago: executing program 9 (id=2152): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.982187173s ago: executing program 8 (id=2154): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffe84, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a00d000000020006fb0a0002000a0ada1b40d805481100c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 1.891272746s ago: executing program 3 (id=2156): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000032090000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="06000000040000007c0500000a"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r2, 0x0, 0x1ba8847c99}, 0x38) 1.806796848s ago: executing program 8 (id=2158): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0xfffffffffffffd34, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xfff5) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 1.610844276s ago: executing program 2 (id=2160): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) 1.509718859s ago: executing program 2 (id=2161): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4a6b, &(0x7f0000000040)={0x0, 0x4053, 0xc000, 0x7, 0x20002f7}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.48119906s ago: executing program 9 (id=2162): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/55, 0x37}], 0x1, 0xfffffffd, 0xfffffefc) 1.410345512s ago: executing program 2 (id=2165): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000e40)={@val={0x0, 0x8863}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x2, 0x0, 0x1}}, {@generic={0x892f}}}}, 0x1a) 1.329657775s ago: executing program 9 (id=2167): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xc27, @empty, 0x6}, 0x1c) close_range(r1, r1, 0x40000000000) 1.285673457s ago: executing program 9 (id=2169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fffffff}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc), 0x5, 0x800000, 0x0, &(0x7f0000048000)=0xfffffffd, 0x1f) 1.242451288s ago: executing program 2 (id=2170): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x45, 0x76a, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x62042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='H', 0x1, 0x29000) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5402, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 1.215405799s ago: executing program 7 (id=2171): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@debug}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x4a8e) 1.152397051s ago: executing program 3 (id=2172): unshare(0x6020400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) read$char_usb(r2, &(0x7f00000001c0)=""/218, 0xda) 1.098613883s ago: executing program 3 (id=2173): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) 981.772257ms ago: executing program 8 (id=2174): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 981.631046ms ago: executing program 2 (id=2175): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 981.572606ms ago: executing program 3 (id=2176): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r1, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1}, 0x2}], 0x1, 0x40002100, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xffc1) 845.864901ms ago: executing program 3 (id=2177): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/55, 0x37}], 0x1, 0xfffffffd, 0xfffffefc) 845.764021ms ago: executing program 7 (id=2178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 815.092122ms ago: executing program 7 (id=2179): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x80000002, 0x0, &(0x7f0000000080)) 711.106196ms ago: executing program 3 (id=2180): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000080)={[{@auto_da_alloc}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}, {@usrquota}, {@bh}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x6c7e, 0x100000002, 0x1000000000000000, 0x4}) 710.987906ms ago: executing program 7 (id=2181): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) creat(0x0, 0x10) r0 = syz_clone(0x82000400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff09) 655.620857ms ago: executing program 7 (id=2182): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdffffff"], 0xfc}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, @perf_config_ext={0xd07, 0x20040}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000001200000026bd7000fcdbdf2508060a014e244e23f8ffffff03000000060000000000000000040000090000000800000009000000", @ANYRES32=0x0, @ANYBLOB="010000000000004c600000000b0000000d000100f102dcf29effaefacc"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffffff186400000300000000000000020000009500000000000000ce39c063026b3615bd4a0ee7cc"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 478.239904ms ago: executing program 7 (id=2183): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f00000002c0)=ANY=[], 0xfc, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 412.834636ms ago: executing program 9 (id=2184): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file1\x00', 0x1000000, &(0x7f0000000b40)=ANY=[], 0xfe, 0x121c, &(0x7f00000024c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000005880)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000005840)={r1, 0x58, &(0x7f00000001c0)}, 0x10) 59.345548ms ago: executing program 8 (id=2185): r0 = socket$inet(0x2, 0x3, 0x2) r1 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x80, @vifc_lcl_addr=@loopback, @multicast2}, 0x10) 0s ago: executing program 2 (id=2186): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 0][ T4505] team0 (unregistering): Port device team_slave_1 removed [ 79.071008][ T4505] team0 (unregistering): Port device team_slave_0 removed [ 79.105369][ T5884] chnl_net:caif_netlink_parms(): no params data found [ 79.160529][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.168560][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.175972][ T5884] bridge_slave_0: entered allmulticast mode [ 79.184444][ T5884] bridge_slave_0: entered promiscuous mode [ 79.191748][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.199021][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.206487][ T5884] bridge_slave_1: entered allmulticast mode [ 79.213507][ T5884] bridge_slave_1: entered promiscuous mode [ 79.227777][ T4486] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.246861][ T5884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.262621][ T5884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.283722][ T5884] team0: Port device team_slave_0 added [ 79.290576][ T5884] team0: Port device team_slave_1 added [ 79.349442][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.369085][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.397397][ T5884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.409671][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.416834][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.446877][ T5884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.534224][ T5884] hsr_slave_0: entered promiscuous mode [ 79.559184][ T5884] hsr_slave_1: entered promiscuous mode [ 79.577556][ T5884] debugfs: 'hsr0' already exists in 'hsr' [ 79.598467][ T5884] Cannot create hsr debugfs directory [ 79.628344][ T4505] IPVS: stop unused estimator thread 0... [ 79.830417][ T5884] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 79.848627][ T6032] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.867894][ T6032] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.912713][ T5884] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 79.928502][ T5884] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 79.949338][ T5884] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 80.021121][ T4442] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.040727][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.088914][ T5884] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.109277][ T4505] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.116428][ T4505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.137926][ T4507] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.145150][ T4507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.331831][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.343374][ T6070] netlink: 12 bytes leftover after parsing attributes in process `syz.5.952'. [ 80.599635][ T5884] veth0_vlan: entered promiscuous mode [ 80.622237][ T5884] veth1_vlan: entered promiscuous mode [ 80.640541][ T5884] veth0_macvtap: entered promiscuous mode [ 80.648409][ T5884] veth1_macvtap: entered promiscuous mode [ 80.659114][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.667876][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.675981][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 80.676038][ T28] audit: type=1400 audit(1775151837.118:828): avc: denied { read } for pid=6097 comm="syz.2.958" lport=37862 faddr=fc01:: fport=20019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.695229][ T4490] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.730035][ T4490] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.739985][ T4490] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.749857][ T4490] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.237775][ T28] audit: type=1400 audit(1775151837.678:829): avc: denied { read } for pid=6129 comm="syz.4.969" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.288487][ T6132] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 81.314422][ T6132] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 81.330334][ T6132] EXT4-fs (loop4): 1 truncate cleaned up [ 81.336121][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 81.336147][ C0] EXT4-fs (loop4): initial error at time 1775151837: ext4_mb_generate_buddy:1317 [ 81.336175][ C0] EXT4-fs (loop4): last error at time 1775151837: ext4_mb_generate_buddy:1317 [ 81.361798][ T6132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.391298][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.774923][ T6151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.847507][ T28] audit: type=1400 audit(1775151838.288:830): avc: denied { setattr } for pid=6159 comm="syz.6.983" name="/" dev="configfs" ino=2082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.878829][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.944947][ T6163] set_capacity_and_notify: 5 callbacks suppressed [ 81.944966][ T6163] loop6: detected capacity change from 0 to 1024 [ 81.995147][ T6163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.010713][ T6163] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #12: block 7: comm syz.6.985: bad entry in directory: directory entry overrun - offset=16, inode=327694, rec_len=1024, size=56 fake=0 [ 82.048626][ T28] audit: type=1400 audit(1775151838.488:831): avc: denied { bind } for pid=6174 comm="syz.2.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.083371][ T5884] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.138227][ T6181] loop6: detected capacity change from 0 to 512 [ 82.162994][ T6181] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.194058][ T6181] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.242295][ T6187] loop3: detected capacity change from 0 to 256 [ 82.307059][ T6187] FAT-fs (loop3): Directory bread(block 64) failed [ 82.362919][ T6187] FAT-fs (loop3): Directory bread(block 65) failed [ 82.369617][ T6187] FAT-fs (loop3): Directory bread(block 66) failed [ 82.394644][ T6187] FAT-fs (loop3): Directory bread(block 67) failed [ 82.402853][ T6187] FAT-fs (loop3): Directory bread(block 68) failed [ 82.409490][ T6187] FAT-fs (loop3): Directory bread(block 69) failed [ 82.431443][ T6187] FAT-fs (loop3): Directory bread(block 70) failed [ 82.450794][ T6187] FAT-fs (loop3): Directory bread(block 71) failed [ 82.478178][ T6187] FAT-fs (loop3): Directory bread(block 72) failed [ 82.486430][ T6187] FAT-fs (loop3): Directory bread(block 73) failed [ 82.539216][ T5884] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.710309][ T6208] loop5: detected capacity change from 0 to 128 [ 82.799974][ T28] audit: type=1400 audit(1775151839.238:832): avc: denied { bind } for pid=6214 comm="syz.5.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.882947][ T6225] loop3: detected capacity change from 0 to 512 [ 82.919888][ T6225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.947133][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1009'. [ 82.961595][ T6225] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.149078][ T6239] loop2: detected capacity change from 0 to 1764 [ 83.187399][ T6242] SELinux: failed to load policy [ 83.223744][ T28] audit: type=1400 audit(1775151839.658:833): avc: denied { mount } for pid=6238 comm="syz.2.1013" name="/" dev="loop2" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 83.251742][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.304562][ T28] audit: type=1400 audit(1775151839.748:834): avc: denied { unmount } for pid=3324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 83.388136][ T6255] loop2: detected capacity change from 0 to 128 [ 83.582734][ T6265] loop6: detected capacity change from 0 to 512 [ 83.602900][ T6265] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 83.655327][ T6265] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1035: bg 0: block 104: invalid block bitmap [ 83.680474][ T6273] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1029'. [ 83.697475][ T6265] loop6: lost filesystem error report for type 5 error -117 [ 83.697710][ T6265] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 83.705183][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 83.705208][ C1] EXT4-fs (loop6): initial error at time 1775151840: ext4_validate_block_bitmap:432 [ 83.705234][ C1] EXT4-fs (loop6): last error at time 1775151840: ext4_validate_block_bitmap:432 [ 83.739529][ T6265] loop6: lost filesystem error report for type 5 error -117 [ 83.739820][ T6265] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1035: invalid indirect mapped block 1 (level 1) [ 83.760511][ T6265] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 83.762284][ T6265] EXT4-fs (loop6): 1 truncate cleaned up [ 83.787752][ T6265] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.841073][ T5884] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.180705][ T6308] loop5: detected capacity change from 0 to 512 [ 84.202237][ T6308] EXT4-fs: Mount option(s) incompatible with ext2 [ 84.478419][ T6317] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 84.495212][ T6317] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 84.600077][ T6328] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1045'. [ 84.653617][ T6333] loop4: detected capacity change from 0 to 512 [ 84.684177][ T6332] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 84.695508][ T6333] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1047: inode has both inline data and extents flags [ 84.709786][ T6332] System zones: 0-2, 18-18, 34-34 [ 84.717882][ T6332] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 84.721614][ T6333] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.734613][ T6332] EXT4-fs (loop5): Remounting filesystem read-only [ 84.743800][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 84.743822][ C0] EXT4-fs (loop5): initial error at time 1775151841: ext4_mb_generate_buddy:1317 [ 84.743858][ C0] EXT4-fs (loop5): last error at time 1775151841: ext4_mb_generate_buddy:1317 [ 84.776780][ T6332] EXT4-fs (loop5): 1 truncate cleaned up [ 84.782507][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 84.782532][ C0] EXT4-fs (loop4): initial error at time 1775151841: ext4_orphan_get:1397: inode 15 [ 84.782580][ C0] EXT4-fs (loop4): last error at time 1775151841: ext4_orphan_get:1397: inode 15 [ 84.808405][ T4486] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 84.822549][ T6333] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1047: couldn't read orphan inode 15 (err -117) [ 84.845727][ T6333] loop4: lost filesystem error report for type 5 error -117 [ 84.846364][ T6333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.867146][ T6332] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.883289][ T4486] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 84.903145][ T6342] syzkaller1: entered promiscuous mode [ 84.911968][ T6332] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.914353][ T6342] syzkaller1: entered allmulticast mode [ 84.929547][ T4486] Quota error (device loop5): write_blk: dquota write failed [ 84.942005][ T6332] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.951621][ T4486] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 84.968842][ T4486] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 84.991953][ T6349] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=6349 comm=syz.6.1051 [ 85.028354][ T4486] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 85.101747][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.161842][ T6362] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 85.182036][ T6362] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1057: bg 0: block 104: invalid block bitmap [ 85.194706][ T6362] loop5: lost filesystem error report for type 5 error -117 [ 85.194936][ T6362] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 85.202288][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 85.202324][ C0] EXT4-fs (loop5): initial error at time 1775151841: ext4_validate_block_bitmap:432 [ 85.202350][ C0] EXT4-fs (loop5): last error at time 1775151841: ext4_validate_block_bitmap:432 [ 85.249826][ T6367] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.273729][ T6362] loop5: lost filesystem error report for type 5 error -117 [ 85.274006][ T6362] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1057: invalid indirect mapped block 1 (level 1) [ 85.295477][ T6367] ext4 filesystem being mounted at /228/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.321492][ T6362] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 85.323350][ T6362] EXT4-fs (loop5): 1 truncate cleaned up [ 85.339087][ T6362] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.360618][ T3324] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.384219][ T4442] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.489687][ T6383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1065'. [ 85.509272][ T6374] syz.2.1061: attempt to access beyond end of device [ 85.509272][ T6374] loop2: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 85.531562][ T6374] syz.2.1061: attempt to access beyond end of device [ 85.531562][ T6374] loop2: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 85.574764][ T6383] bond1: option primary_reselect: invalid value (8) [ 85.643657][ T4505] kworker/u8:17: attempt to access beyond end of device [ 85.643657][ T4505] loop2: rw=1, sector=138, nr_sectors = 2 limit=128 [ 85.651170][ T6383] bond1 (unregistering): Released all slaves [ 85.779556][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 85.779572][ T28] audit: type=1400 audit(1775151842.218:839): avc: denied { read } for pid=6402 comm="syz.4.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.878257][ T28] audit: type=1400 audit(1775151842.308:840): avc: denied { ioctl } for pid=6402 comm="syz.4.1073" path="socket:[14815]" dev="sockfs" ino=14815 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.989677][ T9] Process accounting resumed [ 85.995408][ T28] audit: type=1400 audit(1775151842.438:841): avc: denied { execute_no_trans } for pid=6425 comm="syz.6.1082" path="/29/file0" dev="tmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.181928][ T6442] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.226762][ T6442] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.388750][ T4505] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.399911][ T5884] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.450386][ T28] audit: type=1400 audit(1775151842.888:842): avc: denied { write } for pid=6432 comm="syz.5.1085" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 86.475052][ T28] audit: type=1400 audit(1775151842.888:843): avc: denied { ioctl } for pid=6432 comm="syz.5.1085" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 86.515034][ T6448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.522293][ T4505] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.594945][ T4505] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.627666][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.649748][ T4505] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.693631][ T28] audit: type=1326 audit(1775151843.128:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.5.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52219dc819 code=0x7ffc0000 [ 86.725841][ T28] audit: type=1326 audit(1775151843.158:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.5.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52219dc819 code=0x7ffc0000 [ 86.806801][ T6471] bridge0: entered promiscuous mode [ 86.884840][ T28] audit: type=1326 audit(1775151843.158:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.5.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52219dc819 code=0x7ffc0000 [ 86.929448][ C1] sd 0:0:1:0: [sda] tag#5953 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 86.938975][ T28] audit: type=1326 audit(1775151843.158:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.5.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f52219dc819 code=0x7ffc0000 [ 86.939986][ C1] sd 0:0:1:0: [sda] tag#5953 CDB: Read(6) 08 00 00 00 00 00 [ 86.998067][ T28] audit: type=1326 audit(1775151843.158:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.5.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52219dc819 code=0x7ffc0000 [ 87.036952][ T4505] bridge_slave_1: left allmulticast mode [ 87.042980][ T4505] bridge_slave_1: left promiscuous mode [ 87.049262][ T4505] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.057368][ T4505] bridge_slave_0: left allmulticast mode [ 87.063136][ T4505] bridge_slave_0: left promiscuous mode [ 87.068875][ T4505] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.164472][ T4505] bond0 (unregistering): left promiscuous mode [ 87.170691][ T4505] bond_slave_0: left promiscuous mode [ 87.176404][ T4505] bond_slave_1: left promiscuous mode [ 87.185630][ T4505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.195933][ T4505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.205912][ T4505] bond0 (unregistering): Released all slaves [ 87.266232][ T4505] tipc: Left network mode [ 87.279817][ T4505] hsr_slave_0: left promiscuous mode [ 87.285811][ T4505] hsr_slave_1: left promiscuous mode [ 87.292048][ T4505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.299576][ T4505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.313098][ T4505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.328850][ T4505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.351501][ T4505] veth1_macvtap: left allmulticast mode [ 87.361474][ T4505] veth1_macvtap: left promiscuous mode [ 87.367015][ T4505] veth0_macvtap: left promiscuous mode [ 87.375358][ T4505] veth1_vlan: left promiscuous mode [ 87.380705][ T4505] veth0_vlan: left promiscuous mode [ 87.527468][ T6456] chnl_net:caif_netlink_parms(): no params data found [ 87.591989][ T6456] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.610408][ T6456] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.618162][ T6456] bridge_slave_0: entered allmulticast mode [ 87.625023][ T6456] bridge_slave_0: entered promiscuous mode [ 87.632521][ T6456] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.639860][ T6456] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.647463][ T6456] bridge_slave_1: entered allmulticast mode [ 87.654599][ T6456] bridge_slave_1: entered promiscuous mode [ 87.673679][ T6456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.684423][ T6456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.741798][ T6456] team0: Port device team_slave_0 added [ 87.754858][ T6456] team0: Port device team_slave_1 added [ 87.790676][ T6456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.805288][ T6456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.835469][ T6456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.847183][ T6456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.854257][ T6456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.910355][ T6456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.968899][ T6558] set_capacity_and_notify: 7 callbacks suppressed [ 87.968931][ T6558] loop6: detected capacity change from 0 to 1024 [ 87.996238][ T6558] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 88.011131][ T6456] hsr_slave_0: entered promiscuous mode [ 88.020916][ T6558] EXT4-fs error (device loop6): ext4_map_blocks:786: inode #3: block 2: comm syz.6.1110: lblock 2 mapped to illegal pblock 2 (length 1) [ 88.035489][ T6558] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 88.035640][ T6558] EXT4-fs error (device loop6): ext4_map_blocks:786: inode #3: block 48: comm syz.6.1110: lblock 0 mapped to illegal pblock 48 (length 1) [ 88.044816][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 88.044843][ C0] EXT4-fs (loop6): initial error at time 1775151844: ext4_map_blocks:786: inode 3: block 2 [ 88.044887][ C0] EXT4-fs (loop6): last error at time 1775151844: ext4_map_blocks:786: inode 3: block 2 [ 88.056118][ T6456] hsr_slave_1: entered promiscuous mode [ 88.090311][ T6558] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 88.094121][ T6558] EXT4-fs error (device loop6): ext4_acquire_dquot:7026: comm syz.6.1110: Failed to acquire dquot type 0 [ 88.115192][ T6558] loop6: lost filesystem error report for type 5 error -117 [ 88.115722][ T6456] debugfs: 'hsr0' already exists in 'hsr' [ 88.128842][ T6558] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 88.138413][ T6456] Cannot create hsr debugfs directory [ 88.150340][ T6558] loop6: lost filesystem error report for type 5 error -117 [ 88.150447][ T6558] EXT4-fs error (device loop6): ext4_evict_inode:265: inode #11: comm syz.6.1110: mark_inode_dirty error [ 88.188553][ T6558] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 88.188751][ T6558] EXT4-fs warning (device loop6): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 88.212336][ T6558] EXT4-fs (loop6): 1 orphan inode deleted [ 88.223930][ T6558] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.241687][ T4505] EXT4-fs error (device loop6): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 88.258377][ T4505] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 88.258568][ T4505] EXT4-fs error (device loop6): ext4_release_dquot:7062: comm kworker/u8:17: Failed to release dquot type 0 [ 88.333061][ T6456] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 88.351167][ T6456] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 88.373895][ T6456] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 88.449122][ T5884] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.458566][ T5884] EXT4-fs error (device loop6): __ext4_get_inode_loc:4797: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 88.493859][ T6456] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 88.505500][ T5884] loop6: lost filesystem error report for type 5 error -117 [ 88.505695][ T5884] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 88.549380][ T5884] loop6: lost filesystem error report for type 5 error -117 [ 88.549488][ T5884] EXT4-fs error (device loop6): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 88.588421][ T5884] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 88.650734][ T6456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.738489][ T6456] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.802489][ T4486] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.809744][ T4486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.861921][ T4505] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.869168][ T4505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.009830][ T6456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.194084][ T6634] loop5: detected capacity change from 0 to 512 [ 89.213845][ T6637] loop2: detected capacity change from 0 to 128 [ 89.236998][ T6637] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.256900][ T6637] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 89.292045][ T6456] veth0_vlan: entered promiscuous mode [ 89.302645][ T6456] veth1_vlan: entered promiscuous mode [ 89.330924][ T4507] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 89.361457][ T6456] veth0_macvtap: entered promiscuous mode [ 89.377572][ T6456] veth1_macvtap: entered promiscuous mode [ 89.405519][ T6456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.425785][ T6456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.443554][ T4486] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.462324][ T4486] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.480463][ T4486] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.506918][ T4486] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.964485][ T6683] loop7: detected capacity change from 0 to 2048 [ 89.993899][ T6683] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.015141][ T6682] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 90.060156][ T6456] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.439950][ T6705] loop3: detected capacity change from 0 to 2048 [ 90.463141][ T6705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.536441][ T4486] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 90.563774][ T4486] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 83 with error 28 [ 90.576370][ T4486] EXT4-fs (loop3): This should not happen!! Data will be lost [ 90.576370][ T4486] [ 90.586490][ T4486] EXT4-fs (loop3): Total free blocks count 0 [ 90.592875][ T4486] EXT4-fs (loop3): Free/Dirty block details [ 90.598969][ T4486] EXT4-fs (loop3): free_blocks=2415919104 [ 90.605163][ T4486] EXT4-fs (loop3): dirty_blocks=96 [ 90.610488][ T4486] EXT4-fs (loop3): Block reservation details [ 90.616602][ T4486] EXT4-fs (loop3): i_reserved_data_blocks=6 [ 90.625053][ T3321] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 90.676659][ T6713] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1151'. [ 90.728804][ T6715] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 90.746986][ T6715] syzkaller0: ignored: set checksum disabled [ 90.770669][ T6715] syzkaller0: tun_chr_ioctl cmd 35111 [ 91.398448][ T3383] hid_parser_main: 8 callbacks suppressed [ 91.398471][ T3383] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 91.440052][ T3383] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 91.577884][ T6786] loop7: detected capacity change from 0 to 512 [ 91.590363][ T6786] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 91.604257][ T6786] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 91.612821][ T6786] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.1167: bad orphan inode 4 [ 91.623114][ T6786] loop7: lost filesystem error report for type 5 error -117 [ 91.631292][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 91.641473][ T6786] EXT4-fs (loop7): Remounting filesystem read-only [ 91.645103][ C0] EXT4-fs (loop7): initial error at time 1775151848: ext4_orphan_get:1423 [ 91.660181][ C0] EXT4-fs (loop7): last error at time 1775151848: ext4_orphan_get:1423 [ 91.670441][ T6786] EXT4-fs (loop7): 1 orphan inode deleted [ 92.031557][ T6823] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1177'. [ 92.040604][ T6823] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1177'. [ 92.122243][ T6832] tipc: Started in network mode [ 92.128320][ T6832] tipc: Node identity ac14140f, cluster identity 4711 [ 92.141690][ T6832] tipc: New replicast peer: 255.255.255.255 [ 92.174150][ T6832] tipc: Enabled bearer , priority 10 [ 92.206546][ T6838] loop3: detected capacity change from 0 to 512 [ 92.241949][ T6840] loop7: detected capacity change from 0 to 256 [ 92.259498][ T6838] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.329060][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 92.329081][ T28] audit: type=1400 audit(1775151848.768:868): avc: denied { ioctl } for pid=6837 comm="syz.3.1184" path="/269/bus/ext4" dev="loop3" ino=18 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 92.531376][ T28] audit: type=1400 audit(1775151848.958:869): avc: denied { remount } for pid=6856 comm="syz.6.1192" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 92.719559][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1198'. [ 92.761182][ T6873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.843511][ T28] audit: type=1400 audit(1775151849.288:870): avc: denied { getopt } for pid=6877 comm="syz.3.1201" lport=35720 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 92.845286][ T6873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.001861][ T28] audit: type=1326 audit(1775151849.448:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.6.1204" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9da7a8c819 code=0x0 [ 93.122936][ T6891] loop3: detected capacity change from 0 to 512 [ 93.174924][ T6891] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.216496][ T6891] ext4 filesystem being mounted at /276/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.236813][ T28] audit: type=1400 audit(1775151849.678:872): avc: denied { getopt } for pid=6889 comm="syz.3.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.301291][ T3396] tipc: Node number set to 2886997007 [ 93.318652][ T28] audit: type=1326 audit(1775151849.758:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.7.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d286ac819 code=0x7ffc0000 [ 93.409310][ T28] audit: type=1326 audit(1775151849.758:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.7.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d286ac819 code=0x7ffc0000 [ 93.447448][ T28] audit: type=1326 audit(1775151849.758:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.7.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f6d286ac819 code=0x7ffc0000 [ 93.486083][ T28] audit: type=1326 audit(1775151849.758:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.7.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d286ac819 code=0x7ffc0000 [ 93.528236][ T28] audit: type=1326 audit(1775151849.758:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6902 comm="syz.7.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d286ac819 code=0x7ffc0000 [ 93.777887][ T6949] loop5: detected capacity change from 0 to 1024 [ 93.790145][ T6949] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 93.884466][ T6949] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1227: Invalid block bitmap block 0 in block_group 0 [ 93.905225][ T6955] loop6: detected capacity change from 0 to 2048 [ 93.931144][ T6949] loop5: lost filesystem error report for type 5 error -117 [ 93.931290][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 93.945130][ C0] EXT4-fs (loop5): initial error at time 1775151850: ext4_read_block_bitmap_nowait:483 [ 93.954918][ C0] EXT4-fs (loop5): last error at time 1775151850: ext4_read_block_bitmap_nowait:483 [ 93.966813][ T6949] EXT4-fs error (device loop5): ext4_acquire_dquot:7026: comm syz.5.1227: Failed to acquire dquot type 0 [ 93.978098][ T6949] loop5: lost filesystem error report for type 5 error -117 [ 93.983346][ T6949] EXT4-fs error (device loop5): ext4_free_blocks:6724: comm syz.5.1227: Freeing blocks not in datazone - block = 0, count = 4096 [ 94.004328][ T6949] loop5: lost filesystem error report for type 5 error -117 [ 94.010429][ T6949] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1227: Invalid inode bitmap blk 0 in block_group 0 [ 94.032897][ T4507] EXT4-fs error (device loop5): ext4_release_dquot:7062: comm kworker/u8:18: Failed to release dquot type 0 [ 94.045538][ T6949] loop5: lost filesystem error report for type 5 error -117 [ 94.052670][ T6949] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 94.082823][ T4507] loop5: lost filesystem error report for type 5 error -117 [ 94.091325][ T6949] loop5: lost filesystem error report for type 5 error -117 [ 94.128328][ T6949] EXT4-fs (loop5): 1 orphan inode deleted [ 94.161974][ T6976] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1239'. [ 94.248661][ T6980] batadv_slave_1: entered promiscuous mode [ 94.261019][ T6979] batadv_slave_1: left promiscuous mode [ 94.413924][ T6997] netlink: 'syz.6.1247': attribute type 3 has an invalid length. [ 94.432211][ T6997] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1247'. [ 95.052117][ T7030] SELinux: policydb magic number 0xbb9b4302 does not match expected magic number 0xf97cff8c [ 95.091420][ T7030] SELinux: failed to load policy [ 95.258312][ T7039] FAT-fs (loop5): unable to read boot sector [ 95.316911][ T7045] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 95.441466][ T7056] loop3: detected capacity change from 0 to 256 [ 95.695810][ T7078] loop2: detected capacity change from 0 to 1024 [ 95.722496][ T7078] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.186036][ T7112] netlink: 'syz.5.1296': attribute type 12 has an invalid length. [ 96.246182][ T7112] netlink: 'syz.5.1296': attribute type 29 has an invalid length. [ 96.273750][ T7112] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1296'. [ 96.533663][ T7130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.559974][ T7130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.057122][ T10] kernel read not supported for file /member (pid: 10 comm: kworker/0:1) [ 97.134137][ T7162] loop6: detected capacity change from 0 to 128 [ 97.150401][ T7162] FAT-fs (loop6): bogus logical sector size 759 [ 97.164474][ T7162] FAT-fs (loop6): Can't find a valid FAT filesystem [ 97.248265][ T7170] loop5: detected capacity change from 0 to 1024 [ 97.269742][ T7170] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.659346][ T7199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.711691][ T7201] loop5: detected capacity change from 0 to 128 [ 97.752746][ T7204] netlink: 'syz.7.1331': attribute type 21 has an invalid length. [ 97.772005][ T7205] loop6: detected capacity change from 0 to 512 [ 97.776650][ T7204] IPv6: NLM_F_CREATE should be specified when creating new route [ 97.797017][ T7204] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.804339][ T7204] IPv6: NLM_F_CREATE should be set when creating new route [ 97.811609][ T7204] IPv6: NLM_F_CREATE should be set when creating new route [ 97.818890][ T7204] IPv6: NLM_F_CREATE should be set when creating new route [ 97.833145][ T7205] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.846519][ T7209] netlink: 'syz.2.1334': attribute type 4 has an invalid length. [ 97.854637][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 97.854655][ T28] audit: type=1400 audit(1775151854.288:953): avc: denied { setattr } for pid=7203 comm="syz.6.1333" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.906301][ T7209] netlink: 'syz.2.1334': attribute type 4 has an invalid length. [ 98.148924][ T7227] loop2: detected capacity change from 0 to 128 [ 98.180112][ T7227] FAT-fs (loop2): bogus logical sector size 759 [ 98.198469][ T7227] FAT-fs (loop2): Can't find a valid FAT filesystem [ 98.395132][ T7244] loop6: detected capacity change from 0 to 512 [ 98.435301][ T7244] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.483320][ T7253] loop5: detected capacity change from 0 to 256 [ 98.513426][ T28] audit: type=1400 audit(1775151854.958:954): avc: denied { map } for pid=7243 comm="syz.6.1350" path="/83/bus/blkio.bfq.group_wait_time" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 98.562798][ T7253] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.592280][ T7242] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1349'. [ 98.660395][ T7267] loop2: detected capacity change from 0 to 512 [ 98.712331][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1360'. [ 98.740226][ T7267] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.784194][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 98.807986][ T7271] FAT-fs (loop5): Filesystem has been set read-only [ 98.821456][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 98.846503][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 98.867331][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 98.884344][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 98.893363][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 98.901574][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 98.909695][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 98.918187][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 98.926601][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 98.934914][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 98.945063][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 98.953287][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 98.961656][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 98.969824][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 98.978240][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 98.986419][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 98.994805][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 99.003551][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 99.012090][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 99.020100][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 99.028397][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 99.036694][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 99.044920][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 99.056279][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 99.064740][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 99.072965][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 99.081750][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 99.089893][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 99.098122][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 99.106387][ T7271] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 99.498594][ T28] audit: type=1400 audit(1775151855.938:955): avc: denied { map } for pid=7312 comm="syz.5.1371" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 99.545951][ T7313] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 99.559227][ T7313] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0005 l2 [ 99.740800][ T7345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.761612][ T7345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.903015][ T7362] loop5: detected capacity change from 0 to 256 [ 100.062141][ T7375] loop5: detected capacity change from 0 to 512 [ 100.151871][ T7375] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.189856][ T28] audit: type=1400 audit(1775151856.628:956): avc: denied { mounton } for pid=7373 comm="syz.5.1390" path="/209/file0/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 100.325707][ T4442] EXT4-fs error (device loop5): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 100.373816][ T4442] EXT4-fs (loop5): Remounting filesystem read-only [ 100.407136][ T28] audit: type=1400 audit(1775151856.848:957): avc: denied { unlink } for pid=4442 comm="syz-executor" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.486904][ T4486] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 100.525367][ T4486] Quota error (device loop5): write_blk: dquota write failed [ 100.543060][ T4486] Quota error (device loop5): free_dqentry: Can't write quota data block 5 [ 100.754131][ T7335] Set syz1 is full, maxelem 65536 reached [ 100.783414][ T4507] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.855160][ T4507] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.904294][ T4507] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.964880][ T4507] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.076911][ T7433] chnl_net:caif_netlink_parms(): no params data found [ 101.089328][ T4507] bridge_slave_1: left allmulticast mode [ 101.095635][ T4507] bridge_slave_1: left promiscuous mode [ 101.101742][ T4507] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.111323][ T4507] bridge_slave_0: left allmulticast mode [ 101.119272][ T4507] bridge_slave_0: left promiscuous mode [ 101.125356][ T4507] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.232470][ T4507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.243090][ T4507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.256139][ T4507] bond0 (unregistering): Released all slaves [ 101.316933][ T4507] hsr_slave_0: left promiscuous mode [ 101.331306][ T4507] hsr_slave_1: left promiscuous mode [ 101.337247][ T4507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.345011][ T4507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.354001][ T4507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.369038][ T4507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.405926][ T4507] veth1_macvtap: left promiscuous mode [ 101.424545][ T4507] veth0_macvtap: left promiscuous mode [ 101.453538][ T4507] veth1_vlan: left promiscuous mode [ 101.456387][ T7491] loop6: detected capacity change from 0 to 1024 [ 101.465785][ T4507] veth0_vlan: left promiscuous mode [ 101.473456][ T7491] EXT4-fs: Ignoring removed bh option [ 101.481128][ T28] audit: type=1400 audit(1775151857.918:958): avc: denied { listen } for pid=7494 comm="syz.3.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 101.529912][ T7491] EXT4-fs mount: 23 callbacks suppressed [ 101.529929][ T7491] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.603365][ T5884] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.700124][ T7510] loop3: detected capacity change from 0 to 1024 [ 101.712008][ T7510] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 101.712008][ T7510] [ 101.750438][ T7505] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 101.764258][ T7505] SELinux: failed to load policy [ 101.779989][ T4507] team0 (unregistering): Port device team_slave_1 removed [ 101.803872][ T4507] team0 (unregistering): Port device team_slave_0 removed [ 101.877234][ T7433] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.887955][ T7433] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.896399][ T7433] bridge_slave_0: entered allmulticast mode [ 101.910293][ T7433] bridge_slave_0: entered promiscuous mode [ 101.933718][ T7433] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.944876][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.952420][ T7433] bridge_slave_1: entered allmulticast mode [ 101.959248][ T7433] bridge_slave_1: entered promiscuous mode [ 101.983585][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1426'. [ 101.993089][ T7525] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1426'. [ 102.002565][ T7433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.020394][ T50] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.026107][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1426'. [ 102.035649][ T7433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.039188][ T7525] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1426'. [ 102.058972][ T50] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.068034][ T50] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.091121][ T50] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.101970][ T7433] team0: Port device team_slave_0 added [ 102.109395][ T7433] team0: Port device team_slave_1 added [ 102.132707][ T7433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.139873][ T7433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.166440][ T7433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.245721][ T7433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.266515][ T7433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.303751][ T7433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.352391][ T7433] hsr_slave_0: entered promiscuous mode [ 102.358607][ T7433] hsr_slave_1: entered promiscuous mode [ 102.412127][ T28] audit: type=1400 audit(1775151858.858:959): avc: denied { firmware_load } for pid=7557 comm="syz.6.1430" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 102.646527][ T28] audit: type=1400 audit(1775151859.088:960): avc: denied { ioctl } for pid=7571 comm="syz.7.1434" path="socket:[18219]" dev="sockfs" ino=18219 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 102.695365][ T7433] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 102.746976][ T7433] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 102.789719][ T7433] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 102.818164][ T7592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.832158][ T7433] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 102.842267][ T7592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.876503][ T7596] loop2: detected capacity change from 0 to 512 [ 102.888242][ T7596] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 102.909245][ T7433] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.916588][ T7433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.936170][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1442'. [ 102.945660][ T4507] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.000778][ T7433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.022791][ T7433] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.033683][ T4486] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.040946][ T4486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.068724][ T4490] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.076739][ T4490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.159155][ T7433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.291986][ T7433] veth0_vlan: entered promiscuous mode [ 103.299976][ T7433] veth1_vlan: entered promiscuous mode [ 103.315310][ T7433] veth0_macvtap: entered promiscuous mode [ 103.323689][ T7433] veth1_macvtap: entered promiscuous mode [ 103.335065][ T7433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.347662][ T7433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.358220][ T4486] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.367243][ T4486] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.379056][ T4486] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.388003][ T4486] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.434082][ T28] audit: type=1400 audit(1775151859.878:961): avc: denied { write } for pid=7643 comm="syz.2.1446" path="socket:[18363]" dev="sockfs" ino=18363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.481906][ T7648] loop6: detected capacity change from 0 to 128 [ 103.648484][ T7666] futex_wake_op: syz.7.1454 tries to shift op by -1; fix this program [ 103.689542][ T28] audit: type=1326 audit(1775151860.128:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.8.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1b77c819 code=0x7ffc0000 [ 103.720373][ T28] audit: type=1326 audit(1775151860.128:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.8.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1b77c819 code=0x7ffc0000 [ 103.746076][ T28] audit: type=1326 audit(1775151860.128:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.8.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f1b77c819 code=0x7ffc0000 [ 103.746154][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 103.779773][ T28] audit: type=1326 audit(1775151860.128:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.8.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1b77c819 code=0x7ffc0000 [ 103.806196][ T28] audit: type=1326 audit(1775151860.128:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.8.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1b77c819 code=0x7ffc0000 [ 103.831116][ T28] audit: type=1326 audit(1775151860.128:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.8.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f9f1b77c819 code=0x7ffc0000 [ 103.856117][ T28] audit: type=1326 audit(1775151860.128:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.8.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1b77c819 code=0x7ffc0000 [ 103.881740][ T28] audit: type=1326 audit(1775151860.128:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.8.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f1b77c819 code=0x7ffc0000 [ 103.907619][ T28] audit: type=1326 audit(1775151860.128:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7668 comm="syz.8.1455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1b77c819 code=0x7ffc0000 [ 103.957386][ T7678] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1459'. [ 104.188049][ T7701] loop6: detected capacity change from 0 to 512 [ 104.198717][ T7701] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.1470: inode has both inline data and extents flags [ 104.220130][ T7701] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 104.220345][ T7701] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1470: couldn't read orphan inode 15 (err -117) [ 104.230165][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 104.230187][ C0] EXT4-fs (loop6): initial error at time 1775152372: ext4_orphan_get:1397: inode 15 [ 104.230234][ C0] EXT4-fs (loop6): last error at time 1775152372: ext4_orphan_get:1397: inode 15 [ 104.271017][ T7701] loop6: lost filesystem error report for type 5 error -117 [ 104.271642][ T7701] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.348248][ T5884] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.369732][ T7711] loop3: detected capacity change from 0 to 128 [ 104.681026][ T7734] loop2: detected capacity change from 0 to 8192 [ 104.781977][ T7740] loop6: detected capacity change from 0 to 128 [ 105.097487][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 105.119384][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 105.128831][ T7764] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1493'. [ 105.167718][ T7766] netlink: 164 bytes leftover after parsing attributes in process `syz.8.1496'. [ 105.311422][ T7784] loop8: detected capacity change from 0 to 512 [ 105.329649][ T7784] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.343050][ T7784] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.465781][ T7433] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.511972][ T7796] loop3: detected capacity change from 0 to 512 [ 105.521892][ T7796] EXT4-fs: Ignoring removed oldalloc option [ 105.536947][ T7798] loop8: detected capacity change from 0 to 512 [ 105.550790][ T7796] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1507: invalid block [ 105.563502][ T7796] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 105.563707][ T7796] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1507: invalid indirect mapped block 4294967295 (level 1) [ 105.573078][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 105.573095][ C1] EXT4-fs (loop3): initial error at time 1775152374: ext4_get_branch:178: inode 11: block 4294967295 [ 105.573158][ C1] EXT4-fs (loop3): last error at time 1775152374: ext4_get_branch:178: inode 11: block 4294967295 [ 105.617037][ T7798] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #3: comm syz.8.1508: corrupted inode contents [ 105.622033][ T7796] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 105.629172][ T7798] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 105.629498][ T7796] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1507: invalid indirect mapped block 4294967295 (level 1) [ 105.652065][ T7798] EXT4-fs error (device loop8): ext4_dirty_inode:6495: inode #3: comm syz.8.1508: mark_inode_dirty error [ 105.661526][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 105.661547][ C1] EXT4-fs (loop8): initial error at time 1775152374: ext4_do_update_inode:5602: inode 3 [ 105.661578][ C1] EXT4-fs (loop8): last error at time 1775152374: ext4_do_update_inode:5602: inode 3 [ 105.662318][ T7796] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 105.679887][ T7798] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 105.693327][ T7796] EXT4-fs (loop3): 2 truncates cleaned up [ 105.699936][ T7798] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #3: comm syz.8.1508: corrupted inode contents [ 105.712717][ T7796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.717221][ T7798] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 105.723709][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 105.746733][ T7798] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #3: comm syz.8.1508: mark_inode_dirty error [ 105.789951][ T7798] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 105.790138][ T7798] EXT4-fs error (device loop8): ext4_acquire_dquot:7026: comm syz.8.1508: Failed to acquire dquot type 0 [ 105.813548][ T7798] loop8: lost filesystem error report for type 5 error -117 [ 105.859710][ T7798] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #16: comm syz.8.1508: corrupted inode contents [ 105.909444][ T7798] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 105.909637][ T7798] EXT4-fs error (device loop8): ext4_dirty_inode:6495: inode #16: comm syz.8.1508: mark_inode_dirty error [ 105.958779][ T7798] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 105.971079][ T7798] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #16: comm syz.8.1508: corrupted inode contents [ 105.996191][ T7814] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.011002][ T7798] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #16: comm syz.8.1508: mark_inode_dirty error [ 106.022828][ T7798] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #16: comm syz.8.1508: corrupted inode contents [ 106.035204][ T7798] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 106.044178][ T7798] loop8: lost filesystem error report for type 5 error -117 [ 106.044379][ T7798] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #16: comm syz.8.1508: corrupted inode contents [ 106.067694][ T7814] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.078815][ T7798] EXT4-fs error (device loop8): ext4_truncate:4602: inode #16: comm syz.8.1508: mark_inode_dirty error [ 106.090444][ T7798] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 106.099826][ T7798] loop8: lost filesystem error report for type 5 error -117 [ 106.100483][ T7798] EXT4-fs (loop8): 1 truncate cleaned up [ 106.143237][ T7798] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.169520][ T7814] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.180496][ T7798] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.206906][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.220170][ T7820] syzkaller1: entered promiscuous mode [ 106.225705][ T7798] EXT4-fs warning (device loop8): ext4_es_cache_extent:1082: inode #3: comm syz.8.1508: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 106.225705][ T7798] [ 106.225894][ T7820] syzkaller1: entered allmulticast mode [ 106.266673][ T7814] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.283059][ T7824] ip6gre2: entered allmulticast mode [ 106.334520][ T7433] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.390378][ T4486] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.403706][ T7834] loop2: detected capacity change from 0 to 512 [ 106.420643][ T36] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.425633][ T7834] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.436991][ T36] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.467297][ T50] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.479482][ T7834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 106.493413][ T7834] ext4 filesystem being mounted at /314/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.519112][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 106.662493][ T7854] loop6: detected capacity change from 0 to 512 [ 106.683254][ T7854] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #3: comm syz.6.1528: corrupted inode contents [ 106.696820][ T7854] EXT4-fs error (device loop6): ext4_dirty_inode:6495: inode #3: comm syz.6.1528: mark_inode_dirty error [ 106.708186][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 106.708208][ C0] EXT4-fs (loop6): initial error at time 1775152375: ext4_do_update_inode:5602: inode 3 [ 106.708261][ C0] EXT4-fs (loop6): last error at time 1775152375: ext4_do_update_inode:5602: inode 3 [ 106.756375][ T7864] netlink: 'syz.8.1532': attribute type 1 has an invalid length. [ 106.764988][ T7864] netlink: 'syz.8.1532': attribute type 4 has an invalid length. [ 106.802801][ T7854] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #3: comm syz.6.1528: corrupted inode contents [ 106.819495][ T7854] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #3: comm syz.6.1528: mark_inode_dirty error [ 106.832186][ T7854] EXT4-fs error (device loop6): ext4_acquire_dquot:7026: comm syz.6.1528: Failed to acquire dquot type 0 [ 106.843807][ T7854] loop6: lost filesystem error report for type 5 error -117 [ 106.849698][ T7854] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #16: comm syz.6.1528: corrupted inode contents [ 106.895378][ T7854] EXT4-fs error (device loop6): ext4_dirty_inode:6495: inode #16: comm syz.6.1528: mark_inode_dirty error [ 106.923065][ T7854] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #16: comm syz.6.1528: corrupted inode contents [ 106.937763][ T7854] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.1528: mark_inode_dirty error [ 106.952195][ T7854] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #16: comm syz.6.1528: corrupted inode contents [ 106.967589][ T7885] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 106.978555][ T7854] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 106.987243][ T7854] loop6: lost filesystem error report for type 5 error -117 [ 106.987620][ T7854] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #16: comm syz.6.1528: corrupted inode contents [ 106.991106][ T7885] EXT4-fs (loop8): 1 truncate cleaned up [ 107.013961][ T7854] EXT4-fs error (device loop6): ext4_truncate:4602: inode #16: comm syz.6.1528: mark_inode_dirty error [ 107.032753][ T7854] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 107.036090][ T7885] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.053784][ T7854] loop6: lost filesystem error report for type 5 error -117 [ 107.055380][ T7854] EXT4-fs (loop6): 1 truncate cleaned up [ 107.069273][ T7854] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.084120][ T7854] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.101139][ T7854] EXT4-fs warning (device loop6): ext4_es_cache_extent:1082: inode #3: comm syz.6.1528: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 107.101139][ T7854] [ 107.134123][ T7433] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.188039][ T5884] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.600266][ T7918] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #3: comm syz.3.1552: corrupted inode contents [ 107.645067][ T7918] EXT4-fs error (device loop3): ext4_dirty_inode:6495: inode #3: comm syz.3.1552: mark_inode_dirty error [ 107.656394][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 107.656417][ C1] EXT4-fs (loop3): initial error at time 1775152376: ext4_do_update_inode:5602: inode 3 [ 107.656455][ C1] EXT4-fs (loop3): last error at time 1775152376: ext4_do_update_inode:5602: inode 3 [ 107.715237][ T7918] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #3: comm syz.3.1552: corrupted inode contents [ 107.742235][ T7918] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.1552: mark_inode_dirty error [ 107.761538][ T7918] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.1552: Failed to acquire dquot type 0 [ 107.786932][ T7928] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.791384][ T7918] loop3: lost filesystem error report for type 5 error -117 [ 107.812303][ T7918] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #16: comm syz.3.1552: corrupted inode contents [ 107.832150][ T7928] ext4 filesystem being mounted at /119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 107.892318][ T7918] EXT4-fs error (device loop3): ext4_dirty_inode:6495: inode #16: comm syz.3.1552: mark_inode_dirty error [ 107.911310][ T7918] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #16: comm syz.3.1552: corrupted inode contents [ 107.927643][ T5884] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.937089][ T7918] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.1552: mark_inode_dirty error [ 107.959677][ T7918] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #16: comm syz.3.1552: corrupted inode contents [ 107.991577][ T7918] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 108.021277][ T7918] loop3: lost filesystem error report for type 5 error -117 [ 108.031996][ T7918] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #16: comm syz.3.1552: corrupted inode contents [ 108.064108][ T7918] EXT4-fs error (device loop3): ext4_truncate:4602: inode #16: comm syz.3.1552: mark_inode_dirty error [ 108.097193][ T7918] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 108.111365][ T7918] loop3: lost filesystem error report for type 5 error -117 [ 108.112651][ T7918] EXT4-fs (loop3): 1 truncate cleaned up [ 108.133210][ T7918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.148579][ T7918] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.181339][ T7918] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #3: comm syz.3.1552: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 108.181339][ T7918] [ 108.268797][ T7957] syzkaller1: entered promiscuous mode [ 108.276237][ T7957] syzkaller1: entered allmulticast mode [ 108.285508][ T7958] netlink: 'syz.2.1564': attribute type 2 has an invalid length. [ 108.294203][ T7958] netlink: 'syz.2.1564': attribute type 1 has an invalid length. [ 108.302130][ T7958] __nla_validate_parse: 3 callbacks suppressed [ 108.302146][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1564'. [ 108.357864][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.604535][ T7990] set_capacity_and_notify: 4 callbacks suppressed [ 108.604629][ T7990] loop3: detected capacity change from 0 to 256 [ 108.964194][ T8001] loop6: detected capacity change from 0 to 256 [ 108.979095][ T8001] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.000983][ T8001] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.289943][ T8032] netlink: 'syz.8.1593': attribute type 21 has an invalid length. [ 109.302280][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1593'. [ 109.333843][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 109.333858][ T28] audit: type=1400 audit(1775152377.777:1018): avc: denied { unmount } for pid=3324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 109.339984][ T8032] netlink: 'syz.8.1593': attribute type 21 has an invalid length. [ 109.340314][ T50] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.362471][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1593'. [ 109.393005][ T50] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.403552][ T50] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.412806][ T50] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.692485][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1604'. [ 109.701856][ T8057] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1604'. [ 109.711203][ T8057] netlink: 'syz.8.1604': attribute type 7 has an invalid length. [ 109.720258][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1604'. [ 109.729614][ T8057] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1604'. [ 109.738756][ T8057] netlink: 'syz.8.1604': attribute type 7 has an invalid length. [ 109.857772][ T8065] netlink: 'syz.8.1608': attribute type 39 has an invalid length. [ 109.986381][ T8072] IPVS: sync thread started: state = MASTER, mcast_ifn = ip_vti0, syncid = 4, id = 0 [ 110.007422][ T8070] can0: slcan on ttyS3. [ 110.023375][ T8070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.045847][ T8070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.074316][ T8076] loop2: detected capacity change from 0 to 512 [ 110.102950][ T8076] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.138509][ T8076] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.141372][ T8070] can0 (unregistered): slcan off ttyS3. [ 110.174780][ T8076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.212229][ T8076] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.360683][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.685230][ T8128] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.687675][ T28] audit: type=1400 audit(1775152379.127:1019): avc: denied { create } for pid=8129 comm="syz.6.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 110.696367][ T8128] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.765135][ T28] audit: type=1400 audit(1775152379.207:1020): avc: denied { mounton } for pid=8133 comm="syz.3.1624" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 110.819112][ T8128] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.917783][ T8128] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.985891][ T8128] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.013465][ T8128] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.078480][ T8128] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.103562][ T8128] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.201336][ T28] audit: type=1400 audit(1775152379.637:1021): avc: denied { bind } for pid=8153 comm="syz.3.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 111.227083][ T4507] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.244913][ T4507] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.257358][ T28] audit: type=1400 audit(1775152379.647:1022): avc: denied { listen } for pid=8153 comm="syz.3.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 111.295572][ T4505] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.310263][ T4505] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.330099][ T4505] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.339932][ T8158] loop6: detected capacity change from 0 to 1764 [ 111.352569][ T4505] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.357192][ T8158] ISOFS: Unable to identify CD-ROM format. [ 111.389931][ T4505] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.418408][ T4505] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.439901][ T8161] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.1633'. [ 111.466043][ T28] audit: type=1400 audit(1775152379.907:1023): avc: denied { accept } for pid=8163 comm="syz.6.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.568178][ T8173] loop6: detected capacity change from 0 to 128 [ 111.581635][ T8171] loop2: detected capacity change from 0 to 2048 [ 111.592470][ T8173] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 111.618345][ T8171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.650957][ T8173] FAT-fs (loop6): error, invalid FAT chain (i_pos 548, last_block 8) [ 111.669790][ T8173] FAT-fs (loop6): Filesystem has been set read-only [ 111.707452][ T8173] FAT-fs (loop6): error, corrupted file size (i_pos 548, 522) [ 111.748900][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.761273][ T8173] FAT-fs (loop6): error, corrupted file size (i_pos 548, 522) [ 112.004848][ T8203] loop3: detected capacity change from 0 to 512 [ 112.009783][ T8205] xt_hashlimit: size too large, truncated to 1048576 [ 112.032602][ T8206] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.053890][ T8203] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 112.071907][ T8203] EXT4-fs (loop3): 1 orphan inode deleted [ 112.077777][ T8203] EXT4-fs (loop3): 1 truncate cleaned up [ 112.083973][ T8203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.132185][ T8206] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.153702][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.254055][ T8206] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.320611][ T8206] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.441971][ T50] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.479912][ T50] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.527630][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.555492][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.606952][ T8221] loop3: detected capacity change from 0 to 8192 [ 113.118270][ T8255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.367826][ T8272] bridge0: port 3(ipvlan2) entered blocking state [ 113.376800][ T8272] bridge0: port 3(ipvlan2) entered disabled state [ 113.385107][ T8272] ipvlan2: entered allmulticast mode [ 113.391336][ T8272] bridge0: entered allmulticast mode [ 113.398100][ T8272] ipvlan2: left allmulticast mode [ 113.403987][ T8272] bridge0: left allmulticast mode [ 114.013216][ T8308] bridge0: port 3(ipvlan2) entered blocking state [ 114.020108][ T8308] bridge0: port 3(ipvlan2) entered disabled state [ 114.027374][ T8308] ipvlan2: entered allmulticast mode [ 114.033609][ T8308] bridge0: entered allmulticast mode [ 114.039731][ T8308] ipvlan2: left allmulticast mode [ 114.045176][ T8308] bridge0: left allmulticast mode [ 114.536806][ T8328] netlink: 'syz.8.1696': attribute type 7 has an invalid length. [ 114.544841][ T8328] netlink: 'syz.8.1696': attribute type 7 has an invalid length. [ 114.650447][ T8338] loop3: detected capacity change from 0 to 256 [ 114.660441][ T8338] FAT-fs (loop3): bogus number of FAT sectors [ 114.667116][ T8338] FAT-fs (loop3): Can't find a valid FAT filesystem [ 115.260428][ T8370] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1708'. [ 115.280631][ T8370] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1708'. [ 115.437228][ T8398] loop3: detected capacity change from 0 to 256 [ 116.585444][ T8288] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.706281][ T8425] loop3: detected capacity change from 0 to 1024 [ 116.743515][ T8425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.012010][ T8457] loop6: detected capacity change from 0 to 256 [ 117.113969][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.275725][ T8478] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.296089][ T8478] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.342781][ T8484] netlink: 'syz.2.1741': attribute type 10 has an invalid length. [ 117.380327][ T8484] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.421346][ T8484] bond0: (slave team0): Enslaving as an active interface with an up link [ 117.523685][ T8478] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.550720][ T8478] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.610012][ T8478] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.629679][ T8478] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.752727][ T8503] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.1750'. [ 117.791884][ T8478] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.797454][ T8507] loop6: detected capacity change from 0 to 764 [ 117.829056][ T8478] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.831740][ T8507] ISOFS: unable to read i-node block [ 117.894768][ T8511] netlink: 'syz.2.1754': attribute type 9 has an invalid length. [ 117.903818][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1754'. [ 117.952605][ T8511] netlink: 'syz.2.1754': attribute type 9 has an invalid length. [ 117.960562][ T4501] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.960658][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1754'. [ 117.979793][ T4501] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.015785][ T4501] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.064535][ T4501] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.123769][ T4501] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.159904][ T4501] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.563127][ T4505] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.571443][ T4505] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.595857][ T4501] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.611319][ T4501] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.633595][ T4501] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.661902][ T4501] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.972347][ T8545] loop3: detected capacity change from 0 to 128 [ 118.990289][ T8545] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 119.013017][ T8545] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 119.020974][ T8545] FAT-fs (loop3): Filesystem has been set read-only [ 119.027860][ T8545] syz.3.1776: attempt to access beyond end of device [ 119.027860][ T8545] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 119.061571][ T8553] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 119.061571][ T8553] The task syz.8.1768 (8553) triggered the difference, watch for misbehavior. [ 119.174493][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1777'. [ 119.183913][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1777'. [ 119.228118][ T28] audit: type=1400 audit(1775152387.667:1024): avc: denied { write } for pid=8572 comm="syz.2.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 119.386386][ T3499] kernel write not supported for file bpf-prog (pid: 3499 comm: kworker/0:5) [ 119.547723][ T8605] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1794'. [ 119.557112][ T8605] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1794'. [ 119.714092][ T28] audit: type=1400 audit(1775152388.157:1025): avc: denied { watch } for pid=8616 comm="syz.7.1799" path="/154/file0" dev="tmpfs" ino=809 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 119.765829][ T8619] loop2: detected capacity change from 0 to 128 [ 120.011871][ T4490] kworker/u8:12: attempt to access beyond end of device [ 120.011871][ T4490] loop2: rw=1, sector=145, nr_sectors = 40 limit=128 [ 120.033257][ T4490] kworker/u8:12: attempt to access beyond end of device [ 120.033257][ T4490] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 120.054475][ T4490] kworker/u8:12: attempt to access beyond end of device [ 120.054475][ T4490] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 120.068064][ T28] audit: type=1400 audit(1775152388.497:1026): avc: denied { append } for pid=8630 comm="syz.8.1805" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.103852][ T4490] kworker/u8:12: attempt to access beyond end of device [ 120.103852][ T4490] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 120.117841][ T4490] kworker/u8:12: attempt to access beyond end of device [ 120.117841][ T4490] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 120.128616][ T8635] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1807'. [ 120.132947][ T4490] kworker/u8:12: attempt to access beyond end of device [ 120.132947][ T4490] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 120.154441][ T4490] kworker/u8:12: attempt to access beyond end of device [ 120.154441][ T4490] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 120.180445][ T4490] kworker/u8:12: attempt to access beyond end of device [ 120.180445][ T4490] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 120.205563][ T4490] kworker/u8:12: attempt to access beyond end of device [ 120.205563][ T4490] loop2: rw=1, sector=305, nr_sectors = 8 limit=128 [ 120.409504][ T8658] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 120.434754][ T8658] bond1: (slave lo): Enslaving as an active interface with an up link [ 120.455349][ T8658] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 120.667771][ T4505] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.733152][ T4505] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.793016][ T4505] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.855185][ T4505] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.937061][ T8693] loop8: detected capacity change from 0 to 8192 [ 120.957452][ T8680] chnl_net:caif_netlink_parms(): no params data found [ 120.971326][ T8693] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 120.979054][ T8693] FAT-fs (loop8): Filesystem has been set read-only [ 121.027569][ T4505] bridge_slave_1: left allmulticast mode [ 121.038638][ T4505] bridge_slave_1: left promiscuous mode [ 121.044588][ T4505] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.053196][ T4505] bridge_slave_0: left allmulticast mode [ 121.062730][ T4505] bridge_slave_0: left promiscuous mode [ 121.068541][ T4505] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.163570][ T4505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.173952][ T4505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.183871][ T4505] bond0 (unregistering): Released all slaves [ 121.239385][ T4505] hsr_slave_0: left promiscuous mode [ 121.245560][ T4505] hsr_slave_1: left promiscuous mode [ 121.251335][ T4505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.259841][ T4505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.268777][ T4505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.276676][ T4505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.301371][ T4505] veth1_macvtap: left promiscuous mode [ 121.307025][ T4505] veth0_macvtap: left promiscuous mode [ 121.314828][ T4505] veth1_vlan: left promiscuous mode [ 121.323842][ T4505] veth0_vlan: left promiscuous mode [ 121.382551][ T28] audit: type=1326 audit(1775152389.827:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8669 comm="syz.7.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d286ac819 code=0x7fc00000 [ 121.489598][ T4505] team0 (unregistering): Port device team_slave_1 removed [ 121.506772][ T4505] team0 (unregistering): Port device team_slave_0 removed [ 121.545284][ T8680] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.552683][ T8680] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.560125][ T8680] bridge_slave_0: entered allmulticast mode [ 121.566931][ T8680] bridge_slave_0: entered promiscuous mode [ 121.573941][ T8680] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.581166][ T8680] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.588583][ T8680] bridge_slave_1: entered allmulticast mode [ 121.595125][ T8680] bridge_slave_1: entered promiscuous mode [ 121.613682][ T8680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.624453][ T8680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.645367][ T8680] team0: Port device team_slave_0 added [ 121.652472][ T8680] team0: Port device team_slave_1 added [ 121.668847][ T8680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.675875][ T8680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.701839][ T8680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.713352][ T8680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.720334][ T8680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.746438][ T8680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.777732][ T8680] hsr_slave_0: entered promiscuous mode [ 121.784022][ T8680] hsr_slave_1: entered promiscuous mode [ 121.790080][ T8680] debugfs: 'hsr0' already exists in 'hsr' [ 121.795929][ T8680] Cannot create hsr debugfs directory [ 121.896789][ T8680] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 121.906164][ T8680] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 121.924056][ T8680] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 121.945287][ T8680] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 122.000507][ T8754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.016674][ T8754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.036549][ T8755] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1837'. [ 122.055574][ T8754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.065583][ T8754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.123814][ T8680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.163694][ T3403] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 122.180956][ T3403] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 122.489206][ T8680] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.497462][ T8777] tipc: Enabling of bearer rejected, failed to enable media [ 122.557819][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.565080][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.592440][ T4505] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.599584][ T4505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.649519][ T28] audit: type=1400 audit(1775152391.087:1028): avc: denied { map } for pid=8789 comm="syz.2.1847" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 122.676144][ T8680] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.688190][ T8680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.972959][ T8680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.134501][ T28] audit: type=1326 audit(1775152391.577:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8823 comm="syz.8.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1b77c819 code=0x7ffc0000 [ 123.193058][ T28] audit: type=1326 audit(1775152391.577:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8823 comm="syz.8.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1b77c819 code=0x7ffc0000 [ 123.246998][ T28] audit: type=1326 audit(1775152391.577:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8823 comm="syz.8.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1b77c819 code=0x7ffc0000 [ 123.273426][ T28] audit: type=1326 audit(1775152391.577:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8823 comm="syz.8.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1b77c819 code=0x7ffc0000 [ 123.300339][ T28] audit: type=1326 audit(1775152391.577:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8823 comm="syz.8.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1b77c819 code=0x7ffc0000 [ 123.384167][ T8680] veth0_vlan: entered promiscuous mode [ 123.392987][ T8680] veth1_vlan: entered promiscuous mode [ 123.414002][ T8680] veth0_macvtap: entered promiscuous mode [ 123.426197][ T8680] veth1_macvtap: entered promiscuous mode [ 123.438128][ T8680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.454957][ T8680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.466563][ T4505] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.476414][ T4505] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.486614][ T4505] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.496074][ T4505] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.970777][ T8871] loop9: detected capacity change from 0 to 8192 [ 124.006368][ T8871] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 124.014074][ T8871] FAT-fs (loop9): Filesystem has been set read-only [ 124.150450][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 124.417972][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 124.418036][ T28] audit: type=1400 audit(1775152392.857:1049): avc: denied { shutdown } for pid=8917 comm="syz.3.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.069791][ T8970] loop3: detected capacity change from 0 to 512 [ 125.102376][ T8970] EXT4-fs: Ignoring removed bh option [ 125.147715][ T8970] EXT4-fs: inline encryption not supported [ 125.204811][ T8970] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 125.273420][ T8970] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 125.312802][ T8970] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1875: bg 0: block 248: padding at end of block bitmap is not set [ 125.349616][ T8970] loop3: lost filesystem error report for type 5 error -117 [ 125.349884][ T8970] Quota error (device loop3): write_blk: dquota write failed [ 125.357348][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 125.357372][ C1] EXT4-fs (loop3): last error at time 1775152393: ext4_validate_block_bitmap:441 [ 125.388423][ T8970] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 125.425235][ T8970] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.1875: Failed to acquire dquot type 1 [ 125.438965][ T9003] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1878'. [ 125.448866][ T9003] netlink: zone id is out of range [ 125.454403][ T9003] netlink: zone id is out of range [ 125.459642][ T8970] loop3: lost filesystem error report for type 5 error -28 [ 125.460932][ T8970] EXT4-fs (loop3): 1 truncate cleaned up [ 125.482736][ T8970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 125.484066][ T9003] netlink: set zone limit has 8 unknown bytes [ 125.893720][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 125.945169][ T9053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1884'. [ 126.281323][ T3980] Bluetooth: hci0: command 0x1003 tx timeout [ 126.281332][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 127.391449][ T9090] loop2: detected capacity change from 0 to 512 [ 127.412308][ T9090] tipc: Started in network mode [ 127.417257][ T9090] tipc: Node identity ac1414aa, cluster identity 4711 [ 127.465594][ T9090] tipc: Enabling of bearer rejected, failed to enable media [ 127.686900][ T9110] loop8: detected capacity change from 0 to 1024 [ 127.729241][ T9110] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.817691][ T9118] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.825010][ T9118] IPv6: NLM_F_CREATE should be set when creating new route [ 128.025644][ T9128] loop3: detected capacity change from 0 to 512 [ 128.045179][ T9128] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 128.060627][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1915'. [ 128.069925][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1915'. [ 128.082792][ T9132] netlink: 'syz.2.1915': attribute type 6 has an invalid length. [ 128.089182][ T28] audit: type=1400 audit(1775152396.527:1050): avc: denied { connect } for pid=9129 comm="syz.9.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.112481][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1915'. [ 128.131859][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1915'. [ 128.151533][ T9132] netlink: 'syz.2.1915': attribute type 6 has an invalid length. [ 128.160463][ T9128] EXT4-fs (loop3): 1 truncate cleaned up [ 128.167249][ T9128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.193390][ T7433] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.279604][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.305968][ T28] audit: type=1400 audit(1775152396.747:1051): avc: denied { append } for pid=9139 comm="syz.8.1916" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 128.360721][ T28] audit: type=1400 audit(1775152396.747:1052): avc: denied { read write } for pid=9139 comm="syz.8.1916" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 128.392842][ T28] audit: type=1400 audit(1775152396.747:1053): avc: denied { open } for pid=9139 comm="syz.8.1916" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 128.594664][ T9156] netlink: 'syz.9.1923': attribute type 4 has an invalid length. [ 128.614968][ T9156] netlink: 'syz.9.1923': attribute type 4 has an invalid length. [ 128.728132][ T9163] loop9: detected capacity change from 0 to 1024 [ 128.752165][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1928'. [ 128.804517][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1928'. [ 128.813995][ T9163] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.852480][ T9170] netlink: 'syz.8.1928': attribute type 6 has an invalid length. [ 128.874755][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1928'. [ 128.938959][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1928'. [ 129.004491][ T9170] netlink: 'syz.8.1928': attribute type 6 has an invalid length. [ 129.123422][ T3410] IPVS: starting estimator thread 0... [ 129.233435][ T9182] IPVS: using max 1872 ests per chain, 93600 per kthread [ 129.373317][ T8680] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.868231][ T9210] loop2: detected capacity change from 0 to 128 [ 130.065579][ T3499] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 130.090412][ T3499] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 130.468956][ T9242] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 130.519636][ T28] audit: type=1400 audit(1775152398.927:1054): avc: denied { setopt } for pid=9243 comm="syz.9.1959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 130.544955][ T9248] netlink: 'syz.2.1960': attribute type 4 has an invalid length. [ 130.594000][ T9248] netlink: 'syz.2.1960': attribute type 4 has an invalid length. [ 130.620657][ T9251] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1970'. [ 130.715594][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1963'. [ 130.870808][ T9276] netlink: 'syz.2.1971': attribute type 14 has an invalid length. [ 130.880976][ T9276] netlink: 'syz.2.1971': attribute type 14 has an invalid length. [ 131.826068][ T9307] loop8: detected capacity change from 0 to 2048 [ 131.857889][ T9307] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.004509][ T9307] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1994: bg 0: block 234: padding at end of block bitmap is not set [ 132.066499][ T9307] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 566 with error 28 [ 132.081431][ T9307] EXT4-fs (loop8): This should not happen!! Data will be lost [ 132.081431][ T9307] [ 132.097887][ T28] audit: type=1326 audit(1775152400.537:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9319 comm="syz.9.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0399c819 code=0x7ffc0000 [ 132.121475][ T9307] EXT4-fs (loop8): Total free blocks count 0 [ 132.121500][ T9307] EXT4-fs (loop8): Free/Dirty block details [ 132.121533][ T9307] EXT4-fs (loop8): free_blocks=0 [ 132.121548][ T9307] EXT4-fs (loop8): dirty_blocks=576 [ 132.154864][ T28] audit: type=1326 audit(1775152400.537:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9319 comm="syz.9.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0399c819 code=0x7ffc0000 [ 132.164450][ T9307] EXT4-fs (loop8): Block reservation details [ 132.203985][ T9322] lo: entered allmulticast mode [ 132.209083][ T9307] EXT4-fs (loop8): i_reserved_data_blocks=36 [ 132.215947][ T9321] lo: left allmulticast mode [ 132.271271][ T28] audit: type=1326 audit(1775152400.537:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9319 comm="syz.9.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0399c819 code=0x7ffc0000 [ 132.298830][ T28] audit: type=1326 audit(1775152400.537:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9319 comm="syz.9.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0399c819 code=0x7ffc0000 [ 132.339831][ T9328] syzkaller0: entered promiscuous mode [ 132.354620][ T28] audit: type=1326 audit(1775152400.537:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9319 comm="syz.9.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0399c819 code=0x7ffc0000 [ 132.354679][ T9328] syzkaller0: entered allmulticast mode [ 132.390917][ T28] audit: type=1326 audit(1775152400.537:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9319 comm="syz.9.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fbf0399c819 code=0x7ffc0000 [ 132.421727][ T28] audit: type=1326 audit(1775152400.537:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9319 comm="syz.9.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0399c819 code=0x7ffc0000 [ 132.454516][ T28] audit: type=1326 audit(1775152400.537:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9319 comm="syz.9.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0399c819 code=0x7ffc0000 [ 132.478686][ T28] audit: type=1326 audit(1775152400.537:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9319 comm="syz.9.1989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0399c819 code=0x7ffc0000 [ 132.503917][ T7433] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.654504][ T9346] loop3: detected capacity change from 0 to 512 [ 132.661092][ T9346] EXT4-fs: Ignoring removed bh option [ 132.716924][ T9346] EXT4-fs: inline encryption not supported [ 132.731190][ T9346] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 132.734021][ T9351] loop2: detected capacity change from 0 to 512 [ 132.771833][ T9346] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 132.789744][ T9346] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1997: bg 0: block 248: padding at end of block bitmap is not set [ 132.804749][ T9346] loop3: lost filesystem error report for type 5 error -117 [ 132.811263][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 132.825737][ C0] EXT4-fs (loop3): last error at time 1775152401: ext4_validate_block_bitmap:441 [ 132.835424][ T9346] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.1997: Failed to acquire dquot type 1 [ 132.836401][ T9351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.848299][ T9346] loop3: lost filesystem error report for type 5 error -28 [ 132.860445][ T9346] EXT4-fs (loop3): 1 truncate cleaned up [ 132.875332][ T9346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 132.889231][ T9349] hsr_slave_1 (unregistering): left promiscuous mode [ 132.923892][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.988220][ T9363] SELinux: failed to load policy [ 133.021791][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 133.094187][ T9373] loop2: detected capacity change from 0 to 2048 [ 133.115184][ T9373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.178185][ T9371] loop3: detected capacity change from 0 to 8192 [ 133.179334][ T9373] ext4 filesystem being mounted at /423/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.212379][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.225556][ T9371] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.342364][ T9392] loop3: detected capacity change from 0 to 4096 [ 133.352810][ T9392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.389479][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.439334][ T9399] loop9: detected capacity change from 0 to 256 [ 133.506409][ T9400] loop2: detected capacity change from 0 to 8192 [ 133.580596][ T9405] loop2: detected capacity change from 0 to 2048 [ 133.593601][ T9405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.664197][ T9405] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2021: bg 0: block 234: padding at end of block bitmap is not set [ 133.679305][ T9405] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1170 with error 28 [ 133.692644][ T9405] EXT4-fs (loop2): This should not happen!! Data will be lost [ 133.692644][ T9405] [ 133.709829][ T9405] EXT4-fs (loop2): Total free blocks count 0 [ 133.716048][ T9405] EXT4-fs (loop2): Free/Dirty block details [ 133.722132][ T9405] EXT4-fs (loop2): free_blocks=0 [ 133.727212][ T9405] EXT4-fs (loop2): dirty_blocks=1184 [ 133.732872][ T9405] EXT4-fs (loop2): Block reservation details [ 133.742859][ T9405] EXT4-fs (loop2): i_reserved_data_blocks=74 [ 133.836206][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.463596][ T9450] loop9: detected capacity change from 0 to 2048 [ 134.507311][ T9450] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.587498][ T9467] validate_nla: 1 callbacks suppressed [ 134.587516][ T9467] netlink: 'syz.7.2039': attribute type 12 has an invalid length. [ 134.611335][ T9450] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2033: bg 0: block 234: padding at end of block bitmap is not set [ 134.626409][ T9450] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 390 with error 28 [ 134.639665][ T9450] EXT4-fs (loop9): This should not happen!! Data will be lost [ 134.639665][ T9450] [ 134.649455][ T9450] EXT4-fs (loop9): Total free blocks count 0 [ 134.655587][ T9450] EXT4-fs (loop9): Free/Dirty block details [ 134.661645][ T9450] EXT4-fs (loop9): free_blocks=0 [ 134.666708][ T9450] EXT4-fs (loop9): dirty_blocks=400 [ 134.672511][ T9450] EXT4-fs (loop9): Block reservation details [ 134.678735][ T9450] EXT4-fs (loop9): i_reserved_data_blocks=25 [ 134.780580][ T8680] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.922133][ T5914] loop9: p2 p3 p4[EZD] [ 134.927252][ T5914] loop9: p3 start 331781 is beyond EOD, truncated [ 134.933977][ T5914] loop9: p4 size 197376 extends beyond EOD, truncated [ 134.943155][ T9493] loop9: p2 p3 p4[EZD] [ 134.947751][ T4505] bio_check_eod: 99 callbacks suppressed [ 134.947763][ T4505] kworker/u8:17: attempt to access beyond end of device [ 134.947763][ T4505] loop3: rw=1, sector=145, nr_sectors = 40 limit=128 [ 134.967590][ T9493] loop9: p3 start 331781 is beyond EOD, truncated [ 134.974275][ T4505] kworker/u8:17: attempt to access beyond end of device [ 134.974275][ T4505] loop3: rw=1, sector=193, nr_sectors = 8 limit=128 [ 134.977715][ T9493] loop9: p4 size 197376 extends beyond EOD, [ 134.988390][ T4505] kworker/u8:17: attempt to access beyond end of device [ 134.988390][ T4505] loop3: rw=1, sector=209, nr_sectors = 8 limit=128 [ 134.989006][ T9493] truncated [ 134.995259][ T4505] kworker/u8:17: attempt to access beyond end of device [ 134.995259][ T4505] loop3: rw=1, sector=225, nr_sectors = 8 limit=128 [ 135.025530][ T4505] kworker/u8:17: attempt to access beyond end of device [ 135.025530][ T4505] loop3: rw=1, sector=241, nr_sectors = 8 limit=128 [ 135.040660][ T4505] kworker/u8:17: attempt to access beyond end of device [ 135.040660][ T4505] loop3: rw=1, sector=257, nr_sectors = 8 limit=128 [ 135.054537][ T4505] kworker/u8:17: attempt to access beyond end of device [ 135.054537][ T4505] loop3: rw=1, sector=273, nr_sectors = 8 limit=128 [ 135.068273][ T4505] kworker/u8:17: attempt to access beyond end of device [ 135.068273][ T4505] loop3: rw=1, sector=289, nr_sectors = 8 limit=128 [ 135.082006][ T4505] kworker/u8:17: attempt to access beyond end of device [ 135.082006][ T4505] loop3: rw=1, sector=305, nr_sectors = 8 limit=128 [ 135.096057][ T4505] kworker/u8:17: attempt to access beyond end of device [ 135.096057][ T4505] loop3: rw=1, sector=321, nr_sectors = 8 limit=128 [ 135.160653][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 135.172219][ T5914] udevd[5914]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 135.185824][ T9502] __nla_validate_parse: 8 callbacks suppressed [ 135.185842][ T9502] netlink: 228 bytes leftover after parsing attributes in process `syz.9.2048'. [ 135.199403][ T5914] udevd[5914]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 135.224547][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 135.508255][ T9524] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.667706][ T7433] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.254887][ T9562] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 136.410716][ T9573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.461547][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.075368][ T9600] syzkaller1: entered promiscuous mode [ 137.080935][ T9600] syzkaller1: entered allmulticast mode [ 137.135176][ T9606] set_capacity_and_notify: 5 callbacks suppressed [ 137.135192][ T9606] loop8: detected capacity change from 0 to 128 [ 137.171820][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 137.171839][ T28] audit: type=1400 audit(1775152405.617:1070): avc: denied { read open } for pid=9610 comm="syz.2.2081" path="/" dev="configfs" ino=2082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 137.324530][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2085'. [ 137.682331][ T9642] macvlan2: entered promiscuous mode [ 137.694493][ T9642] team_slave_0: entered promiscuous mode [ 137.700312][ T9642] team_slave_1: entered promiscuous mode [ 137.715906][ T9642] team0: entered promiscuous mode [ 137.727240][ T9642] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 137.743303][ T9642] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 138.201253][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 138.412938][ T9656] loop9: detected capacity change from 0 to 128 [ 138.608952][ T9660] loop2: detected capacity change from 0 to 1024 [ 138.665152][ T9660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.749779][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.011462][ T9676] loop2: detected capacity change from 0 to 8192 [ 139.061664][ T9694] netlink: 1010 bytes leftover after parsing attributes in process `syz.9.2117'. [ 139.093026][ T9694] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 139.224772][ T9700] loop9: detected capacity change from 0 to 128 [ 139.535721][ T9706] loop3: detected capacity change from 0 to 128 [ 139.693189][ T28] audit: type=1326 audit(1775152408.137:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9707 comm="syz.9.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0399c819 code=0x7ffc0000 [ 139.766703][ T28] audit: type=1326 audit(1775152408.167:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9707 comm="syz.9.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0399c819 code=0x7ffc0000 [ 139.841433][ T28] audit: type=1326 audit(1775152408.167:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9707 comm="syz.9.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fbf0399c819 code=0x7ffc0000 [ 139.913957][ T28] audit: type=1326 audit(1775152408.167:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9707 comm="syz.9.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0399c819 code=0x7ffc0000 [ 140.009283][ T28] audit: type=1326 audit(1775152408.167:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9707 comm="syz.9.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fbf0399c819 code=0x7ffc0000 [ 140.094043][ T28] audit: type=1326 audit(1775152408.187:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9707 comm="syz.9.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0399c819 code=0x7ffc0000 [ 140.181142][ T28] audit: type=1326 audit(1775152408.187:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9707 comm="syz.9.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf0399c819 code=0x7ffc0000 [ 140.428149][ T9725] loop3: detected capacity change from 0 to 512 [ 140.455418][ T9725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.469204][ T9728] loop9: detected capacity change from 0 to 512 [ 140.491168][ T9725] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.525974][ T9728] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.540842][ T9734] syzkaller1: entered promiscuous mode [ 140.546597][ T9734] syzkaller1: entered allmulticast mode [ 140.555685][ T9728] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.570671][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.599440][ T9741] loop3: detected capacity change from 0 to 128 [ 140.633282][ T8680] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.917307][ T50] bio_check_eod: 530 callbacks suppressed [ 140.917327][ T50] kworker/u8:3: attempt to access beyond end of device [ 140.917327][ T50] loop3: rw=1, sector=145, nr_sectors = 40 limit=128 [ 140.944280][ T50] kworker/u8:3: attempt to access beyond end of device [ 140.944280][ T50] loop3: rw=1, sector=193, nr_sectors = 8 limit=128 [ 140.957971][ T50] kworker/u8:3: attempt to access beyond end of device [ 140.957971][ T50] loop3: rw=1, sector=209, nr_sectors = 8 limit=128 [ 140.972062][ T50] kworker/u8:3: attempt to access beyond end of device [ 140.972062][ T50] loop3: rw=1, sector=225, nr_sectors = 8 limit=128 [ 140.985886][ T50] kworker/u8:3: attempt to access beyond end of device [ 140.985886][ T50] loop3: rw=1, sector=241, nr_sectors = 8 limit=128 [ 140.999898][ T50] kworker/u8:3: attempt to access beyond end of device [ 140.999898][ T50] loop3: rw=1, sector=257, nr_sectors = 8 limit=128 [ 141.016470][ T50] kworker/u8:3: attempt to access beyond end of device [ 141.016470][ T50] loop3: rw=1, sector=273, nr_sectors = 8 limit=128 [ 141.037999][ T50] kworker/u8:3: attempt to access beyond end of device [ 141.037999][ T50] loop3: rw=1, sector=289, nr_sectors = 8 limit=128 [ 141.051963][ T50] kworker/u8:3: attempt to access beyond end of device [ 141.051963][ T50] loop3: rw=1, sector=305, nr_sectors = 8 limit=128 [ 141.065719][ T50] kworker/u8:3: attempt to access beyond end of device [ 141.065719][ T50] loop3: rw=1, sector=321, nr_sectors = 8 limit=128 [ 141.096631][ T9756] Process accounting resumed [ 141.943120][ T9788] netlink: 1010 bytes leftover after parsing attributes in process `syz.8.2154'. [ 141.988461][ T9788] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 142.116110][ T9798] loop2: detected capacity change from 0 to 1024 [ 142.148452][ T9798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.263583][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.654430][ T9824] loop2: detected capacity change from 0 to 2048 [ 142.674477][ T9824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.791988][ T36] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 142.826906][ T36] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 83 with error 28 [ 142.839677][ T36] EXT4-fs (loop2): This should not happen!! Data will be lost [ 142.839677][ T36] [ 142.849671][ T36] EXT4-fs (loop2): Total free blocks count 0 [ 142.856277][ T36] EXT4-fs (loop2): Free/Dirty block details [ 142.862382][ T36] EXT4-fs (loop2): free_blocks=2415919104 [ 142.869359][ T36] EXT4-fs (loop2): dirty_blocks=96 [ 142.880162][ T36] EXT4-fs (loop2): Block reservation details [ 142.892708][ T36] EXT4-fs (loop2): i_reserved_data_blocks=6 [ 142.905902][ T3324] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 142.926584][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.169054][ T9851] loop3: detected capacity change from 0 to 1024 [ 143.192357][ T9851] EXT4-fs: Ignoring removed bh option [ 143.223299][ T9851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.263947][ T9851] ext4 filesystem being mounted at /476/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.556687][ T9862] loop9: detected capacity change from 0 to 8192 [ 143.872429][ T9860] ================================================================== [ 143.880693][ T9860] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 143.889700][ T9860] [ 143.892070][ T9860] write to 0xffff8881045233a8 of 8 bytes by task 9863 on cpu 0: [ 143.899729][ T9860] shmem_file_splice_read+0x470/0x600 [ 143.905151][ T9860] splice_direct_to_actor+0x26e/0x670 [ 143.910577][ T9860] do_splice_direct+0x119/0x1a0 [ 143.915470][ T9860] do_sendfile+0x382/0x650 [ 143.919935][ T9860] __x64_sys_sendfile64+0x105/0x150 [ 143.925171][ T9860] x64_sys_call+0x2dc4/0x3020 [ 143.929983][ T9860] do_syscall_64+0x12c/0x370 [ 143.934602][ T9860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.940539][ T9860] [ 143.942879][ T9860] write to 0xffff8881045233a8 of 8 bytes by task 9860 on cpu 1: [ 143.950547][ T9860] shmem_file_splice_read+0x470/0x600 [ 143.956154][ T9860] splice_direct_to_actor+0x26e/0x670 [ 143.961589][ T9860] do_splice_direct+0x119/0x1a0 [ 143.966469][ T9860] do_sendfile+0x382/0x650 [ 143.970936][ T9860] __x64_sys_sendfile64+0x105/0x150 [ 143.976260][ T9860] x64_sys_call+0x2dc4/0x3020 [ 143.980967][ T9860] do_syscall_64+0x12c/0x370 [ 143.985590][ T9860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.991537][ T9860] [ 143.993970][ T9860] value changed: 0x0000000000003393 -> 0x0000000000003397 [ 144.001176][ T9860] [ 144.003522][ T9860] Reported by Kernel Concurrency Sanitizer on: [ 144.009718][ T9860] CPU: 1 UID: 0 PID: 9860 Comm: syz.7.2183 Not tainted syzkaller #0 PREEMPT(full) [ 144.019024][ T9860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 144.029101][ T9860] ================================================================== [ 144.314724][ T36] EXT4-fs error (device loop3): ext4_map_blocks:828: inode #15: comm kworker/u8:2: lblock 0 mapped to illegal pblock 0 (length 6) [ 144.415407][ T36] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 144.449770][ T36] EXT4-fs (loop3): This should not happen!! Data will be lost [ 144.449770][ T36] [ 144.473672][ T36] EXT4-fs error (device loop3): ext4_map_blocks:828: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 144.512655][ T36] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 144.528755][ T36] EXT4-fs (loop3): This should not happen!! Data will be lost [ 144.528755][ T36] [ 144.551599][ T3321] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 144.612053][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.