last executing test programs: 1m17.297151434s ago: executing program 32 (id=561): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 1m15.928786922s ago: executing program 33 (id=572): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000300000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) 1m7.162684201s ago: executing program 0 (id=738): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m7.067132526s ago: executing program 0 (id=742): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40000000000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000340), r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 1m6.957201131s ago: executing program 0 (id=743): bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RSTATu(r0, &(0x7f0000000580)={0xc5, 0x7d, 0xa, {{0x0, 0xa9, 0x3, 0x5, {0x0, 0x1, 0x5}, 0x100000, 0x8, 0x7, 0x2, 0x1, '\x85', 0x1, '\x00', 0x73, '\x17\xe0_|s/\xec\xcf\x1e|~\xf4*wIX\xbe[_\x12\xd4zZs\x85\xc4/\xa2?\xbc=\x82O\xc7\xf7\xf1\r\xd0\x06\x14\xbb\xf1\xbb\x99\xaa\xdb\xf1\xf0\xe3\xdf\x1c\x16{\"\f\x8c0\xd0I\xff\x02):9\xe7\xa6\x9e~\xa9\xa3\xf7\xaaW)o\x96\x1bm+\xcb\xf1\xbf\x0e\xaa\xd6|\"\xf73r+F\x10\xf2P\xcc\x1f\xd7\x7f\xfc\x0e,x\xe5\x10^\xff\xf9\x12\x00\x00\x00\x00\x00\x00', 0x1, '{'}, 0x7, '\x97\xfe\xef\x85z\x03\x86'}}, 0xc5) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 1m6.875908045s ago: executing program 0 (id=746): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 1m6.867336765s ago: executing program 0 (id=749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x0, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x48, 0x2c, 0x52b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0x6}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'geneve1\x00'}]}}]}, 0x48}}, 0x24044094) 1m6.536191062s ago: executing program 0 (id=759): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8001, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m6.476143415s ago: executing program 34 (id=759): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8001, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 58.468752435s ago: executing program 1 (id=884): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x1a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000e81000b00886411"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 58.035863027s ago: executing program 1 (id=893): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044870}, 0x0) 57.767380941s ago: executing program 1 (id=896): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xf000000) 57.360697421s ago: executing program 1 (id=900): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000f80)={[{@grpquota}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}]}, 0xfe, 0x54c, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2eb4b68c660e677df7019051caafa00afaaf755a314a10400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x8, 0x100]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 56.97384411s ago: executing program 1 (id=905): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 53.819843138s ago: executing program 1 (id=920): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r2, 0x8004745a, 0x0) 53.803059379s ago: executing program 35 (id=920): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r2, 0x8004745a, 0x0) 51.034398307s ago: executing program 7 (id=961): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2203, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='!', 0x1}], 0x1}, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x21140200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0xc008744c, &(0x7f0000000180)) 50.991470909s ago: executing program 7 (id=954): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x10612, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1fb, 0x0, 0x5, 0x80008, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x1780, 0x0, 0x1, 0x164}, &(0x7f0000000dc0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 50.57789989s ago: executing program 7 (id=965): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04) getdents(r2, 0x0, 0x0) 50.537776332s ago: executing program 7 (id=966): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@i_version}, {@init_itable}, {@noblock_validity}]}, 0x1, 0x71e, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) fallocate(r0, 0x10, 0x3, 0x7c27) 49.531152422s ago: executing program 7 (id=978): r0 = syz_io_uring_setup(0xb7f, &(0x7f0000000500)={0x0, 0x38ab, 0x80, 0x200, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="200000000307010300000000000000000500000d090001"], 0x20}, 0x1, 0x0, 0x0, 0x40044}, 0x4044010) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x12, r3, 0x0, 0x0, 0x0, 0x40002262, 0x0, {0x1}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 49.111891423s ago: executing program 7 (id=987): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) unshare(0x26020480) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 49.097180474s ago: executing program 36 (id=987): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) unshare(0x26020480) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 36.254003576s ago: executing program 9 (id=1186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x21, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 35.97289442s ago: executing program 9 (id=1191): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x4040) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) 35.122005783s ago: executing program 9 (id=1201): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x1810882, &(0x7f0000000040)=ANY=[@ANYBLOB="756e695f786c6174653d312c726f6469722c757466383d302c73686f72746e616d653d77696e6e742c757466383d302c757466383d312c756e695f786c6174653d302c696f636861727365743d63703433372c756e695f786c6174653d302c6572726f72733d72656d6f756e742d726f2c757466383d312c757466383d312c73686f72746e616d653d77696e39352c6e66733d6e6f7374616c655f726f2c756e695f786c6174653d312c73686f72746e616d653d77696e39352c646973636172642c004338cb8631b26441e86414f461975e105d02960776fcb7ddfd80b96c1b2ffd13d5cc37784797dbc9e26b7c39310b49940995ce6e6ce1c218890b59506de99e2dd234abcde0be50d3de656741fee78f74e94ee73bd6d7162f0d2a8275e0a6125615ce223c21fe303d561d81b2681dce1c0b7061c5a347b2040e7b6c9210507527467dad005f3e38c47d4daa9d76c69f51ffeb2f81123fe54df14c6c02413e51ba63c35f11"], 0x0, 0x2b9, &(0x7f0000000280)="$eJzs3T9rc1UYAPDnpmkSdUgGJxG8oIPTy9t3dUmVFqqZlAzqoMW2IE0QWij4B9NOri6OfgJBcHP1A7j4DQRXwc0OhSv35t4kbdPYaNP65/db+vTc85zznNPTlA45ef/54eFeGgdnn/0crVYStW504zyJTtSichqXdL8MAODf7DzL4rdsbJm8JCJaqysLAFihpf/+f7fykgCAFXvr7Xfe2Oz1tt5M01ZsD7846ef/2edfx883D+LDGMR+PI52XERkE+N4O8uyUT3NdeKl4eikn2cO3/uxHH/z14gifyPa0SmaLufv9LY20rGZ/FFex9Pl/N08/0m049k58+/0tp7MyY9+I15+cab+R9GOnz6Ij2IQe0UR0/zPN9L0teyr3z99Ny8vz09GJ/1m0W8qW7vnHw0AAAAAAAAAAAAAAAAAAAAAAP9hj8q7c5pR3N+TN5X376xd5N+sR1rpXL6fZ5yfVANduR9olMXX1f06j9M0zcqO0/x6PFeP+sOsGgAAAAAAAAAAAAAAAAAAAP5Zjj/+5HB3MNg/KoLXszKYtCwXVLcBVG/r/6vjdCct9aMXYnHn5nSuWhkuGDnWqj5JxMIy8kX8vd24dfDUTTV/8+2yA7b+vM/6dK7olJtxx+uqTtfhbjJ/D5tRtbSqQ/L9bJ9G3HKuxk2PsqWOX2Puo/bSa288UwSjBX0iWVTYK7+Md65sKX+hTid9GsWuzk1fL4OZ9CtnY6nzfP21Iknu/OUHAAAAAAAAAAAAAAAAAACYMX3T75yHZwtTa1lzZWUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL2afv7/JKhfa7kajMrkccsPry7o3Iij4wdeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8DfwQAAP//4wFdTQ==") r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 34.967791121s ago: executing program 9 (id=1205): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a409080000d1ce5d29c2ee0000070000000fc6ea110ff4118039c2eb4b87c660d577df701905b9aafab4afaaf755e376a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f78359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) 33.441243317s ago: executing program 9 (id=1211): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2482, 0x10) 33.158060871s ago: executing program 9 (id=1222): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) 33.099411034s ago: executing program 37 (id=1222): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) 24.891503344s ago: executing program 3 (id=1366): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x560, &(0x7f0000000b00)="$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") quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000902, 0xffffffffffffffff, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xd}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000300)={&(0x7f0000000200)=""/212, 0xd4}) 24.676371395s ago: executing program 3 (id=1367): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14, 0x38}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x61, 0x0, 0x2700, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 24.513640234s ago: executing program 3 (id=1370): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x8) 24.403878849s ago: executing program 3 (id=1371): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 24.331728983s ago: executing program 3 (id=1372): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000412, &(0x7f0000000180)={[{@delalloc}, {@data_err_abort}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000000440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') 24.164792961s ago: executing program 3 (id=1378): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 24.129662343s ago: executing program 38 (id=1378): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 2.814490058s ago: executing program 2 (id=1720): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8000000000000000, 0x7ff}, 0x110c40, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) openat$tun(0xffffffffffffff9c, 0x0, 0xa0b41, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.755846431s ago: executing program 5 (id=1727): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno', 0x4) shutdown(r0, 0x1) 2.749226892s ago: executing program 2 (id=1728): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0xfff, 0x0, 0x6}, "1379"}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 2.733128262s ago: executing program 5 (id=1729): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r4, r2, 0x11, 0x0, r4}, 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r1, r2, 0x11, 0x0, r1}, 0x11) 2.698921744s ago: executing program 5 (id=1730): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc70, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.641102777s ago: executing program 5 (id=1732): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x12022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010004b04000000000034f27c76000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008000800810000000a000100aa"], 0x48}}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 2.58233805s ago: executing program 2 (id=1733): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) unshare(0x2040400) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) 2.474585395s ago: executing program 5 (id=1735): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8004, 0x40024e}, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0xffffffffffffffff, &(0x7f0000000380)=""/207, 0xcf, 0x2}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) 2.294461855s ago: executing program 5 (id=1736): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2b, 0x80801, 0x1) poll(&(0x7f00000000c0)=[{r1, 0x2187}], 0x1, 0x403) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 1.717193693s ago: executing program 2 (id=1747): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8004, 0x40024e}, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0xffffffffffffffff, &(0x7f0000000380)=""/207, 0xcf, 0x2}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) 1.716816513s ago: executing program 6 (id=1748): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x56}, 0x94) r0 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x4, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2a, 0x0, r3, 0x0, 0x0, 0x0, 0x12001, 0x1}) io_uring_enter(r0, 0x5d62, 0x0, 0x0, 0x0, 0x0) 1.624346198s ago: executing program 6 (id=1750): creat(&(0x7f0000000000)='./file0\x00', 0x93) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) write(r1, &(0x7f00000002c0)="fe", 0xfdef) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 1.57308589s ago: executing program 4 (id=1752): shmdt(0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) unshare(0x22020600) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x2, 0x0) 1.484685755s ago: executing program 2 (id=1753): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.38639681s ago: executing program 6 (id=1755): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r1, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3516, 0x67f, 0x64, 0x0, 0x0) 1.275993355s ago: executing program 8 (id=1757): openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x28802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.251569656s ago: executing program 6 (id=1758): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) pread64(r0, &(0x7f0000002200)=""/89, 0x59, 0x10000) 1.241481747s ago: executing program 8 (id=1759): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x2, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000080), 0x1003, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 1.147908612s ago: executing program 4 (id=1760): r0 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0xc, 0x1b}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71"], 0x0}, 0x94) 984.45804ms ago: executing program 4 (id=1761): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r1 = dup(r0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) 807.509889ms ago: executing program 8 (id=1762): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbc0cfb91c82f4a9164dda5e67a46d8e841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d72166cb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d090014b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd8f200000017587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eb00ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbb1d44925ce66ea1a94e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 807.395709ms ago: executing program 4 (id=1763): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/4104, 0x1008}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 629.112878ms ago: executing program 8 (id=1764): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0xa, 0x1, {0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(r0, &(0x7f0000000240)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xbc0, @loopback, 0x6}}, 0x24) 518.081313ms ago: executing program 6 (id=1765): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x1489a, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 402.485159ms ago: executing program 2 (id=1766): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x11, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000200)="00000000a03c3f98723b80b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 363.237841ms ago: executing program 8 (id=1767): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x10ffe, 0x3, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 194.97139ms ago: executing program 4 (id=1768): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x12022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010004b04000000000034f27c76000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008000800810000000a000100aa"], 0x48}}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 6.602959ms ago: executing program 6 (id=1769): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) flock(r1, 0x1) flock(r0, 0x5) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x64e, 0x2, 0x10000, 0x8, 0x2}) 748.519µs ago: executing program 8 (id=1770): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 4 (id=1780): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x1489a, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) kernel console output (not intermixed with test programs): 211] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 62.690726][ T5274] chnl_net:caif_netlink_parms(): no params data found [ 62.710441][ T5211] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 62.744845][ T4338] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.775582][ T5211] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 62.867070][ T5211] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 62.921220][ T5323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 62.978219][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.985418][ T5274] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.992654][ T5274] bridge_slave_0: entered allmulticast mode [ 62.999603][ T5274] bridge_slave_0: entered promiscuous mode [ 63.006339][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.022875][ T5274] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.032889][ T5274] bridge_slave_1: entered allmulticast mode [ 63.039590][ T5274] bridge_slave_1: entered promiscuous mode [ 63.114124][ T5274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.124973][ T5274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.165908][ T4338] sit0 (unregistering): left allmulticast mode [ 63.258489][ T4338] bond0 (unregistering): Released all slaves [ 63.289738][ T5211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.298388][ T5274] team0: Port device team_slave_0 added [ 63.307373][ T4338] hsr_slave_0: left promiscuous mode [ 63.313524][ T4338] hsr_slave_1: left promiscuous mode [ 63.322784][ T4338] veth1_macvtap: left promiscuous mode [ 63.337654][ T4338] veth0_macvtap: left promiscuous mode [ 63.346987][ T4338] veth1_vlan: left promiscuous mode [ 63.352314][ T4338] veth0_vlan: left promiscuous mode [ 63.483314][ T5274] team0: Port device team_slave_1 added [ 63.503090][ T5211] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.524705][ T5274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.532786][ T5274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.561922][ T5274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.574919][ T5274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.582449][ T5274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.609056][ T5274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.623573][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.630664][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.645101][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.652225][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.702408][ T5274] hsr_slave_0: entered promiscuous mode [ 63.709717][ T5274] hsr_slave_1: entered promiscuous mode [ 63.715613][ T5274] debugfs: 'hsr0' already exists in 'hsr' [ 63.722121][ T5274] Cannot create hsr debugfs directory [ 63.843150][ T4338] IPVS: stop unused estimator thread 0... [ 63.854779][ T5211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.927082][ T28] kauditd_printk_skb: 218 callbacks suppressed [ 63.927100][ T28] audit: type=1400 audit(1774022181.799:661): avc: denied { write } for pid=5433 comm="syz.1.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 64.000364][ T5274] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 64.022813][ T5274] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 64.040157][ T5274] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 64.073046][ T5274] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 64.142563][ T5453] netlink: 'syz.4.608': attribute type 4 has an invalid length. [ 64.161035][ T5453] netlink: 'syz.4.608': attribute type 4 has an invalid length. [ 64.232062][ T5274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.261340][ T5274] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.439989][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.447194][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.459288][ T5211] veth0_vlan: entered promiscuous mode [ 64.476788][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.483964][ T4347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.535873][ T5274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.555372][ T5274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.570575][ T5211] veth1_vlan: entered promiscuous mode [ 64.677941][ T5211] veth0_macvtap: entered promiscuous mode [ 64.685564][ T5211] veth1_macvtap: entered promiscuous mode [ 64.720607][ T5211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.750804][ T5211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.785846][ T5274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.799575][ T4340] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.834296][ T4340] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.861637][ T4340] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.895988][ T4340] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.925308][ T5521] gretap1: entered promiscuous mode [ 64.974702][ T28] audit: type=1400 audit(1774022182.839:662): avc: denied { mounton } for pid=5211 comm="syz-executor" path="/root/syzkaller.NloBk7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=10229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 65.046454][ T28] audit: type=1400 audit(1774022182.839:663): avc: denied { mount } for pid=5211 comm="syz-executor" name="/" dev="gadgetfs" ino=3994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 65.188280][ T5274] veth0_vlan: entered promiscuous mode [ 65.218554][ T5274] veth1_vlan: entered promiscuous mode [ 65.263040][ T5274] veth0_macvtap: entered promiscuous mode [ 65.288086][ T5274] veth1_macvtap: entered promiscuous mode [ 65.325546][ T28] audit: type=1400 audit(1774022183.199:664): avc: denied { watch watch_reads } for pid=5563 comm="syz.4.629" path="/123/file0" dev="tmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.348084][ T5568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.630'. [ 65.351828][ T5274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.390038][ T5274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.402161][ T5568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.630'. [ 65.403346][ T4340] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.446109][ T4340] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.456889][ T4340] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.479551][ T4340] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.490502][ T4340] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.521213][ T4340] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.538236][ T4340] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.571286][ T4340] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.023090][ T28] audit: type=1400 audit(1774022183.899:665): avc: denied { watch } for pid=5592 comm="syz.1.638" path="/110/file1" dev="tmpfs" ino=587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 66.471822][ T28] audit: type=1400 audit(1774022440.354:666): avc: denied { rename } for pid=5627 comm="syz.4.653" name="file0" dev="tmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 66.486989][ T5628] capability: warning: `syz.0.651' uses 32-bit capabilities (legacy support in use) [ 66.549521][ T5632] loop4: detected capacity change from 0 to 764 [ 66.567668][ T28] audit: type=1400 audit(1774022440.354:667): avc: denied { unlink } for pid=5627 comm="syz.4.653" name="file0" dev="tmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 66.597250][ T5632] rock: directory entry would overflow storage [ 66.605807][ T5632] rock: sig=0x4654, size=5, remaining=4 [ 66.638004][ T28] audit: type=1400 audit(1774022440.404:668): avc: denied { create } for pid=5624 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 66.706982][ T28] audit: type=1400 audit(1774022440.504:669): avc: denied { mount } for pid=5630 comm="syz.4.655" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 66.783949][ T5587] Set syz1 is full, maxelem 65536 reached [ 66.817004][ T28] audit: type=1400 audit(1774022440.694:670): avc: denied { write } for pid=5624 comm="syz.1.652" path="socket:[11429]" dev="sockfs" ino=11429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 67.093217][ T5655] 9p: Bad value for 'rfdno' [ 67.201385][ T5661] xt_hashlimit: size too large, truncated to 1048576 [ 67.636835][ T5676] loop6: detected capacity change from 0 to 128 [ 67.684168][ T5680] loop1: detected capacity change from 0 to 128 [ 67.734429][ T5683] syz.6.670: attempt to access beyond end of device [ 67.734429][ T5683] loop6: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 67.755724][ T5686] loop0: detected capacity change from 0 to 736 [ 67.788285][ T5687] loop1: detected capacity change from 0 to 512 [ 67.823626][ T5683] syz.6.670: attempt to access beyond end of device [ 67.823626][ T5683] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 67.847773][ T5687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.863440][ T5687] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.877179][ T5683] syz.6.670: attempt to access beyond end of device [ 67.877179][ T5683] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 67.890962][ T5683] syz.6.670: attempt to access beyond end of device [ 67.890962][ T5683] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 67.904638][ T5683] syz.6.670: attempt to access beyond end of device [ 67.904638][ T5683] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 67.918213][ T5683] syz.6.670: attempt to access beyond end of device [ 67.918213][ T5683] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 67.931765][ T5683] syz.6.670: attempt to access beyond end of device [ 67.931765][ T5683] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 67.945365][ T5683] syz.6.670: attempt to access beyond end of device [ 67.945365][ T5683] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 67.959217][ T5683] syz.6.670: attempt to access beyond end of device [ 67.959217][ T5683] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 67.973151][ T5683] syz.6.670: attempt to access beyond end of device [ 67.973151][ T5683] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 68.060908][ T5704] netlink: 'syz.0.681': attribute type 3 has an invalid length. [ 68.136055][ T5704] netlink: 'syz.0.681': attribute type 1 has an invalid length. [ 68.173265][ T5704] netlink: 198116 bytes leftover after parsing attributes in process `syz.0.681'. [ 68.201433][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.782419][ T5756] netlink: 'syz.1.702': attribute type 3 has an invalid length. [ 68.790161][ T5756] netlink: 772 bytes leftover after parsing attributes in process `syz.1.702'. [ 68.799602][ T5756] netlink: 'syz.1.702': attribute type 3 has an invalid length. [ 68.807675][ T5756] netlink: 772 bytes leftover after parsing attributes in process `syz.1.702'. [ 69.095723][ T5774] loop6: detected capacity change from 0 to 128 [ 69.136334][ T5774] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.181336][ T5783] netlink: 12 bytes leftover after parsing attributes in process `syz.5.712'. [ 69.221339][ T5783] netlink: 12 bytes leftover after parsing attributes in process `syz.5.712'. [ 69.230457][ T4338] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.267351][ T4338] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.281532][ T5774] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.289836][ T4338] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.325925][ T4338] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.374990][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 69.375007][ T28] audit: type=1400 audit(1774022443.244:678): avc: denied { read } for pid=5789 comm="syz.1.715" path="socket:[11653]" dev="sockfs" ino=11653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 69.426522][ T5274] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.439428][ T28] audit: type=1400 audit(1774022443.264:679): avc: denied { rename } for pid=5773 comm="syz.6.709" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 69.548661][ T5799] loop6: detected capacity change from 0 to 2048 [ 69.590431][ T5799] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.647705][ T5799] ref_ctr_offset mismatch. inode: 0xf offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 69.806692][ T5814] loop1: detected capacity change from 0 to 256 [ 69.846734][ T5814] FAT-fs (loop1): Directory bread(block 64) failed [ 69.853368][ T5814] FAT-fs (loop1): Directory bread(block 65) failed [ 69.860900][ T5814] FAT-fs (loop1): Directory bread(block 66) failed [ 69.867691][ T5814] FAT-fs (loop1): Directory bread(block 67) failed [ 69.877856][ T5274] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.898107][ T5816] loop5: detected capacity change from 0 to 128 [ 69.930119][ T5814] FAT-fs (loop1): Directory bread(block 68) failed [ 69.937302][ T5814] FAT-fs (loop1): Directory bread(block 69) failed [ 69.957113][ T5814] FAT-fs (loop1): Directory bread(block 70) failed [ 69.963957][ T5814] FAT-fs (loop1): Directory bread(block 71) failed [ 69.977032][ T5814] FAT-fs (loop1): Directory bread(block 72) failed [ 69.984280][ T5816] Buffer I/O error on dev loop5, logical block 72, lost async page write [ 70.001249][ T5816] Buffer I/O error on dev loop5, logical block 69, lost async page write [ 70.016103][ T5814] FAT-fs (loop1): Directory bread(block 73) failed [ 70.022380][ T5823] netlink: 32 bytes leftover after parsing attributes in process `syz.6.726'. [ 70.039567][ T28] audit: type=1400 audit(1774022443.914:680): avc: denied { ioctl } for pid=5820 comm="syz.0.727" path="socket:[12406]" dev="sockfs" ino=12406 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.073185][ T5823] netlink: 32 bytes leftover after parsing attributes in process `syz.6.726'. [ 70.270133][ T5837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.734'. [ 70.312371][ T5839] netlink: 'syz.4.733': attribute type 1 has an invalid length. [ 70.326731][ T5839] bond1: entered promiscuous mode [ 70.333414][ T5839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.385481][ T28] audit: type=1400 audit(1774022444.264:681): avc: denied { getopt } for pid=5841 comm="syz.4.735" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.422855][ T5844] loop5: detected capacity change from 0 to 512 [ 70.439502][ T5844] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 70.471656][ T5844] EXT4-fs (loop5): 1 truncate cleaned up [ 70.487422][ T5844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.558437][ T5829] dvmrp0: entered allmulticast mode [ 70.566559][ T5829] dvmrp0: left allmulticast mode [ 70.567383][ T5211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.756184][ T23] IPVS: starting estimator thread 0... [ 70.867285][ T5863] IPVS: using max 2640 ests per chain, 132000 per kthread [ 70.980970][ T28] audit: type=1400 audit(1774022444.854:682): avc: denied { bind } for pid=5882 comm="syz.4.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.095468][ T28] audit: type=1400 audit(1774022444.974:683): avc: denied { create } for pid=5889 comm="syz.5.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 71.120393][ T28] audit: type=1400 audit(1774022445.004:684): avc: denied { bind } for pid=5889 comm="syz.5.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 71.141476][ T28] audit: type=1400 audit(1774022445.004:685): avc: denied { connect } for pid=5889 comm="syz.5.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 71.166028][ T5892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.178737][ T28] audit: type=1400 audit(1774022445.004:686): avc: denied { write } for pid=5889 comm="syz.5.757" path="socket:[12584]" dev="sockfs" ino=12584 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 71.202654][ T5892] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.219619][ T28] audit: type=1400 audit(1774022445.104:687): avc: denied { read } for pid=5895 comm="syz.4.760" path="socket:[11765]" dev="sockfs" ino=11765 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 71.244038][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.293390][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.336870][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.351880][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.450006][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.450641][ T5921] netlink: 24 bytes leftover after parsing attributes in process `syz.4.766'. [ 71.564642][ T12] bridge_slave_1: left allmulticast mode [ 71.587870][ T12] bridge_slave_1: left promiscuous mode [ 71.606132][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.762642][ T12] bridge_slave_0: left allmulticast mode [ 71.769057][ T12] bridge_slave_0: left promiscuous mode [ 71.774817][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.875209][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.888488][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.901065][ T12] bond0 (unregistering): Released all slaves [ 71.983359][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.006624][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.034982][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.051557][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.081165][ T12] veth1_macvtap: left promiscuous mode [ 72.097385][ T12] veth0_macvtap: left promiscuous mode [ 72.110214][ T12] veth1_vlan: left promiscuous mode [ 72.121596][ T12] veth0_vlan: left promiscuous mode [ 72.266579][ T12] team0 (unregistering): Port device team_slave_1 removed [ 72.285058][ T12] team0 (unregistering): Port device team_slave_0 removed [ 72.317622][ T5950] Set syz1 is full, maxelem 65536 reached [ 72.360047][ T5978] netlink: 44 bytes leftover after parsing attributes in process `syz.4.778'. [ 72.371189][ T5978] netlink: 44 bytes leftover after parsing attributes in process `syz.4.778'. [ 72.388753][ T5898] chnl_net:caif_netlink_parms(): no params data found [ 72.515793][ T5898] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.531573][ T5898] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.541948][ T5898] bridge_slave_0: entered allmulticast mode [ 72.548596][ T5898] bridge_slave_0: entered promiscuous mode [ 72.555495][ T5898] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.563869][ T5898] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.571367][ T5898] bridge_slave_1: entered allmulticast mode [ 72.578235][ T5898] bridge_slave_1: entered promiscuous mode [ 72.603580][ T5898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.615409][ T5898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.661178][ T5898] team0: Port device team_slave_0 added [ 72.673847][ T5898] team0: Port device team_slave_1 added [ 72.696158][ T5898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.703607][ T5898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.730442][ T5898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.741886][ T5898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.753387][ T5898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.784386][ T5898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.814318][ T6021] set_capacity_and_notify: 1 callbacks suppressed [ 72.814337][ T6021] loop5: detected capacity change from 0 to 128 [ 72.842494][ T5898] hsr_slave_0: entered promiscuous mode [ 72.848898][ T5898] hsr_slave_1: entered promiscuous mode [ 72.854764][ T5898] debugfs: 'hsr0' already exists in 'hsr' [ 72.863370][ T5898] Cannot create hsr debugfs directory [ 72.921364][ T6031] bio_check_eod: 46 callbacks suppressed [ 72.921432][ T6031] syz.5.786: attempt to access beyond end of device [ 72.921432][ T6031] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 72.954483][ T6031] syz.5.786: attempt to access beyond end of device [ 72.954483][ T6031] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 73.007156][ T6031] syz.5.786: attempt to access beyond end of device [ 73.007156][ T6031] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 73.068129][ T6031] syz.5.786: attempt to access beyond end of device [ 73.068129][ T6031] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 73.081684][ T5898] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 73.096128][ T5898] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 73.126561][ T6031] syz.5.786: attempt to access beyond end of device [ 73.126561][ T6031] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 73.143384][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.150642][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.158413][ T6031] syz.5.786: attempt to access beyond end of device [ 73.158413][ T6031] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 73.174270][ T6031] syz.5.786: attempt to access beyond end of device [ 73.174270][ T6031] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 73.209899][ T6031] syz.5.786: attempt to access beyond end of device [ 73.209899][ T6031] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 73.223823][ T6031] syz.5.786: attempt to access beyond end of device [ 73.223823][ T6031] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 73.237593][ T6031] syz.5.786: attempt to access beyond end of device [ 73.237593][ T6031] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 73.454458][ T6038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.464885][ T6038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.503182][ T5898] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 73.515359][ T5898] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 73.544188][ T70] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.567379][ T70] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.596790][ T70] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.615643][ T70] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.730004][ T5898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.750230][ T6072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.797'. [ 73.767048][ T6072] netlink: 196 bytes leftover after parsing attributes in process `syz.1.797'. [ 73.777147][ T6072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.797'. [ 73.800002][ T6072] netlink: 196 bytes leftover after parsing attributes in process `syz.1.797'. [ 73.831186][ T5898] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.851699][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.858832][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.901642][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.908900][ T4347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.928977][ T5898] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.107817][ T5898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.115642][ T6094] loop1: detected capacity change from 0 to 4096 [ 74.190725][ T6094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.256667][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.444824][ T6122] netlink: 'syz.4.804': attribute type 2 has an invalid length. [ 74.487915][ T5898] veth0_vlan: entered promiscuous mode [ 74.506325][ T5898] veth1_vlan: entered promiscuous mode [ 74.554989][ T5898] veth0_macvtap: entered promiscuous mode [ 74.568685][ T5898] veth1_macvtap: entered promiscuous mode [ 74.580021][ T5898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.616632][ T5898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.653602][ T4347] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.664041][ T4347] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.677194][ T4347] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.686477][ T4347] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.811505][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 74.811524][ T28] audit: type=1400 audit(1774022448.684:697): avc: denied { read } for pid=6150 comm="syz.7.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.862092][ T28] audit: type=1400 audit(1774022448.744:698): avc: denied { write } for pid=6152 comm="syz.5.810" path="socket:[13524]" dev="sockfs" ino=13524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.924611][ T28] audit: type=1400 audit(1774022448.794:699): avc: denied { shutdown } for pid=6152 comm="syz.5.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.104175][ T28] audit: type=1400 audit(1774022448.984:700): avc: denied { read } for pid=6161 comm="syz.5.814" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 75.199495][ T28] audit: type=1400 audit(1774022448.984:701): avc: denied { open } for pid=6161 comm="syz.5.814" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 75.978564][ T6141] Set syz1 is full, maxelem 65536 reached [ 76.054490][ T6188] netlink: 'syz.4.822': attribute type 1 has an invalid length. [ 76.088586][ T6188] netlink: 'syz.4.822': attribute type 4 has an invalid length. [ 76.127878][ T6188] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.822'. [ 76.327572][ T28] audit: type=1400 audit(1774022450.214:702): avc: denied { read } for pid=6211 comm="syz.1.828" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 76.427652][ T28] audit: type=1400 audit(1774022450.214:703): avc: denied { open } for pid=6211 comm="syz.1.828" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 76.740170][ T28] audit: type=1400 audit(1774022450.624:704): avc: denied { remount } for pid=6231 comm="syz.5.831" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.044747][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.6.839'. [ 77.395459][ T28] audit: type=1326 audit(1774022451.274:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6245 comm="syz.5.835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1fd431c799 code=0x0 [ 77.848909][ T6322] loop1: detected capacity change from 0 to 512 [ 77.930411][ T6329] netlink: 20 bytes leftover after parsing attributes in process `syz.7.846'. [ 78.552434][ T28] audit: type=1400 audit(1774022452.434:706): avc: denied { ioctl } for pid=6365 comm="syz.1.863" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 78.923227][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.875'. [ 79.163374][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.7.880'. [ 79.583463][ T6435] loop4: detected capacity change from 0 to 1024 [ 79.597493][ T6435] EXT4-fs: Ignoring removed nobh option [ 79.615562][ T6435] EXT4-fs: Ignoring removed bh option [ 79.631948][ T6435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.675646][ T6435] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 79.785306][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.962193][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.896'. [ 80.032715][ T6452] loop5: detected capacity change from 0 to 256 [ 80.077654][ T6452] FAT-fs (loop5): Directory bread(block 64) failed [ 80.108490][ T6452] FAT-fs (loop5): Directory bread(block 65) failed [ 80.126653][ T6452] FAT-fs (loop5): Directory bread(block 66) failed [ 80.146113][ T6452] FAT-fs (loop5): Directory bread(block 67) failed [ 80.158915][ T6452] FAT-fs (loop5): Directory bread(block 68) failed [ 80.165723][ T6452] FAT-fs (loop5): Directory bread(block 69) failed [ 80.172745][ T6452] FAT-fs (loop5): Directory bread(block 70) failed [ 80.182009][ T6452] FAT-fs (loop5): Directory bread(block 71) failed [ 80.193633][ T6452] FAT-fs (loop5): Directory bread(block 72) failed [ 80.200916][ T6452] FAT-fs (loop5): Directory bread(block 73) failed [ 80.261331][ T6458] loop7: detected capacity change from 0 to 128 [ 80.281686][ T6458] loop7: detected capacity change from 0 to 256 [ 80.457633][ T6464] loop1: detected capacity change from 0 to 1024 [ 80.485499][ T6464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.502857][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 80.502874][ T28] audit: type=1400 audit(1774022454.384:717): avc: denied { mounton } for pid=6460 comm="syz.1.900" path="/179/file1/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.556969][ T6464] loop1: detected capacity change from 1024 to 0 [ 80.589417][ T6473] EXT4-fs error (device loop1): ext4_get_inode_loc:4920: inode #12: block 7: comm syz.1.900: unable to read itable block [ 80.603383][ T6473] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 80.696324][ T6473] EXT4-fs (loop1): I/O error while writing superblock [ 81.261795][ T6478] loop7: detected capacity change from 0 to 1024 [ 81.278473][ T6478] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 81.292148][ T6478] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.304433][ T6478] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.907: bg 0: block 112: padding at end of block bitmap is not set [ 81.320055][ T6478] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 3: comm syz.7.907: lblock 3 mapped to illegal pblock 3 (length 1) [ 81.334686][ T6478] EXT4-fs error (device loop7): ext4_free_blocks:6724: comm syz.7.907: Freeing blocks not in datazone - block = 3, count = 1 [ 81.348200][ T6478] EXT4-fs error (device loop7): ext4_free_blocks:6724: comm syz.7.907: Freeing blocks not in datazone - block = 0, count = 16 [ 82.171411][ T70] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 82.184591][ T3311] EXT4-fs error (device loop1): ext4_get_inode_loc:4920: inode #2: block 5: comm syz-executor: unable to read itable block [ 82.215979][ T70] EXT4-fs (loop7): This should not happen!! Data will be lost [ 82.215979][ T70] [ 82.232073][ T70] EXT4-fs (loop7): Total free blocks count 0 [ 82.238259][ T70] EXT4-fs (loop7): Free/Dirty block details [ 82.238276][ T3311] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 82.244156][ T70] EXT4-fs (loop7): free_blocks=16 [ 82.244180][ T70] EXT4-fs (loop7): dirty_blocks=16 [ 82.265176][ T70] EXT4-fs (loop7): Block reservation details [ 82.271275][ T70] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 82.279061][ T5898] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 82.289216][ T3311] EXT4-fs (loop1): I/O error while writing superblock [ 82.296404][ T3311] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: IO failure [ 82.327408][ T3311] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 82.335780][ T3311] EXT4-fs (loop1): I/O error while writing superblock [ 82.352341][ T3311] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz-executor: mark_inode_dirty error [ 82.369622][ T3311] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 82.378156][ T3311] EXT4-fs (loop1): I/O error while writing superblock [ 82.385076][ T70] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4905: inode #18: block 9: comm kworker/u8:4: unable to read itable block [ 82.414943][ T70] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 82.566945][ T70] EXT4-fs (loop1): I/O error while writing superblock [ 82.573851][ T70] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4905: inode #2: block 5: comm kworker/u8:4: unable to read itable block [ 82.596146][ T70] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 82.604613][ T70] EXT4-fs (loop1): I/O error while writing superblock [ 82.612205][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.625730][ T3311] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 82.634458][ T3311] EXT4-fs (loop1): I/O error while writing superblock [ 82.641672][ T6467] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 82.853311][ T28] audit: type=1400 audit(1774022456.734:718): avc: denied { bind } for pid=6496 comm="syz.5.912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.349350][ T28] audit: type=1326 audit(1774022457.234:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.6.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 83.374475][ T28] audit: type=1326 audit(1774022457.264:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.6.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 83.398260][ T28] audit: type=1326 audit(1774022457.264:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.6.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 83.421916][ T28] audit: type=1326 audit(1774022457.264:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.6.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 83.445565][ T28] audit: type=1326 audit(1774022457.264:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.6.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 83.469382][ T28] audit: type=1326 audit(1774022457.264:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.6.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 83.479180][ T6472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.493100][ T28] audit: type=1326 audit(1774022457.264:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.6.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 83.523852][ T28] audit: type=1326 audit(1774022457.264:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6499 comm="syz.6.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 83.530708][ T6472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.669921][ T4177] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.679297][ T4177] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.716483][ T4177] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.752546][ T4177] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.169935][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.7.926'. [ 84.199706][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.7.926'. [ 84.266785][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.7.926'. [ 84.284419][ T6527] chnl_net:caif_netlink_parms(): no params data found [ 84.409690][ T6557] loop7: detected capacity change from 0 to 512 [ 84.425987][ T6557] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 84.428621][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.443332][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.450755][ T6527] bridge_slave_0: entered allmulticast mode [ 84.457674][ T6527] bridge_slave_0: entered promiscuous mode [ 84.464475][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.471896][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.479325][ T6527] bridge_slave_1: entered allmulticast mode [ 84.485930][ T6527] bridge_slave_1: entered promiscuous mode [ 84.503509][ T6527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.514087][ T6527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.517207][ T6557] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.927: invalid indirect mapped block 6684672 (level 2) [ 84.534278][ T6527] team0: Port device team_slave_0 added [ 84.543510][ T6527] team0: Port device team_slave_1 added [ 84.560347][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.567553][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.594013][ T6527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.608279][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.615240][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.641698][ T6527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.668811][ T6527] hsr_slave_0: entered promiscuous mode [ 84.687647][ T6527] hsr_slave_1: entered promiscuous mode [ 84.687750][ T6557] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 84.693568][ T6527] debugfs: 'hsr0' already exists in 'hsr' [ 84.697180][ T6557] EXT4-fs (loop7): 1 truncate cleaned up [ 84.708555][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 84.708573][ C1] EXT4-fs (loop7): initial error at time 1774022458: ext4_free_branches:1023: inode 11 [ 84.708608][ C1] EXT4-fs (loop7): last error at time 1774022458: ext4_free_branches:1023: inode 11 [ 84.716948][ T6527] Cannot create hsr debugfs directory [ 84.748093][ T6557] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.874886][ T5898] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.909019][ T6527] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 84.929146][ T6527] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 84.950296][ T6527] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 84.969859][ T6527] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 85.055112][ T6527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.067698][ T6527] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.077673][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.084754][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.098145][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.105436][ T4177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.191431][ T6527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.443039][ T6527] veth0_vlan: entered promiscuous mode [ 85.468328][ T6527] veth1_vlan: entered promiscuous mode [ 85.517378][ T6641] netlink: 'syz.4.940': attribute type 10 has an invalid length. [ 85.521328][ T6527] veth0_macvtap: entered promiscuous mode [ 85.533500][ T6527] veth1_macvtap: entered promiscuous mode [ 85.550103][ T6641] team0 (unregistering): Port device team_slave_0 removed [ 85.558405][ T6641] team0 (unregistering): Port device team_slave_1 removed [ 85.572308][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.582859][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.594261][ T30] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.606054][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.941'. [ 85.620614][ T30] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.638845][ T30] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.661299][ T30] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.672253][ T6651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.944'. [ 85.681571][ T6651] netlink: 'syz.4.944': attribute type 7 has an invalid length. [ 85.689882][ T6651] netlink: 'syz.4.944': attribute type 8 has an invalid length. [ 85.721967][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.944'. [ 85.781649][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 85.781666][ T28] audit: type=1400 audit(1774022459.664:736): avc: denied { sqpoll } for pid=6664 comm="syz.4.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 85.822260][ T28] audit: type=1400 audit(1774022459.694:737): avc: denied { connect } for pid=6664 comm="syz.4.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.894418][ T28] audit: type=1400 audit(1774022459.764:738): avc: denied { ioctl } for pid=6678 comm="syz.7.948" path="socket:[15578]" dev="sockfs" ino=15578 ioctlcmd=0x89fa scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.711621][ T6695] syzkaller1: entered promiscuous mode [ 86.725277][ T6695] syzkaller1: entered allmulticast mode [ 86.731074][ T28] audit: type=1400 audit(1774022460.604:739): avc: denied { read } for pid=6698 comm="syz.7.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 87.105610][ T28] audit: type=1400 audit(1774022460.984:740): avc: denied { cpu } for pid=6723 comm="syz.5.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 87.194697][ T6728] loop7: detected capacity change from 0 to 2048 [ 87.222526][ T6728] EXT4-fs: Ignoring removed i_version option [ 87.528214][ T6728] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.540663][ T6728] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.577122][ T28] audit: type=1400 audit(1774022461.454:741): avc: denied { append } for pid=6727 comm="syz.7.966" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.827087][ T6728] loop7: detected capacity change from 2048 to 0 [ 87.836074][ C0] I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x803000 phys_seg 1 prio class 2 [ 87.845971][ T6737] EXT4-fs error (device loop7): ext4_get_inode_loc:4920: inode #15: block 4: comm syz.7.966: unable to read itable block [ 87.867367][ T6737] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 87.897014][ T6737] EXT4-fs (loop7): I/O error while writing superblock [ 87.903821][ T6737] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: IO failure [ 87.917027][ T6737] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 87.925395][ T6737] EXT4-fs (loop7): I/O error while writing superblock [ 87.943019][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.8.972'. [ 87.956114][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.6.973'. [ 87.965224][ T6737] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #15: comm syz.7.966: mark_inode_dirty error [ 87.987313][ T6737] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 87.997092][ T6737] EXT4-fs (loop7): I/O error while writing superblock [ 88.013787][ T6737] EXT4-fs error (device loop7): ext4_get_inode_loc:4920: inode #15: block 4: comm syz.7.966: unable to read itable block [ 88.040675][ T6737] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 88.041313][ T6756] loop4: detected capacity change from 0 to 2048 [ 88.057756][ T6737] EXT4-fs (loop7): I/O error while writing superblock [ 88.064570][ T6737] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: IO failure [ 88.074573][ T6737] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 88.093448][ T6737] EXT4-fs (loop7): I/O error while writing superblock [ 88.101592][ T6737] EXT4-fs error (device loop7): ext4_alloc_file_blocks:4632: inode #15: comm syz.7.966: mark_inode_dirty error [ 88.114242][ T6737] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 88.115701][ T6756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.134847][ T6737] EXT4-fs (loop7): I/O error while writing superblock [ 88.152429][ T5898] EXT4-fs error (device loop7): ext4_get_inode_loc:4920: inode #2: block 4: comm syz-executor: unable to read itable block [ 88.181081][ T5898] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 88.198730][ T5898] EXT4-fs (loop7): I/O error while writing superblock [ 88.207223][ T5898] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: IO failure [ 88.215968][ T5898] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 88.224496][ T5898] EXT4-fs (loop7): I/O error while writing superblock [ 88.231312][ T5898] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #2: comm syz-executor: mark_inode_dirty error [ 88.242925][ T5898] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 88.251233][ T5898] EXT4-fs (loop7): I/O error while writing superblock [ 88.262231][ T6764] loop8: detected capacity change from 0 to 1024 [ 88.270451][ T4177] EXT4-fs error (device loop7): __ext4_get_inode_loc_noinmem:4905: inode #18: block 5: comm kworker/u8:13: unable to read itable block [ 88.292500][ T6756] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.976: bg 0: block 234: padding at end of block bitmap is not set [ 88.308583][ T4177] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 88.328555][ T6764] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.347632][ T6756] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 304 with error 28 [ 88.385698][ T6764] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 161808409 free clusters [ 88.401631][ T6756] EXT4-fs (loop4): This should not happen!! Data will be lost [ 88.401631][ T6756] [ 88.417236][ T6756] EXT4-fs (loop4): Total free blocks count 0 [ 88.423414][ T6756] EXT4-fs (loop4): Free/Dirty block details [ 88.429483][ T6756] EXT4-fs (loop4): free_blocks=0 [ 88.431877][ T6764] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 88.434476][ T6756] EXT4-fs (loop4): dirty_blocks=320 [ 88.452108][ T6756] EXT4-fs (loop4): Block reservation details [ 88.458325][ T6756] EXT4-fs (loop4): i_reserved_data_blocks=20 [ 88.467260][ T6764] EXT4-fs (loop8): This should not happen!! Data will be lost [ 88.467260][ T6764] [ 88.477239][ T6764] EXT4-fs (loop8): Total free blocks count 0 [ 88.483261][ T6764] EXT4-fs (loop8): Free/Dirty block details [ 88.489519][ T6764] EXT4-fs (loop8): free_blocks=2588934144 [ 88.495348][ T6764] EXT4-fs (loop8): dirty_blocks=16 [ 88.500734][ T6764] EXT4-fs (loop8): Block reservation details [ 88.506753][ T6764] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 88.529103][ T6777] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 88.553897][ T4340] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.595775][ T6764] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ000000000000000000000004¬XÇÈ5¡ìæøP»ÒãNŠP÷Žãˆ†În{w'ÍV¯1ŒÀI' [ 88.633096][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.659881][ T4340] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.730511][ T4340] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.831791][ T28] audit: type=1326 audit(1774022462.714:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.8.992" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1b955c799 code=0x0 [ 88.865706][ T4340] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.932337][ T6807] netlink: 'syz.8.992': attribute type 1 has an invalid length. [ 89.115681][ T4340] bridge_slave_1: left allmulticast mode [ 89.123547][ T4340] bridge_slave_1: left promiscuous mode [ 89.147082][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.175740][ T4340] bridge_slave_0: left allmulticast mode [ 89.185678][ T4340] bridge_slave_0: left promiscuous mode [ 89.208294][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.288764][ T6830] loop6: detected capacity change from 0 to 2048 [ 89.331594][ T6830] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.389376][ T4340] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.400647][ T4340] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.423155][ T4340] bond0 (unregistering): Released all slaves [ 89.434711][ T6830] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.999: bg 0: block 234: padding at end of block bitmap is not set [ 89.492211][ T4340] hsr_slave_0: left promiscuous mode [ 89.501316][ T4340] hsr_slave_1: left promiscuous mode [ 89.504448][ T6830] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1500 with error 28 [ 89.519674][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.519711][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.543791][ T6830] EXT4-fs (loop6): This should not happen!! Data will be lost [ 89.543791][ T6830] [ 89.554113][ T6830] EXT4-fs (loop6): Total free blocks count 0 [ 89.554245][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.561873][ T6830] EXT4-fs (loop6): Free/Dirty block details [ 89.568289][ T4340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.573761][ T6830] EXT4-fs (loop6): free_blocks=0 [ 89.611021][ T6830] EXT4-fs (loop6): dirty_blocks=1504 [ 89.616488][ T4340] veth1_macvtap: left promiscuous mode [ 89.625185][ T6830] EXT4-fs (loop6): Block reservation details [ 89.627074][ T4340] veth0_macvtap: left promiscuous mode [ 89.635300][ T6830] EXT4-fs (loop6): i_reserved_data_blocks=94 [ 89.647155][ T4340] veth1_vlan: left promiscuous mode [ 89.667552][ T4340] veth0_vlan: left promiscuous mode [ 89.812752][ T4340] team0 (unregistering): Port device team_slave_1 removed [ 89.823148][ T5274] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.834759][ T4340] team0 (unregistering): Port device team_slave_0 removed [ 89.996808][ T6782] chnl_net:caif_netlink_parms(): no params data found [ 90.058629][ T6868] loop8: detected capacity change from 0 to 512 [ 90.092763][ T6868] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.1010: inode has both inline data and extents flags [ 90.123118][ T6868] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 90.123307][ T6868] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1010: couldn't read orphan inode 15 (err -117) [ 90.132502][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 90.132523][ C1] EXT4-fs (loop8): initial error at time 1774022464: ext4_orphan_get:1391: inode 15 [ 90.132569][ C1] EXT4-fs (loop8): last error at time 1774022464: ext4_orphan_get:1391: inode 15 [ 90.172070][ T6868] loop8: lost filesystem error report for type 5 error -117 [ 90.172724][ T6868] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.237532][ T6782] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.249967][ T6782] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.258494][ T6782] bridge_slave_0: entered allmulticast mode [ 90.265539][ T6782] bridge_slave_0: entered promiscuous mode [ 90.279036][ T6527] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.288433][ T6782] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.295622][ T6782] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.304338][ T6782] bridge_slave_1: entered allmulticast mode [ 90.311845][ T6782] bridge_slave_1: entered promiscuous mode [ 90.354135][ T28] audit: type=1400 audit(1774022464.234:743): avc: denied { mount } for pid=6891 comm="syz.8.1012" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 90.358841][ T6782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.415934][ T6782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.453653][ T6782] team0: Port device team_slave_0 added [ 90.484717][ T6782] team0: Port device team_slave_1 added [ 90.523773][ T6782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.537723][ T6782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.574747][ T6782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.588753][ T28] audit: type=1400 audit(1774022464.464:744): avc: denied { execute_no_trans } for pid=6899 comm="syz.6.1017" path="/73/file1" dev="tmpfs" ino=397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.786685][ T6782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.809827][ T6782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.877223][ T6782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.960546][ T6782] hsr_slave_0: entered promiscuous mode [ 90.973921][ T6782] hsr_slave_1: entered promiscuous mode [ 90.993937][ T6782] debugfs: 'hsr0' already exists in 'hsr' [ 91.000004][ T6782] Cannot create hsr debugfs directory [ 91.076343][ T6930] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1024'. [ 91.085803][ T6930] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1024'. [ 91.119570][ T28] audit: type=1326 audit(1774022464.994:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.5.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd431c799 code=0x7fc00000 [ 91.222740][ T6940] SELinux: failed to load policy [ 91.270881][ T6782] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 91.286289][ T6957] xt_hashlimit: size too large, truncated to 1048576 [ 91.290964][ T6782] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 91.317717][ T6782] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 91.329174][ T6782] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 91.487646][ T6782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.536776][ T6782] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.558649][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.565806][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.618788][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.625947][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.771104][ T28] audit: type=1326 audit(1774022465.654:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.5.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1fd42bdb19 code=0x7fc00000 [ 91.794949][ T6782] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.816529][ T6782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.892147][ T7000] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1038'. [ 91.972862][ T6782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.122068][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1044'. [ 92.181621][ T28] audit: type=1326 audit(1774022466.064:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.6.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 92.230557][ T6782] veth0_vlan: entered promiscuous mode [ 92.243416][ T6782] veth1_vlan: entered promiscuous mode [ 92.247319][ T28] audit: type=1326 audit(1774022466.064:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.6.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 92.283127][ T6782] veth0_macvtap: entered promiscuous mode [ 92.316158][ T6782] veth1_macvtap: entered promiscuous mode [ 92.322356][ T28] audit: type=1326 audit(1774022466.064:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.6.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 92.358497][ T28] audit: type=1326 audit(1774022466.064:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.6.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 92.359990][ T6782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.414077][ T6782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.436390][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.447581][ T28] audit: type=1326 audit(1774022466.064:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.6.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 92.458472][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.485884][ T7040] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 92.531459][ T7040] SELinux: failed to load policy [ 92.603935][ T28] audit: type=1326 audit(1774022466.064:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.6.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 92.610836][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.651177][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.729119][ T28] audit: type=1326 audit(1774022466.064:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.6.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 92.820479][ T28] audit: type=1326 audit(1774022466.064:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.6.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 93.081444][ T7072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.115477][ T7072] netlink: 'syz.6.1070': attribute type 10 has an invalid length. [ 93.141267][ T7072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.181442][ T7072] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 94.212365][ T7108] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1073'. [ 95.096756][ T7156] xt_hashlimit: size too large, truncated to 1048576 [ 95.198281][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1095'. [ 95.689637][ T7182] loop9: detected capacity change from 0 to 1024 [ 95.700537][ T7182] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 95.708924][ T7182] System zones: 0-1, 3-36 [ 95.736684][ T7182] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.1102: bad orphan inode 134217728 [ 95.763909][ T7182] loop9: lost filesystem error report for type 5 error -117 [ 95.764620][ T7182] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.363365][ T6782] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.639164][ T7210] xt_hashlimit: size too large, truncated to 1048576 [ 96.770655][ T7217] netlink: 'syz.4.1114': attribute type 11 has an invalid length. [ 96.778871][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1114'. [ 96.799902][ T7217] netlink: 'syz.4.1114': attribute type 11 has an invalid length. [ 96.799980][ T4177] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.816998][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1114'. [ 96.865475][ T4177] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.906292][ T4177] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.939045][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 96.939072][ T28] audit: type=1400 audit(1774022470.824:789): avc: denied { wake_alarm } for pid=7220 comm="syz.4.1116" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.987633][ T4347] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.128832][ T28] audit: type=1326 audit(1774022471.014:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7224 comm="syz.5.1119" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1fd431c799 code=0x0 [ 97.189381][ T28] audit: type=1400 audit(1774022471.064:791): avc: denied { bind } for pid=7226 comm="syz.6.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.210129][ T28] audit: type=1400 audit(1774022471.064:792): avc: denied { listen } for pid=7226 comm="syz.6.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.780361][ T7235] loop6: detected capacity change from 0 to 512 [ 97.938127][ T7235] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1121: invalid indirect mapped block 256 (level 2) [ 97.951977][ T7235] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 97.952380][ T7235] EXT4-fs (loop6): 2 truncates cleaned up [ 97.961554][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 97.961574][ C1] EXT4-fs (loop6): initial error at time 1774022471: ext4_free_branches:1023: inode 11 [ 97.961610][ C1] EXT4-fs (loop6): last error at time 1774022471: ext4_free_branches:1023: inode 11 [ 98.030169][ T7250] netlink: 'syz.5.1128': attribute type 3 has an invalid length. [ 98.039450][ T7235] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.053996][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1128'. [ 98.082519][ T7235] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1121: bg 0: block 5: invalid block bitmap [ 98.107544][ T7252] xt_hashlimit: size too large, truncated to 1048576 [ 98.114658][ T7235] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 98.140150][ T7253] loop9: detected capacity change from 0 to 128 [ 98.202021][ T7235] EXT4-fs (loop6): This should not happen!! Data will be lost [ 98.202021][ T7235] [ 98.217913][ T7255] bio_check_eod: 54 callbacks suppressed [ 98.217960][ T7255] syz.9.1125: attempt to access beyond end of device [ 98.217960][ T7255] loop9: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 98.242180][ T7256] loop8: detected capacity change from 0 to 128 [ 98.255466][ T7235] EXT4-fs (loop6): Total free blocks count 0 [ 98.295163][ T7235] EXT4-fs (loop6): Free/Dirty block details [ 98.309405][ T7256] syz.8.1126: attempt to access beyond end of device [ 98.309405][ T7256] loop8: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 98.328774][ T7235] EXT4-fs (loop6): free_blocks=0 [ 98.348042][ T7256] syz.8.1126: attempt to access beyond end of device [ 98.348042][ T7256] loop8: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 98.361772][ T7235] EXT4-fs (loop6): dirty_blocks=64 [ 98.377648][ T7235] EXT4-fs (loop6): Block reservation details [ 98.406132][ T7235] EXT4-fs (loop6): i_reserved_data_blocks=64 [ 98.424874][ T7255] syz.9.1125: attempt to access beyond end of device [ 98.424874][ T7255] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 98.469084][ T12] kworker/u8:0: attempt to access beyond end of device [ 98.469084][ T12] loop8: rw=1, sector=138, nr_sectors = 2 limit=128 [ 98.488462][ T5274] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.605279][ T7263] loop8: detected capacity change from 0 to 128 [ 98.626492][ T7263] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.698404][ T7263] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.717105][ T7255] syz.9.1125: attempt to access beyond end of device [ 98.717105][ T7255] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 98.749924][ T7255] syz.9.1125: attempt to access beyond end of device [ 98.749924][ T7255] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 98.754504][ T7263] EXT4-fs (loop8): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.777608][ T7255] syz.9.1125: attempt to access beyond end of device [ 98.777608][ T7255] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 98.789843][ T28] audit: type=1400 audit(1774022472.654:793): avc: denied { mounton } for pid=7271 comm="syz.5.1134" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.812707][ T7255] syz.9.1125: attempt to access beyond end of device [ 98.812707][ T7255] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 98.820510][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1133'. [ 98.832329][ T7274] gre2: entered promiscuous mode [ 98.840489][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1133'. [ 98.862313][ T7255] syz.9.1125: attempt to access beyond end of device [ 98.862313][ T7255] loop9: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 98.865621][ T28] audit: type=1400 audit(1774022472.724:794): avc: denied { unmount } for pid=7271 comm="syz.5.1134" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 98.903161][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1133'. [ 98.926998][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1133'. [ 99.001662][ T7283] netdevsim netdevsim5: Direct firmware load for  failed with error -2 [ 99.009912][ T7288] loop4: detected capacity change from 0 to 512 [ 99.022475][ T6527] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.027543][ T7288] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.117793][ T7288] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1140: bg 0: block 5: invalid block bitmap [ 99.131063][ T7288] loop4: lost filesystem error report for type 5 error -117 [ 99.136917][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 99.150841][ C1] EXT4-fs (loop4): initial error at time 1774022473: ext4_validate_block_bitmap:432 [ 99.160272][ C1] EXT4-fs (loop4): last error at time 1774022473: ext4_validate_block_bitmap:432 [ 99.173015][ T7288] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 99.181866][ T7288] loop4: lost filesystem error report for type 5 error -117 [ 99.182127][ T7288] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1140: invalid indirect mapped block 3 (level 2) [ 99.203389][ T7288] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 99.203660][ T7288] EXT4-fs (loop4): 2 truncates cleaned up [ 99.219260][ T7288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.352270][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.389678][ T28] audit: type=1400 audit(1774022474.264:795): avc: denied { listen } for pid=7360 comm="syz.9.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 100.459904][ T28] audit: type=1400 audit(1774022474.264:796): avc: denied { accept } for pid=7360 comm="syz.9.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 100.822611][ T7369] netlink: 'syz.5.1174': attribute type 5 has an invalid length. [ 101.366543][ T7393] loop4: detected capacity change from 0 to 128 [ 101.459925][ T28] audit: type=1400 audit(1774022475.344:797): avc: denied { mounton } for pid=7392 comm="syz.4.1184" path="/229/bus" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 101.575953][ T7406] loop6: detected capacity change from 0 to 512 [ 101.584532][ T7406] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 101.602916][ T7406] EXT4-fs (loop6): 1 truncate cleaned up [ 101.609211][ T7406] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.823588][ T5274] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.059004][ T7419] netlink: 'syz.6.1194': attribute type 13 has an invalid length. [ 102.585085][ T7448] loop9: detected capacity change from 0 to 256 [ 102.642277][ T7449] xt_hashlimit: size too large, truncated to 1048576 [ 102.652309][ T28] audit: type=1400 audit(1774022476.534:798): avc: denied { bind } for pid=7447 comm="syz.6.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.030255][ T7465] loop9: detected capacity change from 0 to 256 [ 103.269759][ T7465] FAT-fs (loop9): Directory bread(block 64) failed [ 103.276316][ T7465] FAT-fs (loop9): Directory bread(block 65) failed [ 103.318286][ T7465] FAT-fs (loop9): Directory bread(block 66) failed [ 103.336961][ T7465] FAT-fs (loop9): Directory bread(block 67) failed [ 103.357258][ T7465] FAT-fs (loop9): Directory bread(block 68) failed [ 103.394498][ T7465] FAT-fs (loop9): Directory bread(block 69) failed [ 103.421568][ T7465] FAT-fs (loop9): Directory bread(block 70) failed [ 103.445505][ T7465] FAT-fs (loop9): Directory bread(block 71) failed [ 103.466721][ T7465] FAT-fs (loop9): Directory bread(block 72) failed [ 103.486451][ T7465] FAT-fs (loop9): Directory bread(block 73) failed [ 103.567047][ T28] audit: type=1400 audit(1774022477.444:799): avc: denied { mounton } for pid=7458 comm="syz.9.1205" path="/28/file1/bus" dev="loop9" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 104.197643][ T7465] loop9: detected capacity change from 256 to 0 [ 104.199994][ C0] I/O error, dev loop9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 104.317195][ T30] FAT-fs (loop9): unable to read inode block for updating (i_pos 324) [ 104.346603][ T6782] FAT-fs (loop9): unable to read boot sector to mark fs as dirty [ 104.525269][ T4347] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.578880][ T4347] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.622728][ T28] audit: type=1326 audit(1774022478.504:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7544 comm="syz.6.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 104.672214][ T4347] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.706945][ T28] audit: type=1326 audit(1774022478.504:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7544 comm="syz.6.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 104.751441][ T28] audit: type=1326 audit(1774022478.504:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7544 comm="syz.6.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 104.785154][ T7534] loop4: detected capacity change from 0 to 32768 [ 104.792316][ T28] audit: type=1326 audit(1774022478.504:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7544 comm="syz.6.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 104.821063][ T4347] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.823357][ T28] audit: type=1326 audit(1774022478.504:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7544 comm="syz.6.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 104.868668][ T28] audit: type=1326 audit(1774022478.504:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7544 comm="syz.6.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 104.912742][ T28] audit: type=1326 audit(1774022478.504:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7544 comm="syz.6.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 104.964952][ T28] audit: type=1326 audit(1774022478.504:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7544 comm="syz.6.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 105.018127][ T7574] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.032706][ T7574] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.048544][ T7579] loop4: detected capacity change from 0 to 512 [ 105.060024][ T4347] bridge_slave_1: left allmulticast mode [ 105.074486][ T4347] bridge_slave_1: left promiscuous mode [ 105.080570][ T7579] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1234: invalid indirect mapped block 256 (level 2) [ 105.089708][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.095127][ T7579] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 105.102625][ T7579] EXT4-fs (loop4): 2 truncates cleaned up [ 105.103119][ T4347] bridge_slave_0: left allmulticast mode [ 105.111933][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 105.120139][ T4347] bridge_slave_0: left promiscuous mode [ 105.123408][ C1] EXT4-fs (loop4): initial error at time 1774022478: ext4_free_branches:1023: inode 11 [ 105.130431][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.135676][ C1] [ 105.135685][ C1] EXT4-fs (loop4): last error at time 1774022478: ext4_free_branches:1023: inode 11 [ 105.145149][ T7579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.196780][ T7579] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1234: bg 0: block 5: invalid block bitmap [ 105.209815][ T7579] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 105.222950][ T7586] netlink: 'syz.8.1237': attribute type 10 has an invalid length. [ 105.234367][ T7579] EXT4-fs (loop4): This should not happen!! Data will be lost [ 105.234367][ T7579] [ 105.244603][ T7579] EXT4-fs (loop4): Total free blocks count 0 [ 105.251879][ T7579] EXT4-fs (loop4): Free/Dirty block details [ 105.258057][ T7579] EXT4-fs (loop4): free_blocks=0 [ 105.263133][ T7579] EXT4-fs (loop4): dirty_blocks=64 [ 105.270887][ T7579] EXT4-fs (loop4): Block reservation details [ 105.271203][ T4347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.286011][ T7579] EXT4-fs (loop4): i_reserved_data_blocks=64 [ 105.293986][ T4347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.308113][ T4347] bond0 (unregistering): Released all slaves [ 105.328146][ T7574] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.331714][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.338755][ T7574] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.362104][ T7586] team0: Device vxcan1 is of different type [ 105.405742][ T4347] hsr_slave_0: left promiscuous mode [ 105.422539][ T4347] hsr_slave_1: left promiscuous mode [ 105.430372][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.438437][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.447466][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.454955][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.473166][ T4347] veth1_macvtap: left promiscuous mode [ 105.479445][ T4347] veth0_macvtap: left promiscuous mode [ 105.485332][ T4347] veth1_vlan: left promiscuous mode [ 105.490743][ T4347] veth0_vlan: left promiscuous mode [ 105.535304][ T7601] loop8: detected capacity change from 0 to 512 [ 105.604524][ T4347] team0 (unregistering): Port device team_slave_1 removed [ 105.614750][ T4347] team0 (unregistering): Port device team_slave_0 removed [ 105.680895][ T7574] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.697028][ T7574] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.761148][ T7574] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.793192][ T7574] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.909206][ T7552] chnl_net:caif_netlink_parms(): no params data found [ 105.986919][ T4177] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.995325][ T4177] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.005423][ T7552] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.027844][ T7552] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.035020][ T7552] bridge_slave_0: entered allmulticast mode [ 106.042243][ T7552] bridge_slave_0: entered promiscuous mode [ 106.049529][ T7552] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.056681][ T7552] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.064802][ T7552] bridge_slave_1: entered allmulticast mode [ 106.078155][ T7552] bridge_slave_1: entered promiscuous mode [ 106.089328][ T7637] loop8: detected capacity change from 0 to 512 [ 106.096433][ T7637] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.107998][ T4177] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.116203][ T4177] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.170302][ T4340] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.180166][ T4340] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.189687][ T7646] batman_adv: batadv0: Adding interface: dummy0 [ 106.197918][ T7637] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 106.217118][ T7646] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.245402][ T7646] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 106.253084][ T7637] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1253: bg 0: block 248: padding at end of block bitmap is not set [ 106.275385][ T7637] loop8: lost filesystem error report for type 5 error -117 [ 106.276636][ T7637] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.1253: Failed to acquire dquot type 1 [ 106.281393][ T4340] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.284158][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 106.296452][ T4340] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.303539][ C1] EXT4-fs (loop8): last error at time 1774022480: ext4_validate_block_bitmap:441 [ 106.311984][ T7552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.318141][ C1] [ 106.318803][ T7637] loop8: lost filesystem error report for type 5 error -117 [ 106.348956][ T7552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.413223][ T7637] EXT4-fs (loop8): 1 truncate cleaned up [ 106.425961][ T7637] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 106.449198][ T7552] team0: Port device team_slave_0 added [ 106.455862][ T7552] team0: Port device team_slave_1 added [ 106.479127][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.496323][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.558097][ T7552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.570006][ T6527] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 106.627527][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.637798][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.697463][ T7552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.781213][ T7552] hsr_slave_0: entered promiscuous mode [ 106.814679][ T7552] hsr_slave_1: entered promiscuous mode [ 106.829482][ T7552] debugfs: 'hsr0' already exists in 'hsr' [ 106.845321][ T7552] Cannot create hsr debugfs directory [ 106.943209][ T70] Bluetooth: hci0: Frame reassembly failed (-84) [ 106.951224][ T70] Bluetooth: hci0: Frame reassembly failed (-84) [ 107.032918][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1269'. [ 107.104839][ T70] Bluetooth: hci1: Frame reassembly failed (-84) [ 107.271851][ T7552] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.291264][ T7552] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.316492][ T7552] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.334513][ T7552] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.413463][ T7552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.436290][ T7552] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.448232][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.455337][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.473900][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.481190][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.604643][ T7552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.724120][ T7552] veth0_vlan: entered promiscuous mode [ 107.754992][ T7552] veth1_vlan: entered promiscuous mode [ 107.777387][ T7552] veth0_macvtap: entered promiscuous mode [ 107.795730][ T7552] veth1_macvtap: entered promiscuous mode [ 107.823186][ T7552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.842049][ T7552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.865251][ T70] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.883464][ T70] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.921025][ T70] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.934724][ T70] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.136705][ T7829] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1282'. [ 108.208688][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1282'. [ 108.971075][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1294'. [ 108.997618][ T7709] Bluetooth: hci0: command 0x1003 tx timeout [ 109.003695][ T4867] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.157048][ T4867] Bluetooth: hci1: command 0x1003 tx timeout [ 109.163117][ T43] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 109.546953][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1307'. [ 109.952669][ T7985] loop3: detected capacity change from 0 to 2048 [ 110.027432][ T7985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.115227][ T8008] loop4: detected capacity change from 0 to 1024 [ 110.159782][ T7552] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.232782][ T8014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1319'. [ 110.260909][ T8014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.328548][ T8014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.748785][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1327'. [ 110.788337][ T8051] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1328'. [ 110.809535][ T8051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8051 comm=syz.4.1328 [ 110.828951][ T8051] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1328'. [ 110.950800][ T8055] netlink: 'syz.8.1331': attribute type 8 has an invalid length. [ 111.991228][ T8091] syz_tun: entered allmulticast mode [ 112.011705][ T8090] syz_tun: left allmulticast mode [ 112.063211][ T8095] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1346'. [ 112.124953][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 112.124972][ T28] audit: type=1400 audit(1774022485.994:826): avc: denied { create } for pid=8096 comm="syz.4.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 112.124998][ T28] audit: type=1400 audit(1774022485.994:827): avc: denied { write } for pid=8096 comm="syz.4.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 112.186113][ T8102] veth1_to_bond: entered allmulticast mode [ 112.186784][ T8102] veth1_to_bond: left allmulticast mode [ 112.192168][ T8103] loop8: detected capacity change from 0 to 512 [ 112.210496][ T8103] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 112.248119][ T8103] EXT4-fs (loop8): 1 truncate cleaned up [ 112.257383][ T8103] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.292278][ T28] audit: type=1400 audit(1774022486.174:828): avc: denied { watch watch_reads } for pid=8100 comm="syz.8.1349" path="/83/bus" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.327268][ T6527] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.416577][ T8120] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1357'. [ 112.568754][ T28] audit: type=1400 audit(1774022486.454:829): avc: denied { sys_module } for pid=8135 comm="syz.5.1363" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 112.821009][ T8146] loop3: detected capacity change from 0 to 512 [ 112.846388][ T8146] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 112.892544][ T8146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.020561][ T7552] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.540513][ T4177] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.562925][ T8174] netlink: 'syz.5.1379': attribute type 29 has an invalid length. [ 113.573805][ T8174] netlink: 'syz.5.1379': attribute type 29 has an invalid length. [ 113.584313][ T4177] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.732739][ T4177] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.755447][ T8190] loop6: detected capacity change from 0 to 512 [ 113.822734][ T4177] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.950944][ T4177] bridge_slave_1: left allmulticast mode [ 113.981608][ T4177] bridge_slave_1: left promiscuous mode [ 113.990881][ T4177] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.021614][ T4177] bridge_slave_0: left allmulticast mode [ 114.029320][ T4177] bridge_slave_0: left promiscuous mode [ 114.035084][ T4177] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.181514][ T4177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.192220][ T4177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.204665][ T4177] bond0 (unregistering): Released all slaves [ 114.263374][ T4177] hsr_slave_0: left promiscuous mode [ 114.270138][ T4177] hsr_slave_1: left promiscuous mode [ 114.279204][ T4177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.297286][ T4177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.331936][ T4177] veth1_macvtap: left promiscuous mode [ 114.340808][ T4177] veth0_macvtap: left promiscuous mode [ 114.346389][ T4177] veth1_vlan: left promiscuous mode [ 114.351977][ T4177] veth0_vlan: left promiscuous mode [ 114.463895][ T8226] netlink: 'syz.4.1389': attribute type 7 has an invalid length. [ 114.471999][ T8226] netlink: 'syz.4.1389': attribute type 8 has an invalid length. [ 114.566129][ T4177] team0 (unregistering): Port device team_slave_1 removed [ 114.576999][ T4177] team0 (unregistering): Port device team_slave_0 removed [ 114.614037][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1387'. [ 114.737123][ T8231] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.744518][ T8231] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.838103][ T8231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.848404][ T8231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.923124][ T4338] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.942626][ T4338] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.952405][ T4338] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.961003][ T4338] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.970924][ T8177] chnl_net:caif_netlink_parms(): no params data found [ 114.986291][ T4338] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.996178][ T4338] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.004897][ T4338] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.013529][ T4338] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.063949][ T8177] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.071191][ T8177] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.082056][ T8177] bridge_slave_0: entered allmulticast mode [ 115.088757][ T8177] bridge_slave_0: entered promiscuous mode [ 115.095857][ T8177] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.096229][ T8255] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1395'. [ 115.103168][ T8177] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.119169][ T8177] bridge_slave_1: entered allmulticast mode [ 115.125467][ T8177] bridge_slave_1: entered promiscuous mode [ 115.164035][ T8177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.189870][ T8177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.248785][ T8177] team0: Port device team_slave_0 added [ 115.262362][ T8177] team0: Port device team_slave_1 added [ 115.293514][ T8177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.302943][ T8177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.353881][ T8177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.366227][ T8177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.374202][ T8177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.401592][ T8177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.450453][ T8177] hsr_slave_0: entered promiscuous mode [ 115.463416][ T8177] hsr_slave_1: entered promiscuous mode [ 115.471968][ T8177] debugfs: 'hsr0' already exists in 'hsr' [ 115.484682][ T8177] Cannot create hsr debugfs directory [ 115.562909][ T8288] loop6: detected capacity change from 0 to 512 [ 115.583660][ T8288] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.604625][ T8288] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.656625][ T5274] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.728711][ T28] audit: type=1400 audit(1774022489.604:830): avc: denied { create } for pid=8306 comm="syz.4.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.880438][ T8177] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 115.900292][ T8177] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 115.919474][ T8177] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 115.933965][ T8177] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 115.946057][ T28] audit: type=1326 audit(1774022489.824:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8331 comm="syz.5.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd431c799 code=0x7ffc0000 [ 115.972579][ T28] audit: type=1326 audit(1774022489.824:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8331 comm="syz.5.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd431c799 code=0x7ffc0000 [ 116.001214][ T28] audit: type=1326 audit(1774022489.824:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8331 comm="syz.5.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd431c799 code=0x7ffc0000 [ 116.027371][ T28] audit: type=1326 audit(1774022489.824:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8331 comm="syz.5.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd431c799 code=0x7ffc0000 [ 116.051821][ T28] audit: type=1326 audit(1774022489.824:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8331 comm="syz.5.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1fd431c799 code=0x7ffc0000 [ 116.090021][ T8177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.118906][ T8177] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.151318][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.158501][ T4340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.169690][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.176796][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.442914][ T8177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.588909][ T8177] veth0_vlan: entered promiscuous mode [ 116.607962][ T8177] veth1_vlan: entered promiscuous mode [ 116.671587][ T8177] veth0_macvtap: entered promiscuous mode [ 116.696027][ T8177] veth1_macvtap: entered promiscuous mode [ 116.862188][ T8177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.950255][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1415'. [ 116.959447][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1415'. [ 116.978588][ T8177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.990171][ T4338] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.014401][ T4338] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.024497][ T4338] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.059840][ T4177] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.281213][ T8449] loop2: detected capacity change from 0 to 7 [ 117.457250][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 117.457267][ T28] audit: type=1400 audit(1774022491.344:857): avc: denied { write } for pid=8462 comm="syz.4.1424" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 118.098432][ T28] audit: type=1400 audit(1774022491.984:858): avc: denied { ioctl } for pid=8504 comm="syz.6.1429" path="socket:[21604]" dev="sockfs" ino=21604 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 118.207083][ T28] audit: type=1400 audit(1774022491.984:859): avc: denied { connect } for pid=8504 comm="syz.6.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 118.297693][ T28] audit: type=1400 audit(1774022491.984:860): avc: denied { write } for pid=8504 comm="syz.6.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 118.501273][ T8539] loop6: detected capacity change from 0 to 512 [ 118.587891][ T8539] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.645635][ T8539] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.717102][ T5274] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.761918][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1446'. [ 119.870834][ T8607] loop6: detected capacity change from 0 to 512 [ 119.922225][ T28] audit: type=1400 audit(1774022493.804:861): avc: denied { mount } for pid=8611 comm="syz.4.1450" name="/" dev="autofs" ino=26132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 119.987319][ T8607] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 120.058886][ T8607] EXT4-fs (loop6): 1 orphan inode deleted [ 120.126208][ T8607] EXT4-fs (loop6): 1 truncate cleaned up [ 120.168473][ T8607] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.192243][ T8638] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1455'. [ 120.214923][ T28] audit: type=1400 audit(1774022500.089:862): avc: denied { remove_name } for pid=8604 comm="syz.6.1448" name="file5" dev="loop6" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 120.253288][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1455'. [ 120.258508][ T5274] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.271336][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1457'. [ 120.273483][ T28] audit: type=1400 audit(1774022500.089:863): avc: denied { unlink } for pid=8604 comm="syz.6.1448" name="file5" dev="loop6" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 120.305621][ T28] audit: type=1400 audit(1774022500.089:864): avc: denied { rename } for pid=8604 comm="syz.6.1448" name="file5" dev="loop6" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 120.462812][ T28] audit: type=1400 audit(1774022500.339:865): avc: denied { connect } for pid=8655 comm="syz.4.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 120.613457][ T8667] netlink: 'syz.5.1464': attribute type 29 has an invalid length. [ 120.622211][ T8667] netlink: 'syz.5.1464': attribute type 29 has an invalid length. [ 120.631769][ T8667] netlink: 500 bytes leftover after parsing attributes in process `syz.5.1464'. [ 120.674894][ T8670] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1465'. [ 121.499479][ T3394] hid-generic 0000:0003:0001.0002: unknown main item tag 0x0 [ 121.517923][ T3394] hid-generic 0000:0003:0001.0002: unknown main item tag 0x0 [ 121.536742][ T3394] hid-generic 0000:0003:0001.0002: hidraw0: HID v0.03 Device [syz0] on syz1 [ 121.777957][ T8712] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1480'. [ 121.807125][ T8712] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1480'. [ 121.883001][ T8715] sch_fq: defrate 7 ignored. [ 122.085352][ T8735] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1489'. [ 122.106954][ T8735] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 122.195159][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1495'. [ 122.231670][ T8751] cgroup: noprefix used incorrectly [ 122.259857][ T8751] loop2: detected capacity change from 0 to 512 [ 122.269497][ T8751] ext4: Bad value for 'max_batch_time' [ 122.283838][ T8751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.293625][ T8751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.371328][ T8760] SELinux: failed to load policy [ 122.372178][ T28] audit: type=1400 audit(1774022502.249:866): avc: denied { load_policy } for pid=8759 comm="syz.6.1500" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 122.656446][ T8803] loop6: detected capacity change from 0 to 128 [ 122.739697][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 122.739715][ T28] audit: type=1326 audit(1774022502.619:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.6.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 122.777326][ T28] audit: type=1326 audit(1774022502.619:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.6.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 122.801922][ T28] audit: type=1326 audit(1774022502.619:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.6.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 122.851932][ T28] audit: type=1326 audit(1774022502.619:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.6.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 122.875689][ T28] audit: type=1326 audit(1774022502.619:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.6.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 122.901161][ T28] audit: type=1326 audit(1774022502.619:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.6.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 122.940323][ T28] audit: type=1326 audit(1774022502.649:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.6.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 122.966013][ T28] audit: type=1326 audit(1774022502.649:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.6.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 122.991847][ T28] audit: type=1326 audit(1774022502.669:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.6.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 123.015687][ T28] audit: type=1326 audit(1774022502.669:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.6.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94f073c799 code=0x7ffc0000 [ 123.318234][ T8844] loop4: detected capacity change from 0 to 1024 [ 123.346144][ T8844] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 123.372366][ T8844] System zones: 0-1, 3-36 [ 123.398081][ T8850] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 123.407526][ T8844] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1520: bad orphan inode 134217728 [ 123.487172][ T8844] loop4: lost filesystem error report for type 5 error -117 [ 123.487849][ T8844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.510788][ T70] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.536910][ T70] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.560016][ T70] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.580925][ T4340] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.024057][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.796806][ T8900] syzkaller0: entered promiscuous mode [ 124.803180][ T8900] syzkaller0: entered allmulticast mode [ 124.987653][ T8903] loop6: detected capacity change from 0 to 512 [ 125.006695][ T8903] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 125.030100][ T8903] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 125.099765][ T8903] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1541: bg 0: block 248: padding at end of block bitmap is not set [ 125.114817][ T8903] loop6: lost filesystem error report for type 5 error -117 [ 125.115042][ T8903] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.1541: Failed to acquire dquot type 1 [ 125.116887][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 125.140189][ C0] EXT4-fs (loop6): last error at time 1774022504: ext4_validate_block_bitmap:441 [ 125.142603][ T8903] loop6: lost filesystem error report for type 5 error -117 [ 125.159326][ T8903] EXT4-fs (loop6): 1 truncate cleaned up [ 125.178517][ T8903] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 125.227480][ T5274] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 125.369563][ T8930] __nla_validate_parse: 2 callbacks suppressed [ 125.369579][ T8930] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1553'. [ 125.387509][ T8930] ip6gre1: entered promiscuous mode [ 125.393261][ T8930] ip6gre1: entered allmulticast mode [ 126.583654][ T8994] loop4: detected capacity change from 0 to 512 [ 126.603449][ T8994] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 126.651163][ T8994] EXT4-fs (loop4): 1 truncate cleaned up [ 126.658771][ T8994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.981623][ T9016] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1590'. [ 127.007582][ T9014] infiniband syz1: set active [ 127.012800][ T9016] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.020116][ T9016] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.027590][ T9014] infiniband syz1: added syz_tun [ 127.049257][ T9014] RDS/IB: syz1: added [ 127.054160][ T9014] smc: adding ib device syz1 with port count 1 [ 127.060488][ T9014] smc: ib device syz1 port 1 has no pnetid [ 127.675739][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.745595][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1598'. [ 127.769978][ T9043] netlink: 'syz.6.1600': attribute type 8 has an invalid length. [ 127.774195][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1598'. [ 127.980947][ T9069] loop6: detected capacity change from 0 to 1024 [ 128.007666][ T9069] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 128.038282][ T9069] System zones: 0-1, 3-36 [ 128.051565][ T9069] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1610: bad orphan inode 134217728 [ 128.114336][ T9069] loop6: lost filesystem error report for type 5 error -117 [ 128.114754][ T9069] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.637217][ T5274] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.790912][ T9100] loop8: detected capacity change from 0 to 512 [ 128.825172][ T9100] EXT4-fs (loop8): 1 truncate cleaned up [ 128.838022][ T9100] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.854544][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 128.854559][ T28] audit: type=1400 audit(1774022508.729:901): avc: denied { rename } for pid=9099 comm="syz.8.1621" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 128.885224][ T9100] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1621: invalid indirect mapped block 4294967295 (level 1) [ 128.903136][ T28] audit: type=1400 audit(1774022508.729:902): avc: denied { unlink } for pid=9099 comm="syz.8.1621" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 128.931949][ T9100] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1621: invalid indirect mapped block 65535 (level 2) [ 128.965919][ T6527] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.643719][ T9170] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1642'. [ 130.144973][ T28] audit: type=1400 audit(1774022510.019:903): avc: denied { setopt } for pid=9235 comm="syz.5.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 130.175755][ T28] audit: type=1400 audit(1774022510.039:904): avc: denied { read } for pid=9235 comm="syz.5.1655" path="socket:[28307]" dev="sockfs" ino=28307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 130.513366][ T28] audit: type=1326 audit(1774022510.379:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead6c9c799 code=0x7ffc0000 [ 130.587748][ T28] audit: type=1326 audit(1774022510.379:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead6c9c799 code=0x7ffc0000 [ 130.687006][ T28] audit: type=1326 audit(1774022510.379:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead6c9c799 code=0x7ffc0000 [ 130.758682][ T9334] netlink: 'syz.2.1658': attribute type 8 has an invalid length. [ 130.846458][ T28] audit: type=1326 audit(1774022510.389:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead6c9c799 code=0x7ffc0000 [ 130.904221][ T28] audit: type=1326 audit(1774022510.389:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fead6c9c799 code=0x7ffc0000 [ 130.938870][ T9351] loop6: detected capacity change from 0 to 128 [ 130.964534][ T28] audit: type=1326 audit(1774022510.389:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9294 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fead6c9c799 code=0x7ffc0000 [ 131.018606][ T9339] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.057193][ T9355] batman_adv: batadv0: Adding interface: dummy0 [ 131.066784][ T9355] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.105690][ T9355] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 131.147535][ T9339] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.199767][ T9339] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.282488][ T9383] loop6: detected capacity change from 0 to 1024 [ 131.330364][ T9339] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.351218][ T9383] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.420952][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.433825][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.448587][ T5274] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.461779][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.479898][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.618786][ T9403] netlink: 'syz.4.1676': attribute type 8 has an invalid length. [ 131.816821][ T9417] syzkaller0: entered allmulticast mode [ 131.824928][ T9413] syzkaller0: entered promiscuous mode [ 131.858387][ T9413] syzkaller0 (unregistering): left allmulticast mode [ 131.865372][ T9413] syzkaller0 (unregistering): left promiscuous mode [ 131.925422][ T9419] xt_hashlimit: size too large, truncated to 1048576 [ 132.008494][ T9424] loop8: detected capacity change from 0 to 2048 [ 132.044686][ T9424] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 132.100479][ T9424] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.184876][ T6527] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.298804][ T9449] sg_write: data in/out 4915180/120 bytes for SCSI command 0x0-- guessing data in; [ 132.298804][ T9449] program syz.4.1685 not setting count and/or reply_len properly [ 132.415387][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1686'. [ 132.427097][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1686'. [ 132.839509][ T9464] netlink: 'syz.5.1689': attribute type 8 has an invalid length. [ 133.004297][ T9481] netlink: 'syz.5.1707': attribute type 8 has an invalid length. [ 133.458296][ T9496] loop4: detected capacity change from 0 to 128 [ 133.807549][ T9510] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.818776][ T9510] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.891396][ T9510] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.901986][ T9510] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.972539][ T9510] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.984373][ T9510] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.051935][ T9510] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.082215][ T9510] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.165920][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.174239][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.186492][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.195785][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.208932][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.217407][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.230088][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.238415][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.578013][ T9522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1724'. [ 134.592874][ T9522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1724'. [ 134.613721][ T9529] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1723'. [ 134.681540][ T9535] netlink: 'syz.5.1714': attribute type 8 has an invalid length. [ 134.791168][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 134.791185][ T28] audit: type=1326 audit(1774022514.669:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9541 comm="syz.6.1716" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94f073c799 code=0x0 [ 134.855017][ T9546] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1718'. [ 134.864667][ T9546] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1718'. [ 134.914474][ T9553] hsr0: entered promiscuous mode [ 134.920266][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1725'. [ 135.077755][ T9567] netlink: 'syz.5.1732': attribute type 8 has an invalid length. [ 136.059055][ T9614] loop8: detected capacity change from 0 to 2048 [ 136.089735][ T9614] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.229609][ T6527] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.303639][ T9634] syz_tun: entered allmulticast mode [ 136.318406][ T9633] syz_tun: left allmulticast mode [ 136.397949][ T28] audit: type=1400 audit(1774022516.269:952): avc: denied { read write } for pid=9639 comm="syz.8.1757" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 136.469008][ T28] audit: type=1400 audit(1774022516.279:953): avc: denied { open } for pid=9639 comm="syz.8.1757" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 137.574702][ T9668] netlink: 'syz.4.1768': attribute type 8 has an invalid length. [ 137.728461][ T3304] ================================================================== [ 137.736671][ T3304] BUG: KCSAN: data-race in fill_mg_cmtime / simple_unlink [ 137.743813][ T3304] [ 137.746152][ T3304] write to 0xffff8881039ac6c4 of 4 bytes by task 3296 on cpu 1: [ 137.753806][ T3304] simple_unlink+0x54/0x80 [ 137.758242][ T3304] shmem_unlink+0x12d/0x140 [ 137.762776][ T3304] vfs_unlink+0x1c7/0x490 [ 137.767229][ T3304] filename_unlinkat+0x1e2/0x410 [ 137.772180][ T3304] __se_sys_unlink+0x2b/0xe0 [ 137.776787][ T3304] __x64_sys_unlink+0x1f/0x30 [ 137.781474][ T3304] x64_sys_call+0x2eb6/0x3020 [ 137.786164][ T3304] do_syscall_64+0x12c/0x370 [ 137.791014][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.796999][ T3304] [ 137.799331][ T3304] read to 0xffff8881039ac6c4 of 4 bytes by task 3304 on cpu 0: [ 137.806871][ T3304] fill_mg_cmtime+0x5b/0x270 [ 137.811556][ T3304] generic_fillattr+0x24a/0x340 [ 137.816409][ T3304] shmem_getattr+0x181/0x200 [ 137.821025][ T3304] vfs_getattr_nosec+0x146/0x1e0 [ 137.826062][ T3304] vfs_getattr+0x48/0x60 [ 137.830316][ T3304] vfs_statx_path+0x28/0x140 [ 137.834926][ T3304] vfs_statx+0xc4/0x170 [ 137.839102][ T3304] vfs_fstatat+0x118/0x170 [ 137.843524][ T3304] __se_sys_newfstatat+0x55/0x3e0 [ 137.848572][ T3304] __x64_sys_newfstatat+0x55/0x70 [ 137.853695][ T3304] x64_sys_call+0x2c64/0x3020 [ 137.858378][ T3304] do_syscall_64+0x12c/0x370 [ 137.862972][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.868959][ T3304] [ 137.871280][ T3304] value changed: 0x23b4a60a -> 0x24e5fb5a [ 137.876995][ T3304] [ 137.879333][ T3304] Reported by Kernel Concurrency Sanitizer on: [ 137.885481][ T3304] CPU: 0 UID: 0 PID: 3304 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 137.894349][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 137.904404][ T3304] ==================================================================