last executing test programs: 1m43.811878575s ago: executing program 1 (id=989): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40004) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) 1m43.63380676s ago: executing program 1 (id=993): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 1m43.537127141s ago: executing program 1 (id=994): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") 1m43.097280174s ago: executing program 1 (id=1000): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000004) 1m42.991612003s ago: executing program 1 (id=1002): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) listxattr(0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m42.92610492s ago: executing program 1 (id=1003): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x2000, 0x3, &(0x7f0000481000/0x2000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) 1m27.885526748s ago: executing program 32 (id=1003): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x2000, 0x3, &(0x7f0000481000/0x2000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) 1m21.225424937s ago: executing program 4 (id=1318): r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x86) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x73, 0xffffffffffffffff}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1m21.224893847s ago: executing program 4 (id=1319): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x26}, 0x0, 0x6, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1m20.858092374s ago: executing program 4 (id=1324): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) 1m20.83815331s ago: executing program 4 (id=1325): prlimit64(0x0, 0x8, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xd9, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x394, &(0x7f0000000700)="$eJzs3T+IHNUfAPDv3uz9+5H87gpBFITRTtCQREG08Y5wgeA2UZaohbiYRMPtKeRwMSmyORuxFFJqZWehhUU6G1GRdBa2RpCoWGi6gCEjszO7O3N7Z4JhE4OfT7F8773v982b3bnbd3Psu1dXYv34bJy8evVKLCw0orlyaCWuNWI5khg6H5PmdmgDAO4N17Is/sgKEV/cSklj+rMCAKZp8P7/+t5Ky7tfj+OvJvKz4t1/9k7MDQCYjvL3/8VqW7ItZ2GianHa0wIApqh+/z8iHplIqfypvzmxNgAA7j0vvPTyc6utiOfTdCFi471eu9eOZ8b9qyfjVHTjROyPpbgeUSwU8ofG4PHwkdba/jRN+/HzcrTzil47YqPfaxcrhdVkUD8fB2Iplsv6crWRZVly+PPW2oF0ICLO93uz+SgbjV57dnCXYXUxTv3wvzgRByON+ybqI4601kZrknZ+3MHxZyO2xvct8vnvi6Xku9firejG8chrh8ua1tq5A2l6KGvtaYzr+732/CCvMHkHBAAAAAAAAAAAAAAAAAAAAAAAbse+Yu+dvWmaLo/2z8nG+/fsKxNq/c2IYq+f0f5AW8X+QNl8Fln2+zuPt99PorY/0GCDn9r+Os2YubunDgAAAAAAAAAAAAAAAAAAAP8am2fmotPtnji9eebsejXon948MxMRecub33765WLUcxbLAepVtaBZplS60nFVlgyTs6SWUwZJfvBGs2j55OJoxpWcylmMy2fGOfPbumrB3od/+vDs+nCEh5Jh1Y1xThI7ntfZpD6NWrDx/2LAYcuF3Z+fyeDgTXIuZ1m2W/m5VyarohHR3HWq/zDI8uCbK2888MTm8CLICo8+tnTs8oWPf13vdPMj57rdudOb17P1Tvn1zhfbRDA/vGySyvXTKC+2RvVKaHaevHF0zy4jb9VbOsn3v7344AeXypaZysu0wzSyY5fGLW/vkJMUB/1se9dcEeTTHHU9mwf5czQxzvC75KZPy1NxWy/c/R+tdC6e+/GXW62q/JCwUQcAAAAAAAAAAAAAAAAAANwRlc+Kl8oP+87+XdXTR6c/MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4c8b//38UxMzWtpZbC/7sx7DlWAy75vMBY65yxOW7eLYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxX/RUAAP//wAtXdw==") creat(&(0x7f00000004c0)='./bus\x00', 0x14c) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x44c00, 0xe898d2275f586997) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 1m20.522518918s ago: executing program 4 (id=1336): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x1) poll(&(0x7f0000000100)=[{r0, 0x84}], 0x1, 0x3ff) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 1m20.164853538s ago: executing program 4 (id=1348): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x9, 0x5, 0x7}, &(0x7f0000000100)=0x14) 1m20.161712647s ago: executing program 33 (id=1348): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x9, 0x5, 0x7}, &(0x7f0000000100)=0x14) 57.737954601s ago: executing program 3 (id=1820): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffff80000001, 0x2, 0x2}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x120e, &(0x7f00000015c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000080)="a747", 0x2}], 0x1, 0x5412, 0x0, 0x0) 56.857032407s ago: executing program 3 (id=1825): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 56.56342115s ago: executing program 3 (id=1834): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x4, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f27a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b7b8776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000e00)="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", 0x179}, {&(0x7f0000001440)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbe123cb43ed522a35874f4503d56d44c71c7ab62adc0", 0x69}, {&(0x7f0000000280)="b732b06fd220a6145520dbf60b0ebbf5380f98d4a1811f9a17f9b79521cb5554695fb065f2d1ed1bef797196270c000000000000002fe48164a445f3bb9289533f5ed32a8dc3a17c7f13e93222784f53df2d7e9f7bf3d47fa6440da1de8ac20000a8e1da8150f1a1d8f51c863c243979070cd1920b5bee99a922f970a6212dd6668cca002710d04c926de6e706ce3f00a3d0b32e9992768500000000000000", 0x9f}, {&(0x7f0000000a80)="ac6aed94fbb8c7fecccf1fbe0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc0a3448434dca51f5bc1972720dc071c5c5e2358a62bb3d9ccb581431764476f92bc0dd581a715f7ff8cef23b35dceb96809ab4bfbc85cd9eed4820e2a821913e94ed62ce3b44103e31a82b7c14ea5dae6b42906b14cc21e24fcb7b255b5fd8b3d9eda621defc3f398cc545fb03d6549353921bb4a52b3230008f967ddc1ad8635d58667b82a58ec030a57d199f14b1714330e476a95d3aa897b4161302835bee9582736b04c576bbfffe0c6cc0bb35685582b277d975a87c9be2814365f3f1962ee9db85d8ba8968bfee00e27db96abc49c734aefd019fc756e8d14e1f0f3ce6d6e0163d7367f0672c1b07dc28d6bd3ab5f7b33dc0d79dae55f626904ce60a091126aeee0265c1c0f1888c9b68006673ee9b9110c21c972a93d55528c6132eceea1717c994a6b584c570246a1dd58", 0x16f}, {&(0x7f00000006c0)="0b41dae71fdbfbd927fcefd552617a65c06039347098f690358459d82800ee224faa7dcc81cff086255c05d8d5ee175f635bdb8853c708b2605ada1c1cf8812456748282d57d86948df219e8422c2853df192f5fceb38fd57788af3fb5284e53393be844bac927edfb43d17da758dc2b9ad2fa87f8521a0f1889b362b32cef609d20392a2e680afbffffff9d831c6acd5854e2420a16ea245a7c26de40c041919f0de146884889aedac056c285012b270a78448caab41053c2017d15dafa284871f716173b8047f8b1ffdc5a8a86eb407515edbef8eaef93d5", 0xd9}], 0x7}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001240)="4171f87b140949fed2c23ee4a4dcea42f6015971d5ee9c2583fcf026c10715a5807ce47686bb64ff96ada300", 0x2c}], 0x1, &(0x7f0000001cc0)=ANY=[], 0xd8}}, {{&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000400)="91d5ff3dac4d4c4b01d5b0fbfd0ee0bb5a7c2f30cc4d929132687aaea2d7b36bc4f0dea41bfad3f82d51aeee3ee6af29bcdd9d5d33ed44815d337342946ac3049937d47486d240231ead6098cc52c861bb91", 0x52}, {&(0x7f0000000480)="40e3095591401599f8015234cb3b4dee947610eb153e1c2b5b793ef5268f285d78c469404b07acf8d6e2c34269acd5a78231c899cd55bbe28ac8905ab9592c59366efe66db6f08e7b5792481f9090cace9bc92080a855929eb46466a5adf9fb939e3af7982b613f2b20e27d018a725cb8660fa852a604b79eb412e248e08d0be41d61064fd2773a91b4c515484d6d94fd9eb68828e46f4c3b0bb013ca1e060d2b95e62221d", 0xa5}, {&(0x7f0000000200)="171a8922a69d611cdea187aa24e56e3238474fca90d26ccd8fec37bceaf4cb749849baa50fa8", 0x26}, {&(0x7f0000000540)="b219538869602ed6fb874cc1139a5c63c7789719c622", 0x16}], 0x4}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000680)="bf9c293dc317aabb376672c5ba9c983fae91b0839a6747", 0x17}, {&(0x7f0000000880)="719bdb3380d1aa76f19eb67a62f1668654c7dd7a39e8e650d367268a8110a8c83a5f8de9898dfdbe68990ad215cf28240171e155edccd264d52cade9a2cc87fa7d558d1746ff5c36ec30d71b1d6e6f053fca6bd342f457b8363192874724ce62386f6651ae6188226d9e71a06e12455a65a30ccbc99001e72edd14ba4f5c85747b308dc527a2fffe8804f68163ba051b", 0x90}, {&(0x7f0000000940)="11fa7184704a80681dfa754d16ab3dcd51bbfff24a1fa1395e26c0e7f7be3424e3602d2b3e512878a6b97606a573ddc6ba52d0c1d76e5f9088a077974beda52be21065abf87b8f100fb744be4f365a7c5a681a0123541367f8187f75e463112832b24194efccf58a56a9dc24b114149c6e075d308d36cb7e6d5f74cf537faf818b5c3caf47d4248bfafcbf24d9c9e931a07ed21fbac5593966ada0bd096006b1554a441fcd990dd9eedc6a6069399a6ae2a721970eb1c4c023f98ee2c517a8b007553b26ec5e49a99b845eba77b137a04d96845d048eddb4c34fe0f2241e1afa2ee2091be24fc7d4e09fd5eeb4634d5985ef4a890af3dbc7", 0xf8}, {&(0x7f0000000c00)="660acda41cd40c91fcdf9d413ed930dd3cbb2f4e840738cb8a2c961607c9177fa0ae6225280f7fdf8efa1bdde2106f8abd0e6b674f7135b5b10117a002640f3b044d99368e82bb8e71a2384119eeebc394131913bc456b33", 0x58}, {&(0x7f0000000c80)="986eb1966269a4be6992c3aa33abd38f22a25430d56a6aafd7a972ed58503c4aa20c3c6ffd658e1243eb98f5541f4327932e46e6f78e95756c68b873f2af246e52e4061ccaf6c654dbfebbcca1e885d57127b707e108d123b2", 0x59}, {&(0x7f0000000d00)="0ae0480b5c2583a913d0d22ef437032256b348924b2b08a19f1e5361f3db31d8ffb2178a14c40b8deae50f3e8fb2da357dd5306bb46736d3f8a82c83ab0383bcdfc7837b5999e9afc7f9f02544a24652c2af5e36a1c5699dd553e4605bbc62d468c8e910745d5c48a0e27c869a", 0x6d}, {&(0x7f0000000f80)="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", 0xfb}, {&(0x7f0000000d80)="129efa552632b910e1bb031793b426e8", 0x10}], 0x8, &(0x7f0000001340)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xc9, 0x1, 0x4, [{@empty, 0x9}, {@rand_addr=0x64010102, 0x1000}]}, @rr={0x7, 0x1b, 0xc4, [@multicast2, @private=0xa010102, @multicast1, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp_addr={0x44, 0x2c, 0x24, 0x1, 0x5, [{@broadcast, 0x471}, {@private=0xa010102, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x508a6fd6}, {@empty}, {@rand_addr=0x64010100, 0x1}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010102}}}], 0xa8}}], 0x5, 0x2404c044) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000840)="924a4a", 0x3}], 0x1) 56.542238836s ago: executing program 3 (id=1837): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 56.507154519s ago: executing program 3 (id=1838): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x6) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}) 55.967165362s ago: executing program 3 (id=1842): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$KDSKBLED(r3, 0x4b65, 0x5) 55.966938802s ago: executing program 34 (id=1842): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$KDSKBLED(r3, 0x4b65, 0x5) 48.207434504s ago: executing program 7 (id=1954): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x1}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 48.073701238s ago: executing program 7 (id=1956): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x41801500, 0x0, 0x0, 0x0, 0x0, 0x0) 47.860810996s ago: executing program 7 (id=1960): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) alarm(0xe7c5) alarm(0x1) 47.82835283s ago: executing program 7 (id=1962): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@debug}, {@acl}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0xb6c, &(0x7f00000017c0)="$eJzs3M9rHFUcAPDvm2y2aRtNiqLWi4EeGihufkmhxUOLeFMQrOCxwaRt7PYHTUTbiym9KhTUP6AHTx5S8NCDl549epEevEsxKJSeIzP7I9smm02bTQfSzwcm+9687L7vzDdvMm/YmQBeWmP5jyzicETcThEjzfVZRFSL0lDEcuP37s3cvZAvKdbWPv03RYqIlZm7F1qflZqvB5sfMBQRfyynmLm1sd/F6zcuztbr89ea9YmlS1cnFq/feHfh0uz5+fPzl6dOnDg+OT194vhk37b12PiRn1a+/vCfO/cmHv/8wbFfUpyK4WZb53b0y1iMtffJ0z7rd2clGYiISkfuc6lSYkAAAGwp6ziHOxwjMRDrJ28jUVsoNTgAAACgL76NiDUAAABgj0vm/wAAALDHtb4HsDJz90JrKfcbCbxIq6cjYrSR/9b93Y2WSiwXr0MxGBEHHqXovK03Nd62Y2MRcfX2rYV8iV26D5vulm9GxFubjf9U5H+0uIt/Y/6ziOjHnfljT9Xl/8XaSf5P9aF/+QcAAHgx7p9uTOQ3zv+y9vWf2GT+N7DJ3O159J7/ZQ/70A1drJ6OeL/j2Y73OvLfNDrQrL1SXA8YTOcW6vOTEfFqRIzH4L68PrVFHwsf//Zmt7bO63/5kvffuhbYjONhZd+T75mbXZrdyTazbvVmxNuVzfKf2uM/dbn++8k2+/j+yx9Wu7X1zj+7ae1OxNFNx//6Ez3T1s9nnSiOBxOto8JGnw//tdKtf/kvVz7+D2yd/+L4335e7+Kz93G2+t1r3dqe9/hfTWeKAKvNdd/MLi1dm4qopo82rp9+4u3Zs2/B3tHaH639led//Mjm//+3Ov7nfxNnt9nn418fnenWZvyXK8//XI/xn54Y/89e+O/P39/o1v/2xv97RTDjzTXO/3rbboLKjhMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBfsogYjpTV2uUsq9UiDkbE63Egq19ZXDp27spXl+fytojRGMzOLdTnJyNipFFPeX2qKK/Xp5+qz0TEoYj4cWR/Ua99caU+V/bGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0HYwIoYjZbWIyIpyltVqjba/R8qODgAAAOib0bIDAAAAAHad+T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO3TonfsPUkQsn9xfLLlqs22w1MiA3ZaVHQBQmoGyAwBKUyk7AKA05vhA6tE+1LXFGQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAy+To4fsPUkQsn9xfLLlqs22w1MiA3ZaVHQBQmoGyAwBKUyk7AKA05vhA6tE+1LXFGQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAy2Tx+o2Ls/X6/DUFBQWFdqHsIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB72f8BAAD//4rO4cs=") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) 47.546048514s ago: executing program 7 (id=1964): epoll_create1(0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x100000000005, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0xc, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 47.37632401s ago: executing program 7 (id=1970): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) pwrite64(r0, &(0x7f0000000080)="cc", 0x1, 0x200980) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x20, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) 47.298034465s ago: executing program 35 (id=1970): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) pwrite64(r0, &(0x7f0000000080)="cc", 0x1, 0x200980) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x20, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) 23.367798202s ago: executing program 2 (id=2410): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f00000001c0)='g', 0x1, 0x20000801, 0x0, 0x0) 23.338070706s ago: executing program 2 (id=2411): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x805, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x7) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/129, 0x81, 0x40000002, 0x0, 0x0) shutdown(r2, 0x0) 23.258765911s ago: executing program 2 (id=2412): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') fchdir(r1) close(0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 23.211865781s ago: executing program 2 (id=2414): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000340)='./file0\x00', 0x2800010, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x3, 0x21f, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x23, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000bc0)=ANY=[@ANYBLOB=',dots,nodots,time_offset=0x00000000200003cc,dots,nodots,dots,nodots,nodots,usefree,check=relaxed,nodots,nfs,nodots,showexec,nodots,umask=00000000000000000000007,nodots,nodots,dont_hash,seclabel,func=FILE_MMAP,euid=', @ANYRESDEC, @ANYBLOB=',uid>', @ANYBLOB='nodots,nodots,nfs=stale_rw,uid=', @ANYRES8, @ANYRESDEC=0x0, @ANYRESHEX=0xee00, @ANYRES32], 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") 23.003779611s ago: executing program 2 (id=2416): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x8069}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x2}, 0x1}) io_uring_enter(r1, 0x20047f6, 0xa511, 0xa, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 23.003544261s ago: executing program 2 (id=2417): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private0, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffefffffffffe}, {0x0, 0xc, 0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 22.924673435s ago: executing program 36 (id=2417): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private0, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffefffffffffe}, {0x0, 0xc, 0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 3.061916603s ago: executing program 8 (id=2776): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000000140)=0x0) timer_settime(r1, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, {0x4e23, 0x0, [0x0, 0x0, 0x81], [0x1, 0xfffffffd, 0x10000], 0x0, [0x0, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) 2.950332851s ago: executing program 8 (id=2779): ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) poll(0x0, 0x0, 0x7fffffff) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x101, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f3, &(0x7f0000000900)={'sit0\x00', @random="0000330c1100"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {}, {@nombcache}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 2.608829664s ago: executing program 0 (id=2782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f0000000500)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0xe7f, 0xe400, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000000100)='F', 0x1) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0) 1.960816727s ago: executing program 8 (id=2791): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x2000, 0x23456, {0x0, r4}}) io_uring_enter(r1, 0xd44, 0x44c1, 0x7, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_NAPI(r1, 0x1c, &(0x7f0000001740), 0x1) 1.953072355s ago: executing program 0 (id=2793): sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.87694795s ago: executing program 8 (id=2796): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0x4, 0x0, &(0x7f0000000000)="63eced8e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) accept4(r0, 0xfffffffffffffffd, &(0x7f0000000000)=0xd, 0x80800) 1.834050911s ago: executing program 8 (id=2798): open_by_handle_at(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32], 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x20000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ptrace(0x10, 0x0) ptrace$ARCH_SET_GS(0x1e, 0x0, 0x0, 0x1001) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x49}, 0x103005, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1.410782008s ago: executing program 0 (id=2803): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x1e, &(0x7f0000000600)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf60}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x0, 0x800, 0x100102, 0x36, "b0bf00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 1.393647675s ago: executing program 0 (id=2805): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, &(0x7f0000001b00), 0x0, 0x0, 0x0, 0x6d, 0x46, &(0x7f0000000000)="529d251a8539b124e0833824a7782c31cc0b7057a4d75d22bde1a5833321c0e50fc85de1ae908171bf0b9c6cef144d5f2a71efd98e8ae04df7d2d36683d0a1d9c059664c358d8a41e099e22b548dcbd8043f9f5daba5d49e55abf527305e5dd012b567600e25efc37192760a18", &(0x7f0000000280)="0b395b629e46b6f7f3dbbb2f571899fd68d1b1092086019fb39a425684ef9974744e3ba0d51422be8ba8553b9534ff646c4c7331505ebd64755eec62b91d460e816d6ec07825", 0x1, 0x0, 0x5}, 0x50) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 1.368017159s ago: executing program 0 (id=2806): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x0, 0x9}, 0x8) 1.362215668s ago: executing program 9 (id=2807): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r2, 0x0, r1, &(0x7f0000000140)=0xe8, 0x9, 0x1) 932.650984ms ago: executing program 6 (id=2815): sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 879.354053ms ago: executing program 5 (id=2816): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) 874.208932ms ago: executing program 8 (id=2817): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={0x0}, 0x0, 0x40a, 0x800000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 732.835795ms ago: executing program 5 (id=2818): r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 489.228127ms ago: executing program 0 (id=2819): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 449.106259ms ago: executing program 5 (id=2820): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x406, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) r3 = getpid() r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000100)={r1, r2}) 406.02267ms ago: executing program 9 (id=2821): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/121, 0x79}], 0x1}, 0x1ff}], 0x1, 0x20022, 0x0) 404.33748ms ago: executing program 9 (id=2822): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x2a000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x10000, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0xe, r2}, 0x10) 383.549395ms ago: executing program 5 (id=2823): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff2, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 365.648832ms ago: executing program 6 (id=2824): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000001228290081e949b93897bc3b0800000000007d01ff020000000000000000000000000001"], 0xfdef) link(0x0, 0x0) 361.190542ms ago: executing program 9 (id=2825): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0xffffffc1, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 326.422915ms ago: executing program 9 (id=2826): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x10001}]}}}]}, 0x40}}, 0x0) 305.86721ms ago: executing program 5 (id=2827): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 289.930367ms ago: executing program 9 (id=2828): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x20000014}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) epoll_wait(r2, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) 287.271236ms ago: executing program 6 (id=2829): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000078850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 262.778792ms ago: executing program 6 (id=2830): r0 = socket$rxrpc(0x21, 0x2, 0xa) set_mempolicy(0x1, 0x0, 0x7582) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 99.810039ms ago: executing program 5 (id=2831): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000002c0)=""/34, 0x56}], 0x1}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r3, &(0x7f0000000440)}, 0x20) 37.227758ms ago: executing program 6 (id=2832): getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, 0x0, 0x0) 0s ago: executing program 6 (id=2833): r0 = epoll_create1(0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x20000000}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) kernel console output (not intermixed with test programs): led: No such file or directory [ 99.087572][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 99.309014][ T4299] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 99.441375][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1425'. [ 99.456252][ T7514] erspan0: entered promiscuous mode [ 99.461728][ T7514] macvtap1: entered promiscuous mode [ 99.467098][ T7514] macvtap1: entered allmulticast mode [ 99.473324][ T7514] erspan0: entered allmulticast mode [ 99.484001][ T7514] erspan0: left allmulticast mode [ 99.489509][ T7514] erspan0: left promiscuous mode [ 99.742151][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 99.742151][ T7538] VFS: Mount too revealing [ 99.742165][ T28] audit: type=1400 audit(1772205546.994:643): avc: denied { mount } for pid=7537 comm="syz.5.1436" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 99.959629][ T28] audit: type=1400 audit(1772205547.204:644): avc: denied { remount } for pid=7555 comm="syz.0.1441" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 100.313508][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1450'. [ 100.355450][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1450'. [ 100.433237][ T7589] netlink: 'syz.3.1454': attribute type 10 has an invalid length. [ 100.474146][ T7589] team0: Failed to send options change via netlink (err -105) [ 100.500211][ T7589] team0: Port device dummy0 added [ 100.542525][ T7600] loop2: detected capacity change from 0 to 1024 [ 100.584970][ T7600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.120014][ T7626] netlink: 'syz.6.1469': attribute type 11 has an invalid length. [ 101.127964][ T7626] __nla_validate_parse: 1 callbacks suppressed [ 101.127975][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1469'. [ 101.147795][ T1761] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.147822][ T7626] netlink: 'syz.6.1469': attribute type 11 has an invalid length. [ 101.158778][ T1761] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.164526][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1469'. [ 101.182841][ T1761] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.191867][ T1761] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.230858][ T7628] netlink: 'syz.6.1470': attribute type 3 has an invalid length. [ 101.239021][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1470'. [ 101.315180][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.445246][ T7644] netlink: 'syz.2.1478': attribute type 2 has an invalid length. [ 101.499624][ T28] audit: type=1400 audit(1772205548.754:645): avc: denied { read write } for pid=7655 comm="syz.6.1481" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 101.526179][ T28] audit: type=1400 audit(1772205548.774:646): avc: denied { open } for pid=7655 comm="syz.6.1481" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 101.664841][ T7673] loop6: detected capacity change from 0 to 512 [ 101.671412][ T7673] EXT4-fs: Ignoring removed i_version option [ 101.677436][ T7673] EXT4-fs: Ignoring removed bh option [ 101.690561][ T7673] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.703173][ T7673] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.787489][ T7288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.553932][ T7719] loop3: detected capacity change from 0 to 32768 [ 102.619351][ T7719] loop3: p1 p3 < > [ 102.719302][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1493'. [ 102.788845][ T7747] loop2: detected capacity change from 0 to 2048 [ 102.805365][ T7544] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 102.868437][ T3305] loop2: p3 < > p4 < > [ 102.872700][ T3305] loop2: partition table partially beyond EOD, truncated [ 102.888999][ T3305] loop2: p3 start 4284289 is beyond EOD, truncated [ 102.925242][ T7747] loop2: p3 < > p4 < > [ 102.939872][ T7747] loop2: partition table partially beyond EOD, truncated [ 102.947381][ T7747] loop2: p3 start 4284289 is beyond EOD, truncated [ 102.976546][ T7759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1499'. [ 103.045030][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 103.069087][ T7759] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1499'. [ 103.086301][ T7759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1499'. [ 103.097778][ T7759] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1499'. [ 103.530741][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1510'. [ 103.562195][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1510'. [ 103.758854][ T7802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.837216][ T7809] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.876762][ T7810] team0: Port device dummy0 removed [ 103.901350][ T7810] bridge_slave_0: left allmulticast mode [ 103.908438][ T7810] bridge_slave_0: left promiscuous mode [ 103.915177][ T7810] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.926617][ T7810] bridge_slave_1: left allmulticast mode [ 103.942659][ T7810] bridge_slave_1: left promiscuous mode [ 103.949543][ T7810] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.959334][ T7810] bond0: (slave bond_slave_0): Releasing backup interface [ 103.973248][ T7810] bond0: (slave bond_slave_1): Releasing backup interface [ 104.018662][ T7810] team0: Port device team_slave_0 removed [ 104.035766][ T7810] team0: Port device team_slave_1 removed [ 104.045651][ T7810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.053404][ T7810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.062207][ T7810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.069784][ T7810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.079518][ T7810] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 104.096204][ T7812] tipc: Started in network mode [ 104.102552][ T7812] tipc: Node identity 4, cluster identity 4711 [ 104.109503][ T7812] tipc: Node number set to 4 [ 104.233185][ T7828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.329857][ T7833] loop3: detected capacity change from 0 to 764 [ 104.340775][ T7833] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 104.700815][ T7864] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 104.710726][ T7864] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 104.760713][ T7864] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 104.789092][ T7864] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 104.844319][ T7864] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 104.855654][ T7864] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 104.901726][ T7864] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 104.912455][ T7864] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 104.980053][ T97] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 104.988400][ T97] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 105.013452][ T5165] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 105.024131][ T5165] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 105.036591][ T5165] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 105.045136][ T5165] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 105.057667][ T5165] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 105.076224][ T5165] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 105.925113][ T28] audit: type=1400 audit(1772205553.174:647): avc: denied { watch watch_reads } for pid=7925 comm="syz.2.1565" path="/331/file1" dev="tmpfs" ino=1734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.008599][ T28] audit: type=1400 audit(1772205553.204:648): avc: denied { execute_no_trans } for pid=7925 comm="syz.2.1565" path="/331/file1" dev="tmpfs" ino=1734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.128768][ T7911] Set syz1 is full, maxelem 6117 reached [ 106.563584][ T7952] netlink: 'syz.2.1574': attribute type 3 has an invalid length. [ 106.588518][ T7952] __nla_validate_parse: 5 callbacks suppressed [ 106.588530][ T7952] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1574'. [ 106.828649][ T28] audit: type=1400 audit(1772205554.074:649): avc: denied { create } for pid=7961 comm="syz.6.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.872490][ T28] audit: type=1400 audit(1772205554.104:650): avc: denied { bind } for pid=7961 comm="syz.6.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.896692][ T28] audit: type=1400 audit(1772205554.104:651): avc: denied { setopt } for pid=7961 comm="syz.6.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.919447][ T7970] loop5: detected capacity change from 0 to 764 [ 106.926782][ T28] audit: type=1400 audit(1772205554.114:652): avc: denied { write } for pid=7961 comm="syz.6.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.012183][ T7970] rock: directory entry would overflow storage [ 107.018384][ T7970] rock: sig=0x4f50, size=4, remaining=3 [ 107.029113][ T7970] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 107.124382][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1589'. [ 107.157657][ T28] audit: type=1400 audit(1772205554.404:653): avc: denied { listen } for pid=7987 comm="syz.6.1591" lport=45157 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 107.245811][ T28] audit: type=1400 audit(1772205554.454:654): avc: denied { sys_module } for pid=7985 comm="syz.2.1590" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 107.830108][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1605'. [ 107.993624][ T8031] policy can only be matched on NF_INET_PRE_ROUTING [ 107.993636][ T8031] unable to load match [ 108.732313][ T8075] loop3: detected capacity change from 0 to 512 [ 109.053966][ T8086] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1631'. [ 109.172619][ T8090] loop3: detected capacity change from 0 to 512 [ 109.211146][ T8090] EXT4-fs: Ignoring removed i_version option [ 109.217150][ T8090] EXT4-fs: Ignoring removed bh option [ 109.250367][ T8090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.264114][ T28] audit: type=1400 audit(1772205556.514:655): avc: denied { connect } for pid=8096 comm="syz.0.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.286490][ T8090] ext4 filesystem being mounted at /347/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.297669][ T28] audit: type=1400 audit(1772205556.534:656): avc: denied { read } for pid=8096 comm="syz.0.1636" path="socket:[19512]" dev="sockfs" ino=19512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.346667][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1637'. [ 109.356106][ T8090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.771117][ T8119] loop2: detected capacity change from 0 to 512 [ 109.778028][ T8119] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 109.926197][ T8135] loop6: detected capacity change from 0 to 128 [ 109.991850][ T8139] syz.6.1651: attempt to access beyond end of device [ 109.991850][ T8139] loop6: rw=8388611, sector=161, nr_sectors = 7 limit=128 [ 110.005834][ T8139] syz.6.1651: attempt to access beyond end of device [ 110.005834][ T8139] loop6: rw=8390659, sector=168, nr_sectors = 1 limit=128 [ 110.089306][ T97] kworker/u8:5: attempt to access beyond end of device [ 110.089306][ T97] loop6: rw=1, sector=145, nr_sectors = 16 limit=128 [ 110.114815][ T97] kworker/u8:5: attempt to access beyond end of device [ 110.114815][ T97] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 110.131925][ T97] kworker/u8:5: attempt to access beyond end of device [ 110.131925][ T97] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 110.145417][ T97] kworker/u8:5: attempt to access beyond end of device [ 110.145417][ T97] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 110.160164][ T97] kworker/u8:5: attempt to access beyond end of device [ 110.160164][ T97] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 110.173670][ T97] kworker/u8:5: attempt to access beyond end of device [ 110.173670][ T97] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 110.187442][ T97] kworker/u8:5: attempt to access beyond end of device [ 110.187442][ T97] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 110.201151][ T97] kworker/u8:5: attempt to access beyond end of device [ 110.201151][ T97] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 110.318273][ T8154] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1659'. [ 110.357690][ T8158] netlink: 'syz.6.1661': attribute type 2 has an invalid length. [ 110.367791][ T8158] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1661'. [ 110.411610][ T3422] kernel write not supported for file bpf-prog (pid: 3422 comm: kworker/1:5) [ 110.535776][ T8177] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.542305][ T8179] netlink: 'syz.3.1670': attribute type 2 has an invalid length. [ 110.546365][ T8177] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.558327][ T8179] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1670'. [ 110.601455][ T8177] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.611836][ T8177] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.695068][ T8177] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.708531][ T8177] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.781899][ T8177] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.792427][ T8177] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.855943][ T5165] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.864231][ T5165] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.890139][ T1761] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.898646][ T1761] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.906903][ T1761] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.916309][ T1761] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.928601][ T5170] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.937035][ T5170] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.049375][ T8204] netlink: 'syz.2.1681': attribute type 10 has an invalid length. [ 111.061324][ T8204] team0: Port device dummy0 added [ 111.289246][ T8227] loop2: detected capacity change from 0 to 512 [ 111.315545][ T8227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.348152][ T8227] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.471866][ T8238] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.488227][ T8238] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.508059][ T23] IPVS: starting estimator thread 0... [ 111.520089][ T8238] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 50978 - 0 [ 111.587831][ T8238] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.614752][ T8242] IPVS: using max 2544 ests per chain, 127200 per kthread [ 111.629252][ T8238] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.639839][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 111.639851][ T28] audit: type=1326 audit(1772205558.884:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8234 comm="syz.0.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd264b5c799 code=0x7fc00000 [ 111.678552][ T8238] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 50978 - 0 [ 111.740814][ T8238] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.759706][ T8238] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.770670][ T8238] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 50978 - 0 [ 111.843582][ T8238] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.888795][ T8238] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.899403][ T8238] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 50978 - 0 [ 111.925413][ T28] audit: type=1400 audit(1772205559.174:659): avc: denied { listen } for pid=8263 comm="syz.6.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.973111][ T28] audit: type=1400 audit(1772205559.204:660): avc: denied { accept } for pid=8263 comm="syz.6.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.014811][ T5170] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.023360][ T5170] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 50978 - 0 [ 112.038507][ T5170] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 112.062819][ T5170] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.108093][ T5170] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 50978 - 0 [ 112.130366][ T5170] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 112.168193][ T5170] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.181274][ T5170] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 50978 - 0 [ 112.190297][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.199842][ T5170] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 112.208185][ T5170] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.216681][ T5170] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 50978 - 0 [ 112.225044][ T5170] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 112.279405][ T28] audit: type=1326 audit(1772205559.534:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8234 comm="syz.0.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd264afdb19 code=0x7fc00000 [ 112.801090][ T8282] loop2: detected capacity change from 0 to 8192 [ 112.842017][ T8291] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1712'. [ 112.933706][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1714'. [ 112.988624][ T8296] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1714'. [ 113.044653][ T28] audit: type=1400 audit(1772205560.294:662): avc: denied { read } for pid=8297 comm="syz.5.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.506318][ T8327] veth1_to_bond: entered allmulticast mode [ 113.513811][ T8327] veth1_to_bond: left allmulticast mode [ 113.648395][ T28] audit: type=1400 audit(1772205560.894:663): avc: denied { write } for pid=8331 comm="syz.2.1729" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 113.776921][ T8342] loop2: detected capacity change from 0 to 2048 [ 113.828941][ T8342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.990616][ T5170] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 114.005727][ T5170] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1538 with error 28 [ 114.018333][ T5170] EXT4-fs (loop2): This should not happen!! Data will be lost [ 114.018333][ T5170] [ 114.028192][ T5170] EXT4-fs (loop2): Total free blocks count 0 [ 114.069674][ T5170] EXT4-fs (loop2): Free/Dirty block details [ 114.081897][ T5170] EXT4-fs (loop2): free_blocks=2415919504 [ 114.095373][ T5170] EXT4-fs (loop2): dirty_blocks=1552 [ 114.100851][ T5170] EXT4-fs (loop2): Block reservation details [ 114.106986][ T5170] EXT4-fs (loop2): i_reserved_data_blocks=97 [ 114.110259][ T8352] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1738'. [ 114.126294][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.163470][ T28] audit: type=1400 audit(1772205561.414:664): avc: denied { read } for pid=8355 comm="syz.2.1737" path="socket:[20089]" dev="sockfs" ino=20089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 114.210182][ T8364] netlink: 'syz.5.1739': attribute type 4 has an invalid length. [ 114.213031][ T28] audit: type=1326 audit(1772205561.464:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8360 comm="syz.0.1741" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd264b5c799 code=0x0 [ 114.753503][ T8386] loop3: detected capacity change from 0 to 128 [ 115.323865][ T8409] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.344591][ T28] audit: type=1400 audit(1772205562.594:666): avc: denied { read } for pid=3422 comm="kworker/1:5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20618 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 115.348630][ T8409] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.408321][ T8409] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 44991 - 0 [ 115.477475][ T28] audit: type=1400 audit(1772205562.724:667): avc: denied { accept } for pid=8416 comm="syz.0.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.538572][ T8409] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.551838][ T8409] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.563559][ T8409] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 44991 - 0 [ 115.615738][ T8409] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.635149][ T8409] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.646446][ T8409] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 44991 - 0 [ 115.668253][ T8405] pim6reg1: entered promiscuous mode [ 115.673762][ T8405] pim6reg1: entered allmulticast mode [ 115.676777][ T8427] loop5: detected capacity change from 0 to 512 [ 115.704835][ T8427] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.724372][ T8409] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.744828][ T8409] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.766030][ T8409] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 44991 - 0 [ 115.767019][ T8427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.859720][ T6782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.885040][ T5170] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.893675][ T5170] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 44991 - 0 [ 115.909497][ T5170] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 115.935184][ T8437] loop5: detected capacity change from 0 to 2048 [ 115.949065][ T5170] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.967646][ T5170] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 44991 - 0 [ 115.987657][ T5170] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 116.008529][ T8437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.015315][ T5170] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.038527][ T5170] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 44991 - 0 [ 116.056927][ T5170] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 116.084860][ T5170] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.122782][ T5170] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 44991 - 0 [ 116.152629][ T5170] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 116.498313][ T8457] gretap0: entered promiscuous mode [ 116.532881][ T5165] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 116.554365][ T5165] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1456 with error 28 [ 116.567098][ T5165] EXT4-fs (loop5): This should not happen!! Data will be lost [ 116.567098][ T5165] [ 116.577027][ T5165] EXT4-fs (loop5): Total free blocks count 0 [ 116.583552][ T5165] EXT4-fs (loop5): Free/Dirty block details [ 116.589656][ T5165] EXT4-fs (loop5): free_blocks=2415919504 [ 116.595361][ T5165] EXT4-fs (loop5): dirty_blocks=1456 [ 116.600971][ T5165] EXT4-fs (loop5): Block reservation details [ 116.606938][ T5165] EXT4-fs (loop5): i_reserved_data_blocks=91 [ 116.626972][ T6782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.657480][ T28] audit: type=1400 audit(1772205563.904:668): avc: denied { view } for pid=8463 comm="syz.5.1779" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 116.694435][ T8469] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1783'. [ 116.694747][ T28] audit: type=1326 audit(1772205563.934:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8465 comm="syz.5.1782" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29df9bc799 code=0x0 [ 116.764283][ T8474] netlink: 'syz.0.1785': attribute type 4 has an invalid length. [ 116.791739][ T8474] netlink: 'syz.0.1785': attribute type 4 has an invalid length. [ 116.838791][ T8478] loop6: detected capacity change from 0 to 512 [ 116.848389][ T8478] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.875544][ T8478] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.888413][ T8478] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.924789][ T8488] netlink: 'syz.0.1789': attribute type 2 has an invalid length. [ 116.932780][ T8488] netlink: 191880 bytes leftover after parsing attributes in process `syz.0.1789'. [ 116.959386][ T7288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.000521][ T8495] loop2: detected capacity change from 0 to 2048 [ 117.020741][ T8495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.055112][ T8495] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.127082][ T28] audit: type=1400 audit(1772205564.364:670): avc: denied { map } for pid=8494 comm="syz.2.1794" path="/373/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.211526][ T28] audit: type=1400 audit(1772205564.364:671): avc: denied { execute } for pid=8494 comm="syz.2.1794" path="/373/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.322326][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.844866][ T8545] netlink: 'syz.2.1814': attribute type 4 has an invalid length. [ 117.857648][ T28] audit: type=1400 audit(1772205565.114:672): avc: denied { create } for pid=8547 comm="syz.6.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 117.862463][ T8545] netlink: 'syz.2.1814': attribute type 4 has an invalid length. [ 118.289737][ T8570] loop3: detected capacity change from 0 to 8192 [ 118.388975][ T28] audit: type=1400 audit(1772205565.624:673): avc: denied { name_bind } for pid=8572 comm="syz.0.1822" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 118.875607][ T8579] lo: Caught tx_queue_len zero misconfig [ 119.227016][ T28] audit: type=1400 audit(1772205566.474:674): avc: denied { read } for pid=8593 comm="syz.2.1830" path="socket:[20883]" dev="sockfs" ino=20883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.466540][ T28] audit: type=1400 audit(1772205566.714:675): avc: denied { read } for pid=8610 comm="syz.5.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 119.634166][ T1761] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.658639][ T1761] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 50978 - 0 [ 119.675273][ T1761] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 119.740199][ T1761] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.760333][ T1761] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 50978 - 0 [ 119.780531][ T1761] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 119.850240][ T1761] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.868589][ T1761] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 50978 - 0 [ 119.888531][ T1761] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 119.940518][ T1761] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.956573][ T1761] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 50978 - 0 [ 119.977285][ T1761] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 120.151686][ T1761] bond1 (unregistering): (slave geneve2): Releasing active interface [ 120.172340][ T1761] bond0 (unregistering): Released all slaves [ 120.180645][ T1761] bond1 (unregistering): Released all slaves [ 120.200762][ T1761] bond2 (unregistering): Released all slaves [ 120.252206][ T1761] IPVS: stopping backup sync thread 4202 ... [ 120.261187][ T1761] hsr_slave_0: left promiscuous mode [ 120.267253][ T1761] hsr_slave_1: left promiscuous mode [ 120.274820][ T1761] veth1_vlan: left promiscuous mode [ 120.280154][ T1761] veth0_vlan: left promiscuous mode [ 120.399905][ T8618] chnl_net:caif_netlink_parms(): no params data found [ 120.438949][ T8618] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.446022][ T8618] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.453159][ T8618] bridge_slave_0: entered allmulticast mode [ 120.459781][ T8618] bridge_slave_0: entered promiscuous mode [ 120.466581][ T8618] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.474001][ T8618] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.481273][ T8618] bridge_slave_1: entered allmulticast mode [ 120.487668][ T8618] bridge_slave_1: entered promiscuous mode [ 120.505416][ T8618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.515990][ T8618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.539734][ T8618] team0: Port device team_slave_0 added [ 120.546260][ T8618] team0: Port device team_slave_1 added [ 120.561300][ T8618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.568274][ T8618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.595053][ T8618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.606392][ T8618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.613454][ T8618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.639489][ T8618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.665078][ T8618] hsr_slave_0: entered promiscuous mode [ 120.671341][ T8618] hsr_slave_1: entered promiscuous mode [ 120.677654][ T8618] debugfs: 'hsr0' already exists in 'hsr' [ 120.683573][ T8618] Cannot create hsr debugfs directory [ 120.855496][ T8548] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.869604][ T8618] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 120.939978][ T8618] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 120.973029][ T8618] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 120.996122][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1852'. [ 120.996419][ T8618] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 121.026807][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1852'. [ 121.417858][ T8684] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1856'. [ 121.427939][ T8684] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1856'. [ 121.526422][ T8618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.558441][ T8618] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.580832][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.587906][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.626836][ T8618] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.647976][ T8618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.673383][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.680502][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.762274][ T8618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.035857][ T8618] veth0_vlan: entered promiscuous mode [ 122.036244][ T8738] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1866'. [ 122.063783][ T8618] veth1_vlan: entered promiscuous mode [ 122.085727][ T28] audit: type=1400 audit(1772205569.334:676): avc: denied { cmd } for pid=8741 comm="syz.2.1867" path="socket:[22024]" dev="sockfs" ino=22024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 122.104854][ T8618] veth0_macvtap: entered promiscuous mode [ 122.140310][ T8618] veth1_macvtap: entered promiscuous mode [ 122.155786][ T8748] loop6: detected capacity change from 0 to 128 [ 122.216963][ T8618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.255277][ T8618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.300944][ T5170] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.337759][ T5170] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.374474][ T5170] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.383589][ T28] audit: type=1400 audit(1772205569.634:677): avc: denied { mount } for pid=8761 comm="syz.2.1870" name="/" dev="hugetlbfs" ino=21466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 122.415756][ T5170] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.039393][ T8805] tipc: Failed to remove unknown binding: 66,1,1/0:2121162395/2121162397 [ 123.057973][ T8805] tipc: Failed to remove unknown binding: 66,1,1/0:2121162395/2121162397 [ 123.358387][ T8834] loop2: detected capacity change from 0 to 128 [ 123.365311][ T28] audit: type=1326 audit(1772205570.604:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8833 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996ebfc799 code=0x7ffc0000 [ 123.401802][ T8834] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.401866][ T28] audit: type=1326 audit(1772205570.604:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8833 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996ebfc799 code=0x7ffc0000 [ 123.452783][ T8834] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.531870][ T28] audit: type=1326 audit(1772205570.604:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8833 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f996ebfc799 code=0x7ffc0000 [ 123.598221][ T8841] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.605499][ T8841] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.612864][ T28] audit: type=1326 audit(1772205570.604:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8833 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f996ebfc502 code=0x7ffc0000 [ 123.647111][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.656843][ T28] audit: type=1326 audit(1772205570.604:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8833 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f996ebbcfce code=0x7ffc0000 [ 123.681058][ T28] audit: type=1326 audit(1772205570.604:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8833 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f996ebfc5c7 code=0x7ffc0000 [ 123.704496][ T28] audit: type=1326 audit(1772205570.604:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8833 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f996ebbcfce code=0x7ffc0000 [ 123.740447][ T28] audit: type=1326 audit(1772205570.604:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8833 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f996ebfc42b code=0x7ffc0000 [ 123.789862][ T8841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.807869][ T8841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.823241][ T8848] netlink: 'syz.2.1897': attribute type 1 has an invalid length. [ 123.831546][ T8848] netlink: 'syz.2.1897': attribute type 4 has an invalid length. [ 123.839285][ T8848] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1897'. [ 123.912906][ T12] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.933227][ T12] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.946603][ T12] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.959885][ T12] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.652345][ T8882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.689299][ T8882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.128031][ T8893] loop5: detected capacity change from 0 to 4096 [ 125.143101][ T8893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.181437][ T8897] batman_adv: batadv0: Adding interface: dummy0 [ 125.197730][ T8897] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.236056][ T8897] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 125.335241][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1920'. [ 125.353347][ T8905] macvtap1: entered promiscuous mode [ 125.359836][ T8905] gretap0: entered promiscuous mode [ 125.366094][ T8905] gretap0: left promiscuous mode [ 125.383664][ T6782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.837506][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1923'. [ 125.940803][ T8926] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1929'. [ 125.966559][ T8926] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1929'. [ 126.110631][ T8915] loop2: detected capacity change from 0 to 32768 [ 126.171836][ T4568] loop2: p1 < > p3 < p5 > [ 126.176270][ T4568] loop2: partition table partially beyond EOD, truncated [ 126.210978][ T8915] loop2: p1 < > p3 < p5 > [ 126.245095][ T8915] loop2: partition table partially beyond EOD, truncated [ 126.515757][ T4568] udevd[4568]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 126.527004][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 126.539909][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 126.615677][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 126.619507][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 126.627844][ T4568] udevd[4568]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 127.582660][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1961'. [ 127.709089][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1961'. [ 127.759735][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1954'. [ 127.781519][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1954'. [ 127.781858][ T5171] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.815077][ T5171] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.844128][ T5171] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.867856][ T5171] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.150098][ T9084] loop7: detected capacity change from 0 to 4096 [ 128.244172][ T9084] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0002] [ 128.257481][ T9084] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.309247][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 128.309290][ T28] audit: type=1400 audit(1772205575.564:703): avc: denied { mounton } for pid=9083 comm="syz.7.1962" path="/22/file0/file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.443750][ T28] audit: type=1400 audit(1772205575.634:704): avc: denied { rmdir } for pid=8618 comm="syz-executor" name="lost+found" dev="loop7" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.480790][ T1885] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.502880][ T8618] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.522155][ T28] audit: type=1400 audit(1772205575.644:705): avc: denied { unlink } for pid=8618 comm="syz-executor" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 128.566053][ T1885] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.589821][ T28] audit: type=1400 audit(1772205575.644:706): avc: denied { unlink } for pid=8618 comm="syz-executor" name="file1" dev="loop7" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 128.670726][ T28] audit: type=1400 audit(1772205575.694:707): avc: denied { mount } for pid=9094 comm="syz.6.1967" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 128.786822][ T1885] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.869516][ T1885] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.027686][ T1885] bridge_slave_1: left allmulticast mode [ 129.050498][ T1885] bridge_slave_1: left promiscuous mode [ 129.070564][ T1885] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.095980][ T1885] bridge_slave_0: left allmulticast mode [ 129.118244][ T1885] bridge_slave_0: left promiscuous mode [ 129.143667][ T1885] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.183963][ T1885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.202408][ T1885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.216963][ T1885] bond0 (unregistering): Released all slaves [ 129.328672][ T1885] hsr_slave_0: left promiscuous mode [ 129.358971][ T1885] hsr_slave_1: left promiscuous mode [ 129.378527][ T1885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.437406][ T1885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.456474][ T1885] batman_adv: batadv0: Removing interface: dummy0 [ 129.565199][ T1885] team0 (unregistering): Port device team_slave_1 removed [ 129.600448][ T1885] team0 (unregistering): Port device team_slave_0 removed [ 129.690060][ T9107] chnl_net:caif_netlink_parms(): no params data found [ 129.790117][ T9107] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.799187][ T9107] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.806367][ T9107] bridge_slave_0: entered allmulticast mode [ 129.813009][ T9107] bridge_slave_0: entered promiscuous mode [ 129.966660][ T9199] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.973806][ T9199] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.249938][ T9199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.290400][ T9199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.806135][ T9107] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.841623][ T9107] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.862405][ T9107] bridge_slave_1: entered allmulticast mode [ 130.879206][ T9107] bridge_slave_1: entered promiscuous mode [ 130.891639][ T5171] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 130.909985][ T5171] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 130.938633][ T5171] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 130.968610][ T5171] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 130.977083][ T5171] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 130.989119][ T5171] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 131.003857][ T9107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.044533][ T5171] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 131.068039][ T5171] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 131.078013][ T9107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.108786][ T9107] team0: Port device team_slave_0 added [ 131.115426][ T9107] team0: Port device team_slave_1 added [ 131.131974][ T9107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.140353][ T9107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.188500][ T9107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.218514][ T9107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.225453][ T9107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.268675][ T9107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.309076][ T9107] hsr_slave_0: entered promiscuous mode [ 131.315117][ T9107] hsr_slave_1: entered promiscuous mode [ 131.321640][ T9107] debugfs: 'hsr0' already exists in 'hsr' [ 131.327351][ T9107] Cannot create hsr debugfs directory [ 131.401789][ T9107] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 131.410517][ T9107] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 131.419298][ T9107] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 131.427998][ T9107] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 131.500702][ T9107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.515107][ T9107] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.525408][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.532501][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.543843][ T3922] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.550928][ T3922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.605771][ T9107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.690956][ T9107] veth0_vlan: entered promiscuous mode [ 131.698246][ T9107] veth1_vlan: entered promiscuous mode [ 131.713637][ T9107] veth0_macvtap: entered promiscuous mode [ 131.720875][ T9107] veth1_macvtap: entered promiscuous mode [ 131.731240][ T9107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.742645][ T9107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.753095][ T50] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.761942][ T50] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.771063][ T50] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.780011][ T50] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.797370][ T28] audit: type=1400 audit(1772205579.044:708): avc: denied { mount } for pid=9107 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 132.133678][ T9305] loop5: detected capacity change from 0 to 512 [ 132.156138][ T9305] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.212883][ T9305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.256742][ T9305] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.337415][ T1885] Bluetooth: hci0: Frame reassembly failed (-84) [ 132.417171][ T28] audit: type=1400 audit(1772205579.664:709): avc: denied { accept } for pid=9320 comm="syz.8.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 132.469930][ T6782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.677459][ T9337] loop2: detected capacity change from 0 to 1024 [ 132.688642][ T9337] EXT4-fs (loop2): stripe (3918) is not aligned with cluster size (16), stripe is disabled [ 132.710311][ T9337] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 132.720348][ T9337] System zones: 0-1, 3-8 [ 132.726180][ T9337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 132.739969][ T9337] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.768953][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 133.017172][ T9345] loop2: detected capacity change from 0 to 32768 [ 134.166465][ T9363] bond_slave_0: entered promiscuous mode [ 134.172209][ T9363] bond_slave_1: entered promiscuous mode [ 134.177845][ T9363] veth0_to_bond: entered promiscuous mode [ 134.183657][ T9363] bridge_slave_1: entered promiscuous mode [ 134.191159][ T9363] macvlan2: entered promiscuous mode [ 134.196447][ T9363] bond0: entered promiscuous mode [ 134.203696][ T9363] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 134.219998][ T9363] macvlan3: entered promiscuous mode [ 134.303175][ T9367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2024'. [ 134.343932][ T28] audit: type=1326 audit(1772205581.594:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.8.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ca15c799 code=0x7ffc0000 [ 134.367362][ T4299] Bluetooth: hci0: command 0x1003 tx timeout [ 134.373410][ T3603] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 134.379983][ T28] audit: type=1326 audit(1772205581.594:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.8.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ca15c799 code=0x7ffc0000 [ 134.438693][ T28] audit: type=1326 audit(1772205581.634:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.8.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f03ca15c799 code=0x7ffc0000 [ 134.466753][ T9] IPVS: starting estimator thread 0... [ 134.493815][ T28] audit: type=1326 audit(1772205581.634:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.8.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ca15c799 code=0x7ffc0000 [ 134.517888][ T28] audit: type=1326 audit(1772205581.634:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.8.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ca15c799 code=0x7ffc0000 [ 134.578573][ T9374] IPVS: using max 2880 ests per chain, 144000 per kthread [ 134.598570][ T28] audit: type=1326 audit(1772205581.644:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.8.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f03ca15c799 code=0x7ffc0000 [ 134.656524][ T28] audit: type=1326 audit(1772205581.644:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.8.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ca15c799 code=0x7ffc0000 [ 134.685623][ T28] audit: type=1326 audit(1772205581.644:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9368 comm="syz.8.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ca15c799 code=0x7ffc0000 [ 134.718205][ T28] audit: type=1400 audit(1772205581.944:718): avc: denied { getopt } for pid=9393 comm="syz.6.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.865785][ T28] audit: type=1400 audit(1772205582.114:719): avc: denied { unmount } for pid=9416 comm="syz.6.2042" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 135.241574][ T9442] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2046'. [ 136.277539][ T9524] loop5: detected capacity change from 0 to 2048 [ 136.319184][ T9524] EXT4-fs error (device loop5): __ext4_fill_super:5563: inode #2: comm syz.5.2068: unexpected EA_INODE flag [ 136.350787][ T9524] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 136.350994][ T9524] EXT4-fs (loop5): get root inode failed [ 136.360050][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 136.360072][ C1] EXT4-fs (loop5): initial error at time 1772205583: __ext4_fill_super:5563: inode 2 [ 136.360104][ C1] EXT4-fs (loop5): last error at time 1772205583: __ext4_fill_super:5563: inode 2 [ 136.419666][ T9534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2072'. [ 136.428820][ T9524] EXT4-fs (loop5): mount failed [ 136.621214][ T9542] loop2: detected capacity change from 0 to 4096 [ 136.643412][ T9542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.667820][ T9542] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #12: block 80: comm syz.2.2074: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 136.734013][ T9542] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz.2.2074: directory missing '..' [ 136.831407][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.911597][ T9558] loop5: detected capacity change from 0 to 512 [ 136.935847][ T9558] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.967314][ T9558] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.2081: corrupted inode contents [ 136.999631][ T9558] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 136.999804][ T9558] EXT4-fs (loop5): Remounting filesystem read-only [ 137.009070][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 137.009091][ C0] EXT4-fs (loop5): initial error at time 1772205584: ext4_do_update_inode:5569: inode 15 [ 137.009120][ C0] EXT4-fs (loop5): last error at time 1772205584: ext4_do_update_inode:5569: inode 15 [ 137.068863][ T9558] EXT4-fs (loop5): 1 orphan inode deleted [ 137.075610][ T9558] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.196048][ T9575] netlink: 27 bytes leftover after parsing attributes in process `syz.8.2087'. [ 137.213667][ T9573] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2086'. [ 137.234419][ T6782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.296556][ T9584] loop2: detected capacity change from 0 to 512 [ 137.325947][ T9584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.339084][ T9584] ext4 filesystem being mounted at /440/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.419094][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.913114][ T9623] loop8: detected capacity change from 0 to 256 [ 137.937102][ T9623] FAT-fs (loop8): Directory bread(block 64) failed [ 137.947398][ T9623] FAT-fs (loop8): Directory bread(block 65) failed [ 137.954041][ T9623] FAT-fs (loop8): Directory bread(block 66) failed [ 137.962303][ T9623] FAT-fs (loop8): Directory bread(block 67) failed [ 137.969772][ T9623] FAT-fs (loop8): Directory bread(block 68) failed [ 137.976393][ T9623] FAT-fs (loop8): Directory bread(block 69) failed [ 137.983684][ T9623] FAT-fs (loop8): Directory bread(block 70) failed [ 137.990313][ T9623] FAT-fs (loop8): Directory bread(block 71) failed [ 138.008526][ T9623] FAT-fs (loop8): Directory bread(block 72) failed [ 138.015156][ T9623] FAT-fs (loop8): Directory bread(block 73) failed [ 138.944093][ T9750] ref_ctr increment failed for inode: 0x3cf offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810a7557c0 [ 138.955675][ T9749] uprobe: syz.6.2130:9749 failed to unregister, leaking uprobe [ 139.301926][ T9784] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2133'. [ 139.488066][ T9788] loop5: detected capacity change from 0 to 1024 [ 139.517745][ T9794] loop2: detected capacity change from 0 to 128 [ 139.532976][ T9788] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 139.553213][ T9788] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.569415][ T9788] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 3: comm syz.5.2135: lblock 3 mapped to illegal pblock 3 (length 3) [ 139.588733][ T9794] bio_check_eod: 103 callbacks suppressed [ 139.588742][ T9794] syz.2.2138: attempt to access beyond end of device [ 139.588742][ T9794] loop2: rw=8390657, sector=129, nr_sectors = 1 limit=128 [ 139.619319][ T9788] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 139.631875][ T9788] EXT4-fs (loop5): This should not happen!! Data will be lost [ 139.631875][ T9788] [ 139.648876][ T9794] buffer_io_error: 8 callbacks suppressed [ 139.648888][ T9794] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 139.649329][ T9802] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 8: comm syz.5.2135: lblock 8 mapped to illegal pblock 8 (length 8) [ 139.654747][ T9794] syz.2.2138: attempt to access beyond end of device [ 139.654747][ T9794] loop2: rw=8390657, sector=130, nr_sectors = 1 limit=128 [ 139.691506][ T9794] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 139.706263][ T9794] syz.2.2138: attempt to access beyond end of device [ 139.706263][ T9794] loop2: rw=8390657, sector=131, nr_sectors = 1 limit=128 [ 139.715538][ T9802] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 139.720336][ T9794] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 139.755342][ T9802] EXT4-fs (loop5): This should not happen!! Data will be lost [ 139.755342][ T9802] [ 139.756371][ T9794] syz.2.2138: attempt to access beyond end of device [ 139.756371][ T9794] loop2: rw=8390657, sector=132, nr_sectors = 1 limit=128 [ 139.785565][ T9794] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 139.795758][ T9794] syz.2.2138: attempt to access beyond end of device [ 139.795758][ T9794] loop2: rw=8390657, sector=133, nr_sectors = 1 limit=128 [ 139.810815][ T9794] Buffer I/O error on dev loop2, logical block 133, lost async page write [ 139.811598][ T9802] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 3: comm syz.5.2135: lblock 3 mapped to illegal pblock 3 (length 3) [ 139.834632][ T9794] syz.2.2138: attempt to access beyond end of device [ 139.834632][ T9794] loop2: rw=8390657, sector=129, nr_sectors = 1 limit=128 [ 139.846981][ T9802] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 139.866047][ T9802] EXT4-fs (loop5): This should not happen!! Data will be lost [ 139.866047][ T9802] [ 139.876871][ T9794] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 139.885526][ T9794] syz.2.2138: attempt to access beyond end of device [ 139.885526][ T9794] loop2: rw=8390657, sector=130, nr_sectors = 1 limit=128 [ 139.918698][ T9794] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 139.952300][ T9794] syz.2.2138: attempt to access beyond end of device [ 139.952300][ T9794] loop2: rw=8390657, sector=131, nr_sectors = 1 limit=128 [ 139.966255][ T9794] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 140.038827][ T1885] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 140.070855][ T9794] syz.2.2138: attempt to access beyond end of device [ 140.070855][ T9794] loop2: rw=8390657, sector=132, nr_sectors = 1 limit=128 [ 140.091589][ T1885] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 140.120476][ T9811] sch_fq: defrate 7 ignored. [ 140.127341][ T9794] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 140.137553][ T1885] EXT4-fs (loop5): This should not happen!! Data will be lost [ 140.137553][ T1885] [ 140.162746][ T9794] syz.2.2138: attempt to access beyond end of device [ 140.162746][ T9794] loop2: rw=8390657, sector=133, nr_sectors = 1 limit=128 [ 140.181551][ T70] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 112: padding at end of block bitmap is not set [ 140.223273][ T70] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 48 with error 117 [ 140.237090][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2148'. [ 140.246046][ T9794] Buffer I/O error on dev loop2, logical block 133, lost async page write [ 140.927562][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 140.927577][ T28] audit: type=1400 audit(1772205588.174:727): avc: denied { watch watch_reads } for pid=9852 comm="syz.5.2161" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 140.982363][ T28] audit: type=1400 audit(1772205588.234:728): avc: denied { getopt } for pid=9855 comm="syz.0.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 141.035319][ T28] audit: type=1400 audit(1772205588.264:729): avc: denied { ioctl } for pid=9857 comm="syz.5.2164" path="/dev/input/event2" dev="devtmpfs" ino=244 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 141.185876][ T28] audit: type=1400 audit(1772205588.434:730): avc: denied { watch watch_reads } for pid=9890 comm="syz.6.2172" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 141.952427][ T9914] tipc: Failed to obtain node identity [ 141.978618][ T9914] tipc: Enabling of bearer rejected, failed to enable media [ 142.257129][ T28] audit: type=1400 audit(1772205589.504:731): avc: denied { override_creds } for pid=9917 comm="syz.5.2183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 142.528150][ T9948] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.662962][ T9206] Process accounting resumed [ 142.928534][ T9995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2205'. [ 143.038521][T10003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2207'. [ 143.083706][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2210'. [ 143.120435][T10007] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2210'. [ 143.139405][T10010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2211'. [ 143.198897][T10007] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2210'. [ 143.327281][T10039] loop2: detected capacity change from 0 to 4096 [ 143.362893][T10039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.773691][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.862476][T10085] io-wq is not configured for unbound workers [ 143.957762][ T28] audit: type=1326 audit(1772205591.204:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10097 comm="syz.0.2239" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd264b5c799 code=0x0 [ 144.033762][T10104] IPv6: NLM_F_CREATE should be specified when creating new route [ 144.046552][T10104] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 144.053801][T10104] IPv6: NLM_F_CREATE should be set when creating new route [ 144.069240][T10104] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 144.076485][T10104] IPv6: NLM_F_CREATE should be set when creating new route [ 144.094055][T10106] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2243'. [ 145.035086][T10155] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2261'. [ 145.055742][T10153] loop5: detected capacity change from 0 to 256 [ 145.224629][T10153] FAT-fs (loop5): Directory bread(block 64) failed [ 145.298863][T10153] FAT-fs (loop5): Directory bread(block 65) failed [ 145.306027][T10153] FAT-fs (loop5): Directory bread(block 66) failed [ 145.329698][T10153] FAT-fs (loop5): Directory bread(block 67) failed [ 145.337259][T10153] FAT-fs (loop5): Directory bread(block 68) failed [ 145.359937][T10153] FAT-fs (loop5): Directory bread(block 69) failed [ 145.368131][T10153] FAT-fs (loop5): Directory bread(block 70) failed [ 145.376117][T10153] FAT-fs (loop5): Directory bread(block 71) failed [ 145.391659][T10153] FAT-fs (loop5): Directory bread(block 72) failed [ 145.401918][T10153] FAT-fs (loop5): Directory bread(block 73) failed [ 145.528844][T10162] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2263'. [ 145.595538][ T28] audit: type=1400 audit(1772205592.844:733): avc: denied { read } for pid=10167 comm="syz.2.2265" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 145.618696][T10158] loop8: detected capacity change from 0 to 32768 [ 145.634227][ T28] audit: type=1400 audit(1772205592.844:734): avc: denied { open } for pid=10167 comm="syz.2.2265" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 145.686665][ T28] audit: type=1400 audit(1772205592.914:735): avc: denied { watch } for pid=10169 comm="syz.5.2268" path="pipe:[49191]" dev="pipefs" ino=49191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 145.797188][T10174] loop5: detected capacity change from 0 to 4096 [ 145.841228][T10174] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.063511][T10207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2280'. [ 146.184892][T10219] netlink: 'syz.8.2286': attribute type 1 has an invalid length. [ 146.223485][ T28] audit: type=1400 audit(1772205593.474:736): avc: denied { mounton } for pid=10220 comm="syz.2.2287" path="/file0" dev="autofs" ino=49257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 146.288616][T10222] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2286'. [ 146.342718][ T28] audit: type=1400 audit(1772205593.594:737): avc: denied { mounton } for pid=10225 comm="syz.0.2289" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.387203][ T28] audit: type=1400 audit(1772205593.614:738): avc: denied { unmount } for pid=10225 comm="syz.0.2289" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 146.535691][ T6782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.590312][T10236] loop2: detected capacity change from 0 to 7 [ 147.148146][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2295'. [ 147.169420][T10219] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 147.179740][ T5165] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.211009][ T5165] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.264746][ T5165] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.273702][ T5165] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.282913][ T5164] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.301108][ T5164] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.322228][ T5164] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.331680][ T5164] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.346436][T10261] syzkaller1: entered promiscuous mode [ 147.354267][T10261] syzkaller1: entered allmulticast mode [ 147.398364][T10266] capability: warning: `syz.0.2304' uses 32-bit capabilities (legacy support in use) [ 147.535606][T10273] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2307'. [ 147.735183][T10280] -1: renamed from syzkaller0 [ 148.045468][T10293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2314'. [ 148.191340][ T28] audit: type=1400 audit(1772205595.444:739): avc: denied { name_bind } for pid=10303 comm="syz.6.2319" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 148.212945][T10302] wireguard0: entered promiscuous mode [ 148.228622][T10302] wireguard0: entered allmulticast mode [ 148.837036][T10332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2330'. [ 149.123077][T10352] loop5: detected capacity change from 0 to 128 [ 149.169145][T10352] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.189592][T10352] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 149.251052][ T6782] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.460154][T10372] loop5: detected capacity change from 0 to 128 [ 149.542553][T10378] uprobe: syz.8.2347:10378 failed to unregister, leaking uprobe [ 149.779514][T10391] loop8: detected capacity change from 0 to 512 [ 149.801674][T10391] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.814661][T10391] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.829794][ T28] audit: type=1400 audit(1772205597.084:740): avc: denied { append } for pid=10390 comm="syz.8.2353" name="file2" dev="loop8" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 149.842631][T10395] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2354'. [ 149.901968][ T9107] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.096140][ T9207] IPVS: starting estimator thread 0... [ 150.188343][T10430] loop5: detected capacity change from 0 to 8192 [ 150.198551][T10426] IPVS: using max 2496 ests per chain, 124800 per kthread [ 150.468521][ T28] audit: type=1400 audit(1772205597.714:741): avc: denied { watch watch_reads } for pid=10439 comm="syz.2.2372" path="/proc/1133" dev="proc" ino=49674 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 150.544216][T10446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2375'. [ 150.719581][T10458] tipc: Failed to obtain node identity [ 150.726431][T10458] tipc: Enabling of bearer rejected, failed to enable media [ 150.846030][T10469] loop2: detected capacity change from 0 to 512 [ 150.853415][T10469] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 150.870264][T10469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.892461][T10469] ext4 filesystem being mounted at /489/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.936502][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2388'. [ 151.029332][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.129464][T10479] syzkaller0: entered promiscuous mode [ 151.134969][T10479] syzkaller0: entered allmulticast mode [ 151.371387][ T28] audit: type=1400 audit(1772205598.614:742): avc: denied { write } for pid=10503 comm="syz.8.2398" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 151.430066][T10510] netlink: 1319 bytes leftover after parsing attributes in process `syz.8.2398'. [ 151.859182][T10525] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 151.865718][T10525] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.873901][T10525] vhci_hcd vhci_hcd.0: Device attached [ 151.883568][T10525] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 151.890141][T10525] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.913024][T10525] vhci_hcd vhci_hcd.0: Device attached [ 151.919279][T10525] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(8) [ 151.925828][T10525] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 151.936121][T10525] vhci_hcd vhci_hcd.0: Device attached [ 151.942358][T10525] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(10) [ 151.948953][T10525] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.958559][T10525] vhci_hcd vhci_hcd.0: Device attached [ 151.964887][T10525] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(12) [ 151.971544][T10525] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.980582][T10525] vhci_hcd vhci_hcd.0: Device attached [ 151.988169][T10525] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 151.997276][T10525] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(16) [ 152.003891][T10525] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 152.014607][T10525] vhci_hcd vhci_hcd.0: Device attached [ 152.020360][T10538] vhci_hcd: connection closed [ 152.020510][ T1885] vhci_hcd vhci_hcd.5: stop threads [ 152.020571][T10534] vhci_hcd: connection closed [ 152.025209][T10536] vhci_hcd: connection closed [ 152.033184][T10532] vhci_hcd: connection closed [ 152.035122][ T1885] vhci_hcd vhci_hcd.5: release socket [ 152.046347][T10529] vhci_hcd: connection closed [ 152.050191][T10526] vhci_hcd: connection closed [ 152.050325][ T1885] vhci_hcd vhci_hcd.5: disconnect device [ 152.065193][ T1885] vhci_hcd vhci_hcd.5: stop threads [ 152.070445][ T1885] vhci_hcd vhci_hcd.5: release socket [ 152.075850][ T1885] vhci_hcd vhci_hcd.5: disconnect device [ 152.081709][ T1885] vhci_hcd vhci_hcd.5: stop threads [ 152.087120][ T1885] vhci_hcd vhci_hcd.5: release socket [ 152.092704][ T1885] vhci_hcd vhci_hcd.5: disconnect device [ 152.098414][ T1885] vhci_hcd vhci_hcd.5: stop threads [ 152.104654][ T1885] vhci_hcd vhci_hcd.5: release socket [ 152.110100][ T9213] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 152.117521][T10527] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 152.125034][ T1885] vhci_hcd vhci_hcd.5: disconnect device [ 152.131070][ T1885] vhci_hcd vhci_hcd.5: stop threads [ 152.136264][ T1885] vhci_hcd vhci_hcd.5: release socket [ 152.141756][ T1885] vhci_hcd vhci_hcd.5: disconnect device [ 152.147411][ T1885] vhci_hcd vhci_hcd.5: stop threads [ 152.152855][ T1885] vhci_hcd vhci_hcd.5: release socket [ 152.158252][ T1885] vhci_hcd vhci_hcd.5: disconnect device [ 152.729384][T10559] loop2: detected capacity change from 0 to 128 [ 152.782561][ T28] audit: type=1326 audit(1772205600.034:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.6.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a607fc799 code=0x7ffc0000 [ 152.816108][ T28] audit: type=1326 audit(1772205600.034:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.6.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a607fc799 code=0x7ffc0000 [ 152.840057][ T28] audit: type=1326 audit(1772205600.034:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.6.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f4a607fc799 code=0x7ffc0000 [ 152.889416][ T3920] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.894253][ T28] audit: type=1326 audit(1772205600.034:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.6.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a607fc799 code=0x7ffc0000 [ 152.922874][ T3920] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 44991 - 0 [ 152.923196][ T28] audit: type=1326 audit(1772205600.034:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.6.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a607fc799 code=0x7ffc0000 [ 152.956845][ T28] audit: type=1326 audit(1772205600.034:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.6.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4a607fc799 code=0x7ffc0000 [ 152.966265][ T3920] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 153.041649][ T28] audit: type=1326 audit(1772205600.034:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.6.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a607fc799 code=0x7ffc0000 [ 153.066917][ T3920] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.079103][ T28] audit: type=1326 audit(1772205600.034:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10556 comm="syz.6.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a607fc799 code=0x7ffc0000 [ 153.091121][ T3920] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 44991 - 0 [ 153.113344][ T3920] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 153.170879][ T3920] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.188904][ T3920] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 44991 - 0 [ 153.207215][ T3920] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 153.266035][ T3920] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.276156][ T3920] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 44991 - 0 [ 153.286456][ T3920] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 153.338626][T10566] chnl_net:caif_netlink_parms(): no params data found [ 153.375907][T10590] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.2425'. [ 153.392037][T10590] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2425'. [ 153.427730][T10566] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.438589][T10566] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.450777][T10566] bridge_slave_0: entered allmulticast mode [ 153.459391][T10566] bridge_slave_0: entered promiscuous mode [ 153.467116][T10566] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.474468][T10566] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.482791][T10566] bridge_slave_1: entered allmulticast mode [ 153.489236][T10566] bridge_slave_1: entered promiscuous mode [ 153.495768][ T3920] bridge_slave_0: left allmulticast mode [ 153.507436][ T3920] bridge_slave_0: left promiscuous mode [ 153.513203][ T3920] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.790894][ T3920] bond0 (unregistering): left promiscuous mode [ 153.799298][ T3920] bond_slave_0: left promiscuous mode [ 153.807052][ T3920] bond_slave_1: left promiscuous mode [ 153.814860][ T3920] veth0_to_bond: left promiscuous mode [ 153.821541][ T3920] bridge_slave_1: left promiscuous mode [ 153.837322][ T3920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.847683][ T3920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.857844][ T3920] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 153.882736][ T3920] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 153.894635][ T3920] bond0 (unregistering): Released all slaves [ 153.903505][ T3920] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 153.913656][ T3920] vcan1: left promiscuous mode [ 154.180075][T10626] netlink: 'syz.8.2439': attribute type 4 has an invalid length. [ 154.196137][ T3920] bond1 (unregistering): Released all slaves [ 154.253906][T10566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.277878][T10566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.320699][ T3920] hsr_slave_0: left promiscuous mode [ 154.357423][ T3920] hsr_slave_1: left promiscuous mode [ 154.369857][ T3920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.377260][ T3920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.413514][ T3920] veth1_vlan: left promiscuous mode [ 154.420125][ T3920] veth0_vlan: left promiscuous mode [ 154.467321][ T3920] pimreg (unregistering): left allmulticast mode [ 154.499904][ T3920] team0 (unregistering): Port device team_slave_1 removed [ 154.511226][ T3920] team0 (unregistering): Port device team_slave_0 removed [ 154.542777][ T3920] team0 (unregistering): Port device dummy0 removed [ 154.573048][T10638] wireguard0: entered promiscuous mode [ 154.578740][T10638] wireguard0: entered allmulticast mode [ 154.619708][T10566] team0: Port device team_slave_0 added [ 154.628139][T10566] team0: Port device team_slave_1 added [ 154.653184][T10566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.666161][T10566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.708555][ T28] audit: type=1400 audit(1772205601.954:751): avc: denied { ioctl } for pid=10648 comm="syz.5.2447" path="socket:[50570]" dev="sockfs" ino=50570 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 154.743530][T10566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.759629][T10566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.778563][T10566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.811375][T10566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.841535][T10566] hsr_slave_0: entered promiscuous mode [ 154.859056][T10566] hsr_slave_1: entered promiscuous mode [ 154.865209][T10566] debugfs: 'hsr0' already exists in 'hsr' [ 154.871021][T10566] Cannot create hsr debugfs directory [ 154.939686][ T3920] IPVS: stop unused estimator thread 0... [ 155.033715][T10566] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 155.047210][T10566] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 155.081873][T10566] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 155.100745][T10566] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 155.161509][T10566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.188276][T10566] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.213231][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.216635][T10691] loop5: detected capacity change from 0 to 1024 [ 155.220397][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.263307][ T1885] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.270422][ T1885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.290733][T10691] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 155.302985][T10691] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 155.305037][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2458'. [ 155.322240][T10566] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.333256][T10566] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.352694][T10691] JBD2: no valid journal superblock found [ 155.381340][T10691] EXT4-fs (loop5): Could not load journal inode [ 155.505196][T10566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.792601][T10566] veth0_vlan: entered promiscuous mode [ 155.824739][T10566] veth1_vlan: entered promiscuous mode [ 155.873297][T10566] veth0_macvtap: entered promiscuous mode [ 155.897808][T10566] veth1_macvtap: entered promiscuous mode [ 155.934441][T10566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.964272][T10566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.000550][ T5164] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.027704][ T5164] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.064969][ T5164] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.091842][ T5164] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.240317][T10778] IPv4: Oversized IP packet from 172.20.20.24 [ 156.246494][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 156.252674][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 156.273070][T10781] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2470'. [ 156.336097][T10786] netlink: 'syz.9.2472': attribute type 1 has an invalid length. [ 156.435704][ T28] audit: type=1400 audit(1772205603.684:752): avc: denied { setopt } for pid=10790 comm="syz.0.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 156.487202][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2476'. [ 156.497251][T10800] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2477'. [ 156.619879][T10807] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2479'. [ 156.964923][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2486'. [ 156.999659][T10839] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2486'. [ 157.148650][ T9213] usb 11-1: enqueue for inactive port 0 [ 157.158867][ T9213] usb 11-1: enqueue for inactive port 0 [ 157.238633][ T9213] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 157.699895][ T28] audit: type=1326 audit(1772205604.954:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10894 comm="syz.6.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a607fc799 code=0x7ffc0000 [ 157.783445][ T28] audit: type=1326 audit(1772205604.954:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10894 comm="syz.6.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a607fc799 code=0x7ffc0000 [ 157.817622][ T28] audit: type=1326 audit(1772205604.954:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10894 comm="syz.6.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a607fc799 code=0x7ffc0000 [ 157.841601][ T28] audit: type=1326 audit(1772205604.984:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10894 comm="syz.6.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f4a607fc799 code=0x7ffc0000 [ 157.870368][ T28] audit: type=1326 audit(1772205604.984:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10894 comm="syz.6.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a607fc799 code=0x7ffc0000 [ 157.894466][ T28] audit: type=1326 audit(1772205604.984:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10894 comm="syz.6.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a607fc799 code=0x7ffc0000 [ 157.919663][ T28] audit: type=1326 audit(1772205604.984:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10894 comm="syz.6.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a607fc799 code=0x7ffc0000 [ 157.943913][ T28] audit: type=1326 audit(1772205604.984:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10894 comm="syz.6.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a607fc799 code=0x7ffc0000 [ 157.967962][ T28] audit: type=1326 audit(1772205604.984:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10894 comm="syz.6.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f4a607fc799 code=0x7ffc0000 [ 158.173321][T10923] netem: incorrect ge model size [ 158.191067][T10923] netem: change failed [ 158.243601][T10927] loop9: detected capacity change from 0 to 512 [ 158.279284][T10927] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.308646][T10927] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.353348][T10566] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.500384][T10883] syz.5.2504 (10883) used greatest stack depth: 6920 bytes left [ 158.615561][T10943] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2526'. [ 159.166658][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2536'. [ 159.194074][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2536'. [ 159.331966][T10972] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2538'. [ 159.458845][T10978] wireguard0: entered promiscuous mode [ 159.468970][T10978] wireguard0: entered allmulticast mode [ 160.528145][T11030] loop8: detected capacity change from 0 to 128 [ 160.750759][T11037] vlan2: entered allmulticast mode [ 160.762770][T11037] macsec0: entered allmulticast mode [ 160.775343][T11037] veth1_macvtap: entered allmulticast mode [ 160.961763][ T9213] IPVS: starting estimator thread 0... [ 161.076241][T11048] IPVS: using max 2544 ests per chain, 127200 per kthread [ 161.751291][T11071] netlink: 'syz.6.2578': attribute type 10 has an invalid length. [ 162.087414][T11071] geneve1: entered promiscuous mode [ 162.094722][T11071] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 162.103930][ T5165] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.115634][ T5165] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.127102][ T5165] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.136699][ T5165] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.542730][T11082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.557969][T11082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.860286][T11092] loop8: detected capacity change from 0 to 1024 [ 162.869255][T11092] EXT4-fs: inline encryption not supported [ 162.878943][T11092] EXT4-fs: Ignoring removed nobh option [ 162.891644][T11092] EXT4-fs: Ignoring removed nobh option [ 162.897558][T11092] EXT4-fs: Ignoring removed bh option [ 162.917866][T11092] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.953925][T11092] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.2588: Allocating blocks 385-513 which overlap fs metadata [ 162.975164][T11092] EXT4-fs (loop8): pa ffff888107e9b380: logic 16, phys. 129, len 24 [ 162.983199][T11092] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 163.033752][ T9107] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.340483][T11125] loop9: detected capacity change from 0 to 512 [ 163.345583][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 163.345595][ T28] audit: type=1400 audit(1772205610.594:770): avc: denied { append } for pid=11128 comm="syz.5.2599" name="rt_cache" dev="proc" ino=4026533412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 163.404515][T11125] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.2598: couldn't read orphan inode 26 (err -116) [ 163.418889][T11125] loop9: lost filesystem error report for type 5 error -116 [ 163.419792][T11125] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.499092][T11125] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.559838][T11143] loop5: detected capacity change from 0 to 1024 [ 163.584067][T11125] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #3: comm syz.9.2598: corrupted inode contents [ 163.587950][T11143] EXT4-fs: inline encryption not supported [ 163.607931][T11143] EXT4-fs: Ignoring removed nobh option [ 163.614116][T11125] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #3: comm syz.9.2598: mark_inode_dirty error [ 163.629018][T11143] EXT4-fs: Ignoring removed nobh option [ 163.634738][T11143] EXT4-fs: Ignoring removed bh option [ 163.640482][T11125] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2598: bg 0: block 64: padding at end of block bitmap is not set [ 163.658036][T11125] Quota error (device loop9): write_blk: dquota write failed [ 163.666269][T11125] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 163.670214][T11150] syzkaller0: entered promiscuous mode [ 163.678040][T11143] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.694137][T11150] syzkaller0: entered allmulticast mode [ 163.694479][T11125] EXT4-fs error (device loop9): ext4_acquire_dquot:7001: comm syz.9.2598: Failed to acquire dquot type 0 [ 163.758245][T10566] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.767783][T11143] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.2606: Allocating blocks 385-513 which overlap fs metadata [ 163.809490][T11159] EXT4-fs (loop5): pa ffff888107e6f4d0: logic 16, phys. 129, len 24 [ 163.817504][T11159] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 163.999144][ T6782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.140667][T11186] loop5: detected capacity change from 0 to 512 [ 164.167664][T11186] EXT4-fs: Ignoring removed nobh option [ 164.200402][T11186] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 164.229478][T11186] EXT4-fs (loop5): 1 truncate cleaned up [ 164.241374][T11186] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.244767][T11179] loop8: detected capacity change from 0 to 1024 [ 164.282686][T11179] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 164.298970][T11179] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 164.328706][T11179] JBD2: no valid journal superblock found [ 164.334778][T11179] EXT4-fs (loop8): Could not load journal inode [ 164.494259][T11198] netlink: 'syz.8.2628': attribute type 1 has an invalid length. [ 164.537387][T11198] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.773745][T11200] bond1: (slave veth5): Enslaving as an active interface with a down link [ 164.801110][T11198] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 164.817642][T11198] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 165.035664][T11208] loop8: detected capacity change from 0 to 1024 [ 165.048502][ T28] audit: type=1400 audit(1772205612.304:771): avc: denied { bind } for pid=11205 comm="syz.6.2630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 165.053260][T11208] EXT4-fs: inline encryption not supported [ 165.095215][T11210] netlink: 'syz.0.2633': attribute type 1 has an invalid length. [ 165.143760][T11210] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.161838][T11217] loop9: detected capacity change from 0 to 512 [ 165.186760][ T6782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.220371][T11210] bond2: (slave ip6erspan0): making interface the new active one [ 165.229962][T11210] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 165.258864][T11208] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.301007][T11217] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2636: invalid indirect mapped block 256 (level 2) [ 165.314667][ T28] audit: type=1400 audit(1772205612.554:772): avc: denied { add_name } for pid=11207 comm="syz.8.2632" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 165.362333][T11217] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 165.368494][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 165.384057][ C0] EXT4-fs (loop9): initial error at time 1772205612: ext4_free_branches:1023: inode 11 [ 165.393779][ C0] EXT4-fs (loop9): last error at time 1772205612: ext4_free_branches:1023: inode 11 [ 165.422032][ T28] audit: type=1400 audit(1772205612.664:773): avc: denied { remove_name } for pid=11207 comm="syz.8.2632" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 165.528137][T11217] EXT4-fs (loop9): 2 truncates cleaned up [ 165.537813][T11217] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.560173][ T9107] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.605557][T10566] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.717265][T11249] __nla_validate_parse: 7 callbacks suppressed [ 165.717281][T11249] netlink: 2036 bytes leftover after parsing attributes in process `syz.6.2645'. [ 165.752817][T11249] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2645'. [ 165.943406][T11263] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2653'. [ 166.096453][ T28] audit: type=1326 audit(1772205613.344:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11270 comm="syz.9.2656" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b37c1c799 code=0x0 [ 166.280413][T11290] loop8: detected capacity change from 0 to 1024 [ 166.289904][T11290] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 166.303447][T11290] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.504261][T11297] geneve2: entered promiscuous mode [ 166.510402][ T5169] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 37431 - 0 [ 166.519831][ T5169] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 37431 - 0 [ 166.529386][ T5169] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 37431 - 0 [ 166.537929][ T5169] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 37431 - 0 [ 166.669852][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2663'. [ 167.122969][ T9107] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 167.299872][T11317] netlink: 'syz.0.2667': attribute type 1 has an invalid length. [ 167.325483][T11317] bond3: entered promiscuous mode [ 167.340749][T11317] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.369856][T11319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2667'. [ 167.419243][T11319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2667'. [ 167.539682][T11317] bond3: (slave bridge1): making interface the new active one [ 167.561773][T11317] bridge1: entered promiscuous mode [ 167.584109][T11317] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 167.731041][T11331] netlink: 'syz.6.2672': attribute type 1 has an invalid length. [ 167.760225][T11331] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.825095][T11333] bond1: (slave veth5): Enslaving as an active interface with a down link [ 167.939992][T11331] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 167.977267][T11331] bond1: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 168.045962][ T28] audit: type=1400 audit(1772205615.294:775): avc: denied { mounton } for pid=11337 comm="syz.0.2674" path="/file0" dev="ramfs" ino=57186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 168.267676][T11367] netlink: 'syz.6.2681': attribute type 1 has an invalid length. [ 168.300999][T11367] bond2: entered promiscuous mode [ 168.306193][T11367] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.339833][T11367] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2681'. [ 168.350809][T11322] syz.8.2669 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 168.371607][T11322] CPU: 1 UID: 0 PID: 11322 Comm: syz.8.2669 Tainted: G W syzkaller #0 PREEMPT(full) [ 168.371633][T11322] Tainted: [W]=WARN [ 168.371639][T11322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 168.371649][T11322] Call Trace: [ 168.371654][T11322] [ 168.371661][T11322] __dump_stack+0x1d/0x30 [ 168.371687][T11322] dump_stack_lvl+0x95/0xd0 [ 168.371761][T11322] dump_stack+0x15/0x1b [ 168.371859][T11322] dump_header+0x80/0x240 [ 168.371882][T11322] oom_kill_process+0x295/0x350 [ 168.371967][T11322] out_of_memory+0x97d/0xb80 [ 168.371986][T11322] try_charge_memcg+0x62e/0xa10 [ 168.372002][T11367] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2681'. [ 168.372018][T11322] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 168.372100][T11322] __swap_cache_prepare_and_add+0x386/0x530 [ 168.372143][T11322] swap_cache_alloc_folio+0xa2/0x120 [ 168.372169][T11322] swap_cluster_readahead+0x26e/0x3d0 [ 168.372198][T11322] swapin_readahead+0xde/0x840 [ 168.372288][T11322] ? _raw_spin_unlock+0x9/0x30 [ 168.372309][T11322] ? swap_put_entries_cluster+0x385/0x3a0 [ 168.372407][T11322] ? swap_put_entries_cluster+0x91/0x3a0 [ 168.372479][T11322] ? __rcu_read_unlock+0x4e/0x70 [ 168.372499][T11322] ? swap_cache_get_folio+0x26f/0x280 [ 168.372524][T11322] do_swap_page+0x309/0x2210 [ 168.372554][T11322] ? css_rstat_updated+0xbb/0x280 [ 168.372615][T11322] ? __rcu_read_lock+0x36/0x50 [ 168.372634][T11322] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 168.372663][T11322] handle_mm_fault+0xb40/0x3020 [ 168.372722][T11322] ? vma_start_read+0x1c7/0x2c0 [ 168.372800][T11322] do_user_addr_fault+0x62f/0x1050 [ 168.372828][T11322] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 168.372853][T11322] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 168.372876][T11322] ? trace_page_fault_user+0x1f/0xe0 [ 168.372962][T11322] exc_page_fault+0x62/0xa0 [ 168.372988][T11322] asm_exc_page_fault+0x26/0x30 [ 168.373057][T11322] RIP: 0033:0x7f03ca1178f8 [ 168.373078][T11322] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 168.373102][T11322] RSP: 002b:00007ffd7b3ef720 EFLAGS: 00010246 [ 168.373119][T11322] RAX: 0000000000000000 RBX: 000055556d62c500 RCX: 00007f03ca11cfce [ 168.373132][T11322] RDX: 00007ffd7b3ef770 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.373222][T11322] RBP: 00007f03ca3d7da0 R08: 0000000000000000 R09: 0000000000000000 [ 168.373234][T11322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000029199 [ 168.373314][T11322] R13: 00007f03ca3d618c R14: 0000000000028efb R15: 00007f03ca3d6180 [ 168.373337][T11322] [ 168.374052][T11322] memory: usage 307200kB, limit 307200kB, failcnt 229 [ 168.469185][T11382] bond2: (slave bridge4): making interface the new active one [ 168.471629][T11322] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 168.492948][T11382] bridge4: entered promiscuous mode [ 168.513652][T11322] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 168.536867][T11382] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 168.615138][T11394] loop5: detected capacity change from 0 to 512 [ 168.623021][T11322] Memory cgroup stats for [ 168.679617][T11394] EXT4-fs: Ignoring removed bh option [ 168.692991][T11322] /syz8: [ 168.693121][T11322] cache 0 [ 168.711359][T11322] rss 0 [ 168.729608][T11398] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2686'. [ 168.741964][T11394] EXT4-fs: inline encryption not supported [ 168.747945][T11322] shmem 0 [ 168.752226][T11398] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2686'. [ 168.755100][T11322] mapped_file 0 [ 168.769961][T11322] dirty 0 [ 168.772894][T11322] writeback 0 [ 168.780781][T11322] workingset_refault_anon 2200 [ 168.785558][T11322] workingset_refault_file 0 [ 168.785709][T11394] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 168.792574][T11409] loop9: detected capacity change from 0 to 512 [ 168.801597][T11322] swap 204800 [ 168.809026][T11322] swapcached 1011712 [ 168.813828][T11409] EXT4-fs: Ignoring removed nobh option [ 168.823216][T11322] pgpgin 33992 [ 168.832067][T11322] pgpgout 33992 [ 168.837896][T11409] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 168.839888][T11322] pgfault 45118 [ 168.851837][T11394] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 168.866472][T11394] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2685: bg 0: block 248: padding at end of block bitmap is not set [ 168.870497][T11322] pgmajfault 297 [ 168.884868][T11322] inactive_anon 0 [ 168.889100][T11322] active_anon 0 [ 168.891693][T11394] loop5: lost filesystem error report for type 5 error -117 [ 168.892615][T11409] EXT4-fs (loop9): 1 truncate cleaned up [ 168.892700][T11394] Quota error (device loop5): write_blk: dquota write failed [ 168.899919][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 168.899935][ C1] EXT4-fs (loop5): last error at time 1772205616: ext4_validate_block_bitmap:441 [ 168.900713][T11409] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.905833][T11394] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 168.915868][T11322] inactive_file 0 [ 168.920423][T11394] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.2685: Failed to acquire dquot type 1 [ 168.950538][T11322] active_file 0 [ 168.954657][T11394] loop5: lost filesystem error report for type 5 error -117 [ 168.968960][T11322] unevictable 0 [ 168.980079][T11322] hierarchical_memory_limit 314572800 [ 168.985549][T11322] hierarchical_memsw_limit 9223372036854771712 [ 168.994738][T11322] total_cache 0 [ 168.995324][T11394] EXT4-fs (loop5): 1 truncate cleaned up [ 168.998257][T11322] total_rss 0 [ 169.007390][T11322] total_shmem 0 [ 169.011037][T11322] total_mapped_file 0 [ 169.015036][T11322] total_dirty 0 [ 169.018732][T11322] total_writeback 0 [ 169.022570][T11322] total_workingset_refault_anon 2200 [ 169.027861][T11322] total_workingset_refault_file 0 [ 169.029309][T11394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 169.033158][T11322] total_swap 204800 [ 169.049319][T11322] total_swapcached 1011712 [ 169.053782][T11322] total_pgpgin 33992 [ 169.057662][T11322] total_pgpgout 33992 [ 169.061974][T11322] total_pgfault 45118 [ 169.075104][T11322] total_pgmajfault 297 [ 169.081905][T11322] total_inactive_anon 0 [ 169.088538][T11322] total_active_anon 0 [ 169.098546][T11322] total_inactive_file 0 [ 169.108474][T11322] total_active_file 0 [ 169.112509][T11322] total_unevictable 0 [ 169.118618][T11322] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.2669,pid=11322,uid=0 [ 169.154251][T11322] Memory cgroup out of memory: Killed process 11322 (syz.8.2669) total-vm:96340kB, anon-rss:1224kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 169.179761][T11423] netlink: 'syz.0.2689': attribute type 1 has an invalid length. [ 169.197913][T11423] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.247474][T11423] bond4: (slave veth5): Enslaving as an active interface with a down link [ 169.287515][ T6782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 169.373338][T11423] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 169.434024][T11423] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 169.484846][T11429] bridge0: entered allmulticast mode [ 169.672617][ T23] IPVS: starting estimator thread 0... [ 169.674640][T10566] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.758608][T11449] IPVS: using max 2112 ests per chain, 105600 per kthread [ 169.869901][T11465] netlink: 'syz.9.2705': attribute type 1 has an invalid length. [ 169.877813][T11465] netlink: 'syz.9.2705': attribute type 4 has an invalid length. [ 169.897367][T11465] netlink: 'syz.9.2705': attribute type 1 has an invalid length. [ 169.914202][T11465] netlink: 'syz.9.2705': attribute type 4 has an invalid length. [ 169.943901][T11456] syz.6.2703 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 170.033638][T11456] CPU: 1 UID: 0 PID: 11456 Comm: syz.6.2703 Tainted: G W syzkaller #0 PREEMPT(full) [ 170.033667][T11456] Tainted: [W]=WARN [ 170.033685][T11456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 170.033697][T11456] Call Trace: [ 170.033704][T11456] [ 170.033712][T11456] __dump_stack+0x1d/0x30 [ 170.033739][T11456] dump_stack_lvl+0x95/0xd0 [ 170.033762][T11456] dump_stack+0x15/0x1b [ 170.033782][T11456] dump_header+0x80/0x240 [ 170.033877][T11456] oom_kill_process+0x295/0x350 [ 170.033898][T11456] out_of_memory+0x97d/0xb80 [ 170.033974][T11456] try_charge_memcg+0x62e/0xa10 [ 170.034003][T11456] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 170.034050][T11456] __swap_cache_prepare_and_add+0x386/0x530 [ 170.034098][T11456] swap_cache_alloc_folio+0xa2/0x120 [ 170.034124][T11456] swap_cluster_readahead+0x36b/0x3d0 [ 170.034172][T11456] swapin_readahead+0xde/0x840 [ 170.034197][T11456] ? _raw_spin_unlock+0x9/0x30 [ 170.034223][T11456] ? swap_put_entries_cluster+0x385/0x3a0 [ 170.034260][T11456] ? swap_put_entries_cluster+0x91/0x3a0 [ 170.034347][T11456] ? __rcu_read_unlock+0x4e/0x70 [ 170.034364][T11456] ? swap_cache_get_folio+0x26f/0x280 [ 170.034447][T11456] do_swap_page+0x309/0x2210 [ 170.034498][T11456] ? css_rstat_updated+0xbb/0x280 [ 170.034519][T11456] ? __rcu_read_lock+0x36/0x50 [ 170.034537][T11456] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 170.034565][T11456] handle_mm_fault+0xb40/0x3020 [ 170.034593][T11456] ? vma_start_read+0x1c7/0x2c0 [ 170.034621][T11456] do_user_addr_fault+0x62f/0x1050 [ 170.034652][T11456] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 170.034729][T11456] ? trace_page_fault_user+0x1f/0xe0 [ 170.034759][T11456] exc_page_fault+0x62/0xa0 [ 170.034799][T11456] asm_exc_page_fault+0x26/0x30 [ 170.034821][T11456] RIP: 0033:0x7f4a606ca17e [ 170.034838][T11456] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 00 e8 e8 b8 ff ff 48 39 dd 75 df 0f 1f 00 8b 05 36 dc 3a 00 85 c0 0f 8e 53 fd ff ff ad 82 fe ff 49 39 c4 73 88 48 8d 1d 11 be 3a 00 83 3d 16 dc 3a [ 170.034858][T11456] RSP: 002b:00007ffeb28c6470 EFLAGS: 00010202 [ 170.034874][T11456] RAX: 0000000000000001 RBX: 00007f4a60a77da0 RCX: 00005555740fc808 [ 170.034900][T11456] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 170.034910][T11456] RBP: 00007f4a60a77da0 R08: 0000000000000000 R09: 0000000000000000 [ 170.034924][T11456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000029a55 [ 170.034937][T11456] R13: 00007f4a60a7609c R14: 00000000000297c8 R15: 00007f4a60a76090 [ 170.034957][T11456] [ 170.035598][T11456] memory: usage 254732kB, limit 307200kB, failcnt 155 [ 170.276318][T11489] loop5: detected capacity change from 0 to 128 [ 170.303643][T11456] memory+swap: usage 254972kB, limit 9007199254740988kB, failcnt 0 [ 170.323521][T11489] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.328519][T11456] kmem: usage 217352kB, limit 9007199254740988kB, failcnt 0 [ 170.366119][T11489] ext4 filesystem being mounted at /274/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.368469][T11456] Memory cgroup stats for /syz6: [ 170.376524][T11456] cache 0 [ 170.398468][T11456] rss 4096 [ 170.401548][T11456] shmem 0 [ 170.404479][T11456] mapped_file 0 [ 170.407924][T11456] dirty 0 [ 170.421350][ T6782] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.428499][T11456] writeback 0 [ 170.433625][T11456] workingset_refault_anon 1816 [ 170.438368][T11456] workingset_refault_file 0 [ 170.445665][T11456] swap 262144 [ 170.448965][T11456] swapcached 266240 [ 170.452769][T11456] pgpgin 151561 [ 170.456278][T11456] pgpgout 151560 [ 170.460010][T11456] pgfault 77335 [ 170.463489][T11456] pgmajfault 246 [ 170.467014][T11456] inactive_anon 0 [ 170.470826][T11456] active_anon 4096 [ 170.474582][T11456] inactive_file 0 [ 170.478201][T11456] active_file 0 [ 170.503653][T11456] unevictable 0 [ 170.507242][T11456] hierarchical_memory_limit 314572800 [ 170.513728][T11456] hierarchical_memsw_limit 9223372036854771712 [ 170.520120][T11456] total_cache 0 [ 170.523628][T11456] total_rss 4096 [ 170.527155][T11456] total_shmem 0 [ 170.530885][T11456] total_mapped_file 0 [ 170.534851][T11456] total_dirty 0 [ 170.538357][T11456] total_writeback 0 [ 170.543899][T11456] total_workingset_refault_anon 1816 [ 170.549275][T11456] total_workingset_refault_file 0 [ 170.554315][T11456] total_swap 262144 [ 170.558126][T11456] total_swapcached 266240 [ 170.562725][T11456] total_pgpgin 151561 [ 170.566719][T11456] total_pgpgout 151560 [ 170.571214][T11456] total_pgfault 77335 [ 170.578406][T11456] total_pgmajfault 246 [ 170.582722][T11456] total_inactive_anon 0 [ 170.587059][T11456] total_active_anon 4096 [ 170.591667][T11456] total_inactive_file 0 [ 170.596104][T11456] total_active_file 0 [ 170.600475][T11456] total_unevictable 0 [ 170.604578][T11456] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.2703,pid=11456,uid=0 [ 170.628596][T11456] Memory cgroup out of memory: Killed process 11456 (syz.6.2703) total-vm:96208kB, anon-rss:1224kB, file-rss:22204kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 170.862641][T11516] netlink: 'syz.0.2728': attribute type 5 has an invalid length. [ 170.917180][T11521] loop9: detected capacity change from 0 to 1024 [ 170.945759][T11521] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.053959][ T28] audit: type=1400 audit(1772205618.304:776): avc: denied { ioctl } for pid=11534 comm="syz.5.2734" path="socket:[58470]" dev="sockfs" ino=58470 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 171.136862][T10566] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.537634][T11641] loop8: detected capacity change from 0 to 1024 [ 173.580122][T11641] EXT4-fs: Ignoring removed orlov option [ 173.626556][T11641] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.738623][T11641] EXT4-fs error (device loop8): ext4_free_inode:354: comm syz.8.2779: bit already cleared for inode 13 [ 173.769985][T11663] __nla_validate_parse: 4 callbacks suppressed [ 173.770000][T11663] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2786'. [ 173.820868][T11671] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2786'. [ 173.830963][T11670] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.845606][T11663] netlink: 3 bytes leftover after parsing attributes in process `syz.9.2786'. [ 173.856849][T11670] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 173.864688][T11670] IPv6: NLM_F_CREATE should be set when creating new route [ 173.927721][ T9107] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.092931][ T28] audit: type=1326 audit(1772205621.324:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.5.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29df9bc799 code=0x7ffc0000 [ 174.123353][ T28] audit: type=1326 audit(1772205621.324:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.5.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f29df9bc799 code=0x7ffc0000 [ 174.148558][T11696] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2808'. [ 174.158664][T11696] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2808'. [ 174.209739][ T28] audit: type=1326 audit(1772205621.334:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.5.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29df9bc799 code=0x7ffc0000 [ 174.233581][ T28] audit: type=1326 audit(1772205621.334:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.5.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f29df9bc799 code=0x7ffc0000 [ 174.259059][ T28] audit: type=1326 audit(1772205621.334:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.5.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29df9bc799 code=0x7ffc0000 [ 174.297369][ T28] audit: type=1400 audit(1772205621.344:782): avc: denied { unmount } for pid=6782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 174.470186][T11706] loop9: detected capacity change from 0 to 128 [ 175.071628][T11735] loop8: detected capacity change from 0 to 512 [ 175.078233][T11735] EXT4-fs: Ignoring removed nobh option [ 175.088821][T11735] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 175.116748][T11735] EXT4-fs (loop8): 1 truncate cleaned up [ 175.127464][T11735] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.553714][T11754] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2823'. [ 175.960981][ T3001] ================================================================== [ 175.969065][ T3001] BUG: KCSAN: data-race in set_nlink / set_nlink [ 175.975391][ T3001] [ 175.977710][ T3001] read to 0xffff88811a79c048 of 4 bytes by task 4568 on cpu 0: [ 175.985235][ T3001] set_nlink+0x29/0xb0 [ 175.989299][ T3001] kernfs_iop_permission+0x1e2/0x220 [ 175.994576][ T3001] inode_permission+0x31f/0x3b0 [ 175.999425][ T3001] link_path_walk+0x779/0xe30 [ 176.004110][ T3001] path_openat+0x1c6/0x2050 [ 176.008621][ T3001] do_file_open+0x16c/0x290 [ 176.013133][ T3001] do_sys_openat2+0x94/0x130 [ 176.017719][ T3001] __x64_sys_openat+0xf2/0x120 [ 176.022477][ T3001] x64_sys_call+0x1e39/0x3020 [ 176.027154][ T3001] do_syscall_64+0x12c/0x370 [ 176.031733][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.037610][ T3001] [ 176.039916][ T3001] write to 0xffff88811a79c048 of 4 bytes by task 3001 on cpu 1: [ 176.047524][ T3001] set_nlink+0x99/0xb0 [ 176.051575][ T3001] kernfs_iop_permission+0x1e2/0x220 [ 176.056846][ T3001] inode_permission+0x31f/0x3b0 [ 176.061681][ T3001] link_path_walk+0x779/0xe30 [ 176.066344][ T3001] path_openat+0x1c6/0x2050 [ 176.070834][ T3001] do_file_open+0x16c/0x290 [ 176.075324][ T3001] do_sys_openat2+0x94/0x130 [ 176.079898][ T3001] __x64_sys_openat+0xf2/0x120 [ 176.084648][ T3001] x64_sys_call+0x1e39/0x3020 [ 176.089316][ T3001] do_syscall_64+0x12c/0x370 [ 176.093886][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.099761][ T3001] [ 176.102061][ T3001] value changed: 0x00000006 -> 0x00000005 [ 176.107753][ T3001] [ 176.110057][ T3001] Reported by Kernel Concurrency Sanitizer on: [ 176.116187][ T3001] CPU: 1 UID: 0 PID: 3001 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 176.126583][ T3001] Tainted: [W]=WARN [ 176.130363][ T3001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 176.140399][ T3001] ================================================================== [ 176.209345][ T9107] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.