last executing test programs: 4.234326449s ago: executing program 4 (id=707): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000300030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.19060553s ago: executing program 4 (id=708): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa800, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000024c0)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x5607, 0x2c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140)) unlink(0x0) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x800, &(0x7f00000003c0)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r6 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x4002, &(0x7f00000000c0), 0x1, 0xbd2, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r6, 0x407, 0x100004) write$eventfd(0xffffffffffffffff, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x0, 0x3}}, 0x10) bind$tipc(r7, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41, 0x3}}}, 0x10) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x85c91, &(0x7f00000004c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@oldalloc}, {@nobh}, {@jqfmt_vfsv1}, {@resgid}, {@sb={'sb', 0x3d, 0x3}}, {@norecovery}]}, 0x2, 0x49c, &(0x7f00000019c0)="$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") getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, 0x0, &(0x7f0000000280)) socket$kcm(0x2, 0xa, 0x2) 2.941668526s ago: executing program 3 (id=727): syz_clone3(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080)="4c2d12", &(0x7f0000000140)=@tcp6, 0x2}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x15, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20040054) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001080006040001a8aaaaaaaa14ac1414bb06aaaaaaaa1cac1414bb"], 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockopt(r1, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) r7 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) openat$cgroup(r7, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) io_uring_enter(r7, 0x245e, 0x6906, 0xc, &(0x7f00000000c0)={[0x7fffffff]}, 0x8) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x1}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c00008008", @ANYRES16=r9], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 2.70334551s ago: executing program 3 (id=729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040845}, 0x800) 2.644801098s ago: executing program 3 (id=731): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'ipvlan1\x00', {0x2, 0x4e21, @empty=0xac141436}}) 2.585944496s ago: executing program 3 (id=732): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) perf_event_open(0x0, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) socket(0x2, 0x80805, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket(0x10, 0x3, 0x0) unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4020000e66ad2e57cb54078df0e0734000000851c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x2000}, 0x10) ppoll(&(0x7f0000000640)=[{r0, 0x400}], 0x1, &(0x7f0000000100), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000340)="b2000000", 0x4}, {&(0x7f00000003c0)="040062db7ba1", 0x6}], 0x2) 1.848132342s ago: executing program 2 (id=733): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 1.78623296s ago: executing program 2 (id=735): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) fchdir(r4) symlink(&(0x7f0000000300)='./file0/../file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r5 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x87}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r5, 0x2000413f, 0x20adde, 0x2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc12082c00db5b6861589bcfe8875a060300000023"], 0xfdef) 1.753067304s ago: executing program 0 (id=737): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4844) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000780)="e87082", 0x3}], 0x1, 0x0, 0x2) r1 = socket(0x1e, 0x5, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r1) memfd_create(0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x20004, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xe}, 0x102260, 0x10000, 0x3, 0x1, 0x8, 0x20001, 0x0, 0x0, 0x0, 0x0, 0xf1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x2710, @local}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) r8 = mq_open(&(0x7f0000000040)='\xd8T\xd1\xb8-\xf7', 0x8c2, 0x30, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x9}) mq_timedsend(r8, 0x0, 0x0, 0x5, 0x0) mq_timedreceive(r8, &(0x7f00000003c0)=""/169, 0xa9, 0x200000000a9b, 0x0) sendto(r7, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x80, 0x0, 0x0) recvfrom(r6, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0, 0x284, &(0x7f0000000700)="$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") 1.592862302s ago: executing program 3 (id=739): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4844) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000780)="e87082", 0x3}], 0x1, 0x0, 0x2) r1 = socket(0x1e, 0x5, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r1) memfd_create(0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeca}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x20004, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xe}, 0x102260, 0x10000, 0x3, 0x1, 0x8, 0x20001, 0x0, 0x0, 0x0, 0x0, 0xf1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(0xffffffffffffffff, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x2710, @local}, 0x10) r6 = mq_open(&(0x7f0000000040)='\xd8T\xd1\xb8-\xf7', 0x8c2, 0x30, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x9}) mq_timedsend(r6, 0x0, 0x0, 0x5, 0x0) mq_timedreceive(r6, &(0x7f00000003c0)=""/169, 0xa9, 0x200000000a9b, 0x0) recvfrom(r5, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0, 0x284, &(0x7f0000000700)="$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") 1.573977748s ago: executing program 1 (id=740): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000021bf0000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db00180000000000bf91000000000000b7020000000000008500000084000000b700eb000000000095"], &(0x7f0000000200)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 1.494476933s ago: executing program 1 (id=741): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0xa, &(0x7f0000000000)=0x1, 0x4) 1.422687458s ago: executing program 1 (id=742): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x2, 0xbfcd}, 0x102801, 0x7, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x25, 0x0, 0x0) 1.421963049s ago: executing program 1 (id=743): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) fchdir(r4) symlink(&(0x7f0000000300)='./file0/../file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r5 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x87}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r5, 0x2000413f, 0x20adde, 0x2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc12082c00db5b6861589bcfe8875a060300000023"], 0xfdef) 1.234694862s ago: executing program 0 (id=744): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xfd, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) 1.211462937s ago: executing program 3 (id=745): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa800, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000024c0)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c0}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x5607, 0x2c) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140)) unlink(0x0) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x800, &(0x7f00000003c0)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r6 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x4002, &(0x7f00000000c0), 0x1, 0xbd2, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r6, 0x407, 0x100004) write$eventfd(0xffffffffffffffff, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x0, 0x3}}, 0x10) bind$tipc(r7, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41, 0x3}}}, 0x10) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x85c91, &(0x7f00000004c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@oldalloc}, {@nobh}, {@jqfmt_vfsv1}, {@resgid}, {@sb={'sb', 0x3d, 0x3}}, {@norecovery}]}, 0x2, 0x49c, &(0x7f00000019c0)="$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") getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, 0x0, &(0x7f0000000280)) add_key(&(0x7f0000000300)='dns_resolver\x00', 0x0, &(0x7f0000000200)="75a1d70300", 0x5, 0xfffffffffffffffe) 1.17276762s ago: executing program 0 (id=746): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x700, 0x40, 0xfffffffe, 0x40, {{0xb, 0x4, 0x1, 0x24, 0x2c, 0x65, 0x0, 0x1, 0x4, 0x0, @multicast1, @empty, {[@lsrr={0x83, 0x7, 0x61, [@local]}, @cipso={0x86, 0x11, 0x3, [{0x5, 0xb, "af3edb503f654a03ee"}]}]}}}}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x400}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040044}, 0x24040070) sendmsg$nl_route(r2, &(0x7f0000000840)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="700000006d0000012dbd7000fedbdf2500000000", @ANYRES32=r3, @ANYBLOB="0045040000010000080025000200000008002800f8ffffff08001f000100000008000ac261fb30643b8400", @ANYRES32=r6, @ANYBLOB="0a000100aaaaaaaaaaaa000008001d004002000008002c00020000001400140076657468315f746f5f62617461647600"], 0x70}}, 0x20000001) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r1) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0d030000000000000000130000000c000980080002000000c9"], 0x20}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r9, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000f40)=ANY=[@ANYBLOB="7400b04974af2188935775f587b18e226ce581fb891d405769ee6a23ce0496840200a1f5721596da45b92dc5516a6a691f55649a1c52f7e62eeb7fc1a1e371516510dc19cae0e6ae0c8a0ad43310d665e29343dfcdb80c7f91a9a0aa008ca0add6e08e1bb2ea8939c496791787b8094045b064805d8c8112b6abd9b8958f43518b71761b6115ee62fc3d1eec527dc187430bbc668a4347e2b0dc3d86fb05ac0c9cb03acaee913296432481ae96597dc5cf3867bb5764b6879c145e0a5b9b840a5a589fbfcb15904b10", @ANYRES16=r10, @ANYBLOB="000128bd7000fcdbdf25060000001c0003800800010004000000080001000300000008000200000000800c0007800800020008000000380001802400028008000200df0c00000800010017000000080001001f00000008000400000000000d0001007564703a73797a3200000000"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba000000f9ffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="80000200c988000008001b00"], 0x28}}, 0x800) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x2a, 0x1, 0x8, 0x0, 0x0, 0x4007, 0x80590, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7ac60000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=@gettaction={0x8c, 0x32, 0xe72c5f922f23cad9, 0x70bd28, 0x25dfdbf7, {}, [@action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc1920335b598980a}, 0x34004000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00J\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.142688974s ago: executing program 4 (id=747): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = gettid() tkill(r6, 0x12) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="04002bbd7000fedbdf2516000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x40030002, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x0, 0x180, 0x180, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x2f, 0x2}, 0x74000002, 0x70, 0xd0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x0, 0x0, 0x5], 0x1, 0x5}, {0xffffffffffffffff, [0x1, 0x1, 0x4, 0x6, 0x7], 0x3, 0x6}}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}, {}, 0x16}, 0x287, 0x70, 0xb0, 0x2000000}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3, {0x100008}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 864.090829ms ago: executing program 0 (id=748): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x700, 0x40, 0xfffffffe, 0x40, {{0xb, 0x4, 0x1, 0x24, 0x2c, 0x65, 0x0, 0x1, 0x4, 0x0, @multicast1, @empty, {[@lsrr={0x83, 0x7, 0x61, [@local]}, @cipso={0x86, 0x11, 0x3, [{0x5, 0xb, "af3edb503f654a03ee"}]}]}}}}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000840)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="700000006d0000012dbd7000fedbdf2500000000", @ANYRES32=r3, @ANYBLOB="0045040000010000080025000200000008002800f8ffffff08001f000100000008000ac261fb30643b8400", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa000008001d004002000008002c00020000001400140076657468315f746f5f62617461647600"], 0x70}}, 0x20000001) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r1) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0d030000000000000000130000000c000980080002000000c9"], 0x20}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000f40)=ANY=[@ANYBLOB="7400b04974af2188935775f587b18e226ce581fb891d405769ee6a23ce0496840200a1f5721596da45b92dc5516a6a691f55649a1c52f7e62eeb7fc1a1e371516510dc19cae0e6ae0c8a0ad43310d665e29343dfcdb80c7f91a9a0aa008ca0add6e08e1bb2ea8939c496791787b8094045b064805d8c8112b6abd9b8958f43518b71761b6115ee62fc3d1eec527dc187430bbc668a4347e2b0dc3d86fb05ac0c9cb03acaee913296432481ae96597dc5cf3867bb5764b6879c145e0a5b9b840a5a589fbfcb15904b10", @ANYRES16=r9, @ANYBLOB="000128bd7000fcdbdf25060000001c0003800800010004000000080001000300000008000200000000800c0007800800020008000000380001802400028008000200df0c00000800010017000000080001001f00000008000400000000000d0001007564703a73797a3200000000"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba000000f9ffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="80000200c988000008001b00"], 0x28}}, 0x800) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x2a, 0x1, 0x8, 0x0, 0x0, 0x4007, 0x80590, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7ac60000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=@gettaction={0x8c, 0x32, 0xe72c5f922f23cad9, 0x70bd28, 0x25dfdbf7, {}, [@action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc1920335b598980a}, 0x34004000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00J\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 804.634698ms ago: executing program 2 (id=749): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x1f) 431.151395ms ago: executing program 2 (id=750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xfffffffe}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 425.489184ms ago: executing program 0 (id=751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="6000000002060300000034e4000000000a000004050001000600000005000400000000000900020073797a3100000000050005000a00000011000300686173683a6e65742c6e6574000000001400078005001400a900000008000840"], 0x60}}, 0x2) 394.501028ms ago: executing program 2 (id=752): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x40054) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf523", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@fallback, 0xffffffffffffffff, 0x17, 0x2004}, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ab88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x11}, 0x40, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc, 0x2, 0x0, 0x0, 0xfff9}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0xfff}}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_FLOW={0x8, 0xb, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x4) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./bus\x00') close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) 378.584335ms ago: executing program 0 (id=753): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1c1202, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) fchdir(r4) symlink(&(0x7f0000000300)='./file0/../file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r5 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x87}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r5, 0x2000413f, 0x20adde, 0x2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc12082c00db5b6861589bcfe8875a060300000023"], 0xfdef) 174.687604ms ago: executing program 4 (id=754): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x235d}, [@IFLA_AF_SPEC={0x4}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}]}, 0x38}}, 0x0) 116.824053ms ago: executing program 1 (id=755): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4844) r0 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x20004, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xe}, 0x102260, 0x10000, 0x3, 0x1, 0x8, 0x20001, 0x0, 0x0, 0x0, 0x0, 0xf1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x80, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) 96.225869ms ago: executing program 4 (id=756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x7, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 34.488727ms ago: executing program 4 (id=757): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4844) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000780)="e87082", 0x3}], 0x1, 0x0, 0x2) r1 = socket(0x1e, 0x5, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r1) memfd_create(0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeca}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x20004, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xe}, 0x102260, 0x10000, 0x3, 0x1, 0x8, 0x20001, 0x0, 0x0, 0x0, 0x0, 0xf1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x2710, @local}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) r8 = mq_open(&(0x7f0000000040)='\xd8T\xd1\xb8-\xf7', 0x8c2, 0x30, &(0x7f0000000080)={0x6, 0x4, 0x4, 0x9}) mq_timedsend(r8, 0x0, 0x0, 0x5, 0x0) mq_timedreceive(r8, &(0x7f00000003c0)=""/169, 0xa9, 0x200000000a9b, 0x0) sendto(r7, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x80, 0x0, 0x0) recvfrom(r6, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0, 0x284, &(0x7f0000000700)="$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") 30.880116ms ago: executing program 2 (id=758): syz_clone3(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080)="4c2d12", &(0x7f0000000140)=@tcp6, 0x2}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x15, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001080006040001a8aaaaaaaa14ac1414bb06aaaaaaaa1cac1414bb"], 0x0) sendto$packet(r6, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockopt(r1, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) r8 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) openat$cgroup(r8, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) io_uring_enter(r8, 0x245e, 0x6906, 0xc, &(0x7f00000000c0)={[0x7fffffff]}, 0x8) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x1}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c00008008", @ANYRES16=r10], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 0s ago: executing program 1 (id=759): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000001040)="5346f7f875", 0x5}], 0x1}, 0x810) kernel console output (not intermixed with test programs): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527d1bc799 code=0x7ffc0000 [ 150.887442][ T4896] veth1_vlan: left allmulticast mode [ 150.893096][ T28] audit: type=1326 audit(1772548921.536:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4884 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527d1bc799 code=0x7ffc0000 [ 151.016052][ T4903] loop2: detected capacity change from 0 to 1764 [ 151.023598][ T4903] iso9660: Unknown parameter 'utF8' [ 151.261408][ T3377] IPVS: starting estimator thread 0... [ 151.373628][ T4904] lo speed is unknown, defaulting to 1000 [ 151.436503][ T4908] IPVS: using max 2592 ests per chain, 129600 per kthread [ 152.319392][ T3507] tipc: Subscription rejected, illegal request [ 152.429189][ T4919] bio_check_eod: 59 callbacks suppressed [ 152.429218][ T4919] syz.1.305: attempt to access beyond end of device [ 152.429218][ T4919] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 152.484058][ T4922] lo speed is unknown, defaulting to 1000 [ 152.537222][ T4916] loop4: detected capacity change from 0 to 128 [ 152.646061][ T4919] Buffer I/O error on dev loop1, logical block 57847, async page read [ 152.656017][ T4916] FAT-fs (loop4): bogus number of reserved sectors [ 152.717030][ T4916] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 152.756058][ T4919] syz.1.305: attempt to access beyond end of device [ 152.756058][ T4919] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 152.770679][ T4916] FAT-fs (loop4): Can't find a valid FAT filesystem [ 152.819336][ T4919] Buffer I/O error on dev loop1, logical block 57847, async page read [ 152.920197][ T4927] lo speed is unknown, defaulting to 1000 [ 152.926140][ T4927] lo speed is unknown, defaulting to 1000 [ 152.932352][ T4927] lo speed is unknown, defaulting to 1000 [ 152.939743][ T4927] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 152.967153][ T4927] lo speed is unknown, defaulting to 1000 [ 152.973536][ T4927] lo speed is unknown, defaulting to 1000 [ 152.980395][ T4927] lo speed is unknown, defaulting to 1000 [ 152.986889][ T4927] lo speed is unknown, defaulting to 1000 [ 152.993535][ T4927] lo speed is unknown, defaulting to 1000 [ 153.000532][ T4927] lo speed is unknown, defaulting to 1000 [ 153.460345][ T30] tipc: Subscription rejected, illegal request [ 153.692223][ T4943] loop2: detected capacity change from 0 to 512 [ 153.730144][ T4943] EXT4-fs: Ignoring removed i_version option [ 153.745956][ T4943] EXT4-fs: Ignoring removed bh option [ 153.805481][ T4943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.034872][ T4943] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.080301][ T28] kauditd_printk_skb: 191 callbacks suppressed [ 154.080316][ T28] audit: type=1400 audit(1772548925.436:1066): avc: denied { name_bind } for pid=4940 comm="syz.4.307" src=20128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 154.894070][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.989045][ T3504] tipc: Subscription rejected, illegal request [ 155.088028][ T4953] loop2: detected capacity change from 0 to 128 [ 155.156650][ T4953] FAT-fs (loop2): bogus number of reserved sectors [ 155.164478][ T4953] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 155.196959][ T4953] FAT-fs (loop2): Can't find a valid FAT filesystem [ 155.276459][ T4962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'. [ 155.354271][ T28] audit: type=1400 audit(1772548926.706:1067): avc: denied { append } for pid=4961 comm="syz.1.311" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 155.403206][ T4962] loop1: detected capacity change from 0 to 1024 [ 155.487073][ T4962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 155.500146][ T4962] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.555969][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 155.652223][ T28] audit: type=1400 audit(1772548927.006:1068): avc: denied { setopt } for pid=4972 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 155.680895][ T28] audit: type=1400 audit(1772548927.006:1069): avc: denied { name_connect } for pid=4972 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 155.718842][ T30] tipc: Subscription rejected, illegal request [ 155.729641][ T28] audit: type=1400 audit(1772548927.006:1070): avc: denied { accept } for pid=4972 comm="syz.1.314" lport=47741 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.777077][ T28] audit: type=1400 audit(1772548927.006:1071): avc: denied { write } for pid=4972 comm="syz.1.314" lport=47741 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 155.801567][ T28] audit: type=1400 audit(1772548927.006:1072): avc: denied { setopt } for pid=4972 comm="syz.1.314" lport=47741 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 155.857227][ T4981] loop2: detected capacity change from 0 to 128 [ 155.866598][ T4981] FAT-fs (loop2): bogus number of reserved sectors [ 155.883523][ T4981] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 155.903703][ T4981] FAT-fs (loop2): Can't find a valid FAT filesystem [ 155.995371][ T38] tipc: Subscription rejected, illegal request [ 156.361365][ T4994] xt_policy: output policy not valid in PREROUTING and INPUT [ 156.474246][ T3504] tipc: Subscription rejected, illegal request [ 156.683864][ T4997] loop1: detected capacity change from 0 to 128 [ 156.713802][ T4997] FAT-fs (loop1): bogus number of reserved sectors [ 156.735581][ T4997] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 156.757949][ T4997] FAT-fs (loop1): Can't find a valid FAT filesystem [ 156.997694][ T5017] netlink: 27 bytes leftover after parsing attributes in process `syz.3.323'. [ 157.050332][ T5017] hub 8-0:1.0: USB hub found [ 157.055507][ T5017] hub 8-0:1.0: 8 ports detected [ 157.083398][ T5017] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 157.093704][ T5017] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 157.384049][ T5016] loop4: detected capacity change from 0 to 4096 [ 157.456671][ T5016] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #2: comm syz.4.324: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 157.456812][ T5016] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 157.457429][ T5016] EXT4-fs (loop4): get root inode failed [ 157.457457][ T5016] EXT4-fs (loop4): mount failed [ 158.187387][ T5010] loop4: detected capacity change from 0 to 1024 [ 158.277758][ T5010] EXT4-fs: inline encryption not supported [ 158.280626][ T5026] loop3: detected capacity change from 0 to 1024 [ 158.426503][ T5010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.473780][ T5026] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 158.497964][ T5026] System zones: 0-1, 3-36 [ 158.547817][ T5026] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.327: bad orphan inode 134217728 [ 158.560030][ T5026] loop3: lost filesystem error report for type 5 error -117 [ 158.578848][ T5026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.606602][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.654908][ T5037] lo speed is unknown, defaulting to 1000 [ 158.673266][ T5037] lo speed is unknown, defaulting to 1000 [ 159.071111][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.175671][ T5045] lo speed is unknown, defaulting to 1000 [ 159.182513][ T5045] lo speed is unknown, defaulting to 1000 [ 160.821183][ T5053] xt_policy: output policy not valid in PREROUTING and INPUT [ 160.901500][ T28] audit: type=1400 audit(1772549188.225:1073): avc: denied { ioctl } for pid=5056 comm="syz.0.342" path="socket:[9404]" dev="sockfs" ino=9404 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.904153][ T3504] tipc: Subscription rejected, illegal request [ 160.932186][ T28] audit: type=1400 audit(1772549188.285:1074): avc: denied { setopt } for pid=5056 comm="syz.0.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.019134][ T28] audit: type=1400 audit(1772549188.355:1075): avc: denied { ioctl } for pid=5069 comm="syz.3.337" path="/dev/input/event2" dev="devtmpfs" ino=244 ioctlcmd=0x4540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 161.111810][ T5057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.342'. [ 161.146277][ T28] audit: type=1400 audit(1772549188.405:1076): avc: denied { create } for pid=5056 comm="syz.0.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 161.173205][ T28] audit: type=1400 audit(1772549188.415:1077): avc: denied { write } for pid=5056 comm="syz.0.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 161.200667][ T5061] loop4: detected capacity change from 0 to 128 [ 161.288439][ T5061] FAT-fs (loop4): bogus number of reserved sectors [ 161.307096][ T5061] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 161.343452][ T5059] loop2: detected capacity change from 0 to 1024 [ 161.352039][ T5081] loop1: detected capacity change from 0 to 2048 [ 161.358752][ T5061] FAT-fs (loop4): Can't find a valid FAT filesystem [ 161.418253][ T5059] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 161.434445][ T5059] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 161.445098][ T5084] loop0: detected capacity change from 0 to 512 [ 161.456414][ T5084] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 161.465668][ T5059] JBD2: no valid journal superblock found [ 161.481473][ T5084] EXT4-fs (loop0): 1 truncate cleaned up [ 161.494371][ T5081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.508633][ T5084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.516271][ T5059] EXT4-fs (loop2): Could not load journal inode [ 161.538676][ T5084] EXT4-fs error (device loop0): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.0.340: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 161.561801][ T5089] loop3: detected capacity change from 0 to 1024 [ 161.614998][ T5084] EXT4-fs (loop0): Remounting filesystem read-only [ 161.628378][ T5084] EXT4-fs warning (device loop0): ext4_rename_delete:3729: inode #2: comm syz.0.340: Deleting old file: nlink 5, error=-117 [ 161.662521][ T5076] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.339: bg 0: block 234: padding at end of block bitmap is not set [ 161.716075][ T5076] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 380 with error 28 [ 161.728759][ T5076] EXT4-fs (loop1): This should not happen!! Data will be lost [ 161.728759][ T5076] [ 161.728758][ T5089] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 161.738455][ T5076] EXT4-fs (loop1): Total free blocks count 0 [ 161.738478][ T5076] EXT4-fs (loop1): Free/Dirty block details [ 161.738523][ T5076] EXT4-fs (loop1): free_blocks=0 [ 161.738537][ T5076] EXT4-fs (loop1): dirty_blocks=384 [ 161.738552][ T5076] EXT4-fs (loop1): Block reservation details [ 161.738565][ T5076] EXT4-fs (loop1): i_reserved_data_blocks=24 [ 161.804012][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.804157][ T5089] System zones: 0-1, 3-36 [ 161.822202][ T5059] loop2: detected capacity change from 0 to 1024 [ 161.873985][ T5089] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.341: bad orphan inode 134217728 [ 161.877053][ T5059] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 161.895230][ T5059] System zones: 0-1, 3-36 [ 161.911891][ T5089] loop3: lost filesystem error report for type 5 error -117 [ 161.925840][ T5089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.001603][ T5099] lo speed is unknown, defaulting to 1000 [ 162.008667][ T5059] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.331: bad orphan inode 134217728 [ 162.024393][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.040620][ T5059] loop2: lost filesystem error report for type 5 error -117 [ 162.042122][ T5059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.084446][ T5099] lo speed is unknown, defaulting to 1000 [ 162.229724][ T5100] siw: device registration error -23 [ 162.259408][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.381347][ T28] audit: type=1400 audit(1772549189.735:1078): avc: denied { create } for pid=5104 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 162.403142][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.538509][ T5119] loop0: detected capacity change from 0 to 2048 [ 162.575651][ T5119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.605516][ T5126] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 162.605516][ T5126] The task syz.3.348 (5126) triggered the difference, watch for misbehavior. [ 162.829289][ T5126] syz.3.348 uses obsolete (PF_INET,SOCK_PACKET) [ 162.847089][ T5126] lo speed is unknown, defaulting to 1000 [ 162.853442][ T5126] lo speed is unknown, defaulting to 1000 [ 162.952212][ T28] audit: type=1400 audit(1772549190.305:1079): avc: denied { bind } for pid=5118 comm="syz.0.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 163.052754][ T5138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.348'. [ 163.798687][ T5144] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 164.054987][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.131373][ T70] tipc: Subscription rejected, illegal request [ 164.274425][ T5156] loop3: detected capacity change from 0 to 128 [ 164.346569][ T5156] FAT-fs (loop3): bogus number of reserved sectors [ 164.376045][ T5156] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 164.418495][ T5156] FAT-fs (loop3): Can't find a valid FAT filesystem [ 164.448855][ T5157] loop2: detected capacity change from 0 to 8192 [ 164.852752][ T28] audit: type=1400 audit(1772549192.205:1080): avc: denied { remount } for pid=5155 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 165.192653][ T28] audit: type=1400 audit(1772549192.545:1081): avc: denied { bind } for pid=5155 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 165.242227][ T28] audit: type=1400 audit(1772549192.595:1082): avc: denied { read } for pid=5173 comm="syz.3.358" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 165.511479][ T5167] loop0: detected capacity change from 0 to 256 [ 165.831903][ T5174] Set syz1 is full, maxelem 65536 reached [ 166.007963][ T5184] EXT4-fs: inline encryption not supported [ 166.071872][ T5184] EXT4-fs: Ignoring removed nobh option [ 166.137532][ T5184] EXT4-fs: Ignoring removed bh option [ 166.244406][ T5184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.536096][ T5194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.362'. [ 166.834644][ T5193] xt_policy: output policy not valid in PREROUTING and INPUT [ 167.219379][ T5193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 168.480621][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.357941][ T5211] set_capacity_and_notify: 1 callbacks suppressed [ 169.357960][ T5211] loop2: detected capacity change from 0 to 512 [ 169.425598][ T5211] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 169.497639][ T5211] EXT4-fs (loop2): 1 truncate cleaned up [ 169.510853][ T5211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.567474][ T5211] EXT4-fs error (device loop2): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.2.367: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 169.602955][ T5211] EXT4-fs (loop2): Remounting filesystem read-only [ 169.609808][ T5211] EXT4-fs warning (device loop2): ext4_rename_delete:3729: inode #2: comm syz.2.367: Deleting old file: nlink 5, error=-117 [ 169.662198][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.927319][ T5216] loop4: detected capacity change from 0 to 128 [ 169.934644][ T5216] ext4: Unknown parameter 'smackfshat' [ 170.008962][ T5217] netlink: 'syz.4.369': attribute type 1 has an invalid length. [ 170.022866][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 170.022893][ T28] audit: type=1400 audit(1772549197.375:1084): avc: denied { execute } for pid=5213 comm="syz.4.369" dev="hugetlbfs" ino=9571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 170.139050][ T28] audit: type=1400 audit(1772549197.375:1085): avc: denied { execute_no_trans } for pid=5213 comm="syz.4.369" path=2F6D656D66643A5B0BDB58AE5B1A02FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=9571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 170.440021][ T419] tipc: Subscription rejected, illegal request [ 170.586107][ T5223] loop2: detected capacity change from 0 to 128 [ 170.601841][ T5223] FAT-fs (loop2): bogus number of reserved sectors [ 170.610602][ T5223] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 170.612408][ T5229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.372'. [ 170.635092][ T5223] FAT-fs (loop2): Can't find a valid FAT filesystem [ 170.696498][ T5238] pimreg: entered allmulticast mode [ 170.702811][ T5238] pimreg: left allmulticast mode [ 170.817920][ T5243] xt_policy: output policy not valid in PREROUTING and INPUT [ 170.848785][ T419] tipc: Subscription rejected, illegal request [ 170.954228][ T5257] loop2: detected capacity change from 0 to 512 [ 170.982101][ T5257] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 171.087465][ T5257] EXT4-fs (loop2): 1 truncate cleaned up [ 171.093823][ T5257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.144142][ T5259] loop3: detected capacity change from 0 to 1024 [ 171.162448][ T5264] loop4: detected capacity change from 0 to 256 [ 171.259621][ T5257] EXT4-fs error (device loop2): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.2.379: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 171.390448][ T5264] FAT-fs (loop4): Directory bread(block 64) failed [ 171.397084][ T5264] FAT-fs (loop4): Directory bread(block 65) failed [ 171.403642][ T5264] FAT-fs (loop4): Directory bread(block 66) failed [ 171.410426][ T5264] FAT-fs (loop4): Directory bread(block 67) failed [ 171.417181][ T5264] FAT-fs (loop4): Directory bread(block 68) failed [ 171.424036][ T5264] FAT-fs (loop4): Directory bread(block 69) failed [ 171.430847][ T5264] FAT-fs (loop4): Directory bread(block 70) failed [ 171.437550][ T5264] FAT-fs (loop4): Directory bread(block 71) failed [ 171.444285][ T5264] FAT-fs (loop4): Directory bread(block 72) failed [ 171.450931][ T5264] FAT-fs (loop4): Directory bread(block 73) failed [ 171.511330][ T5259] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 171.634643][ T5259] System zones: 0-1, 3-36 [ 171.657559][ T5257] EXT4-fs (loop2): Remounting filesystem read-only [ 171.723548][ T5257] EXT4-fs warning (device loop2): ext4_rename_delete:3729: inode #2: comm syz.2.379: Deleting old file: nlink 5, error=-117 [ 171.741815][ T5259] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.380: bad orphan inode 134217728 [ 171.839619][ T5259] loop3: lost filesystem error report for type 5 error -117 [ 171.845888][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 171.859857][ C0] EXT4-fs (loop3): initial error at time 1772549199: ext4_orphan_get:1417 [ 171.868482][ C0] EXT4-fs (loop3): last error at time 1772549199: ext4_orphan_get:1417 [ 172.093862][ T5259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.257196][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.944166][ T28] audit: type=1326 audit(1772549200.295:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76ebdc799 code=0x7ffc0000 [ 173.267681][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.437652][ T28] audit: type=1326 audit(1772549200.345:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc76ebdc799 code=0x7ffc0000 [ 173.472924][ T5287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 173.517888][ T28] audit: type=1326 audit(1772549200.575:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76ebdc799 code=0x7ffc0000 [ 173.526178][ T38] tipc: Subscription rejected, illegal request [ 173.547957][ T28] audit: type=1326 audit(1772549200.575:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc76eb9cfce code=0x7ffc0000 [ 173.571807][ T28] audit: type=1326 audit(1772549200.575:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76ebdc799 code=0x7ffc0000 [ 173.578949][ T5293] loop2: detected capacity change from 0 to 256 [ 173.595497][ T28] audit: type=1326 audit(1772549200.615:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fc76ebdc799 code=0x7ffc0000 [ 173.625477][ T28] audit: type=1326 audit(1772549200.615:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76ebdc799 code=0x7ffc0000 [ 173.721690][ T28] audit: type=1326 audit(1772549200.615:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5276 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76ebdc799 code=0x7ffc0000 [ 173.759063][ T5289] loop3: detected capacity change from 0 to 128 [ 173.769982][ T5297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 173.776580][ T5277] loop4: detected capacity change from 0 to 512 [ 173.823703][ T5289] FAT-fs (loop3): bogus number of reserved sectors [ 173.834115][ T5289] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 173.845090][ T5289] FAT-fs (loop3): Can't find a valid FAT filesystem [ 173.873849][ T5297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5297 comm=syz.0.388 [ 173.930074][ T5302] xt_policy: output policy not valid in PREROUTING and INPUT [ 173.972830][ T38] tipc: Subscription rejected, illegal request [ 174.030072][ T5311] loop4: detected capacity change from 0 to 512 [ 174.057797][ T5311] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 174.074625][ T5311] EXT4-fs (loop4): 1 truncate cleaned up [ 174.081092][ T5311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.094942][ T5311] EXT4-fs error (device loop4): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.4.393: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 174.115850][ T5311] EXT4-fs (loop4): Remounting filesystem read-only [ 174.122728][ T5311] EXT4-fs warning (device loop4): ext4_rename_delete:3729: inode #2: comm syz.4.393: Deleting old file: nlink 5, error=-117 [ 174.176499][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.211155][ T5304] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 174.232819][ T5304] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 174.263969][ T5304] JBD2: no valid journal superblock found [ 174.272421][ T5304] EXT4-fs (loop2): Could not load journal inode [ 174.278531][ T5315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.394'. [ 174.377383][ T5318] set_capacity_and_notify: 1 callbacks suppressed [ 174.377472][ T5318] loop1: detected capacity change from 0 to 512 [ 174.440901][ T5304] loop2: detected capacity change from 0 to 1024 [ 174.467311][ T5304] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 174.479071][ T5304] System zones: 0-1, 3-36 [ 174.487170][ T5304] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.391: bad orphan inode 134217728 [ 174.505842][ T5304] loop2: lost filesystem error report for type 5 error -117 [ 174.518338][ T5304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.730292][ T5324] loop4: detected capacity change from 0 to 1024 [ 174.770494][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.915465][ T5334] loop0: detected capacity change from 0 to 256 [ 174.948148][ T5334] FAT-fs (loop0): Directory bread(block 64) failed [ 174.954820][ T5334] FAT-fs (loop0): Directory bread(block 65) failed [ 174.961587][ T5334] FAT-fs (loop0): Directory bread(block 66) failed [ 174.968276][ T5334] FAT-fs (loop0): Directory bread(block 67) failed [ 174.975009][ T5334] FAT-fs (loop0): Directory bread(block 68) failed [ 174.981594][ T5334] FAT-fs (loop0): Directory bread(block 69) failed [ 174.988323][ T5334] FAT-fs (loop0): Directory bread(block 70) failed [ 174.994978][ T5334] FAT-fs (loop0): Directory bread(block 71) failed [ 175.001742][ T5334] FAT-fs (loop0): Directory bread(block 72) failed [ 175.008464][ T5334] FAT-fs (loop0): Directory bread(block 73) failed [ 175.143091][ T5324] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 175.158483][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 175.158499][ T28] audit: type=1326 audit(1772549202.515:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5329 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58915c799 code=0x7ffc0000 [ 175.242494][ T5324] System zones: 0-1, 3-36 [ 175.356229][ T5324] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.396: bad orphan inode 134217728 [ 175.415170][ T28] audit: type=1326 audit(1772549202.515:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5329 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58915c799 code=0x7ffc0000 [ 175.666780][ T5324] loop4: lost filesystem error report for type 5 error -117 [ 175.700314][ T5324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.733895][ T28] audit: type=1326 audit(1772549202.515:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5329 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fd58915c799 code=0x7ffc0000 [ 175.822884][ T28] audit: type=1326 audit(1772549202.515:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5329 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58915c799 code=0x7ffc0000 [ 175.855264][ T5333] loop2: detected capacity change from 0 to 1024 [ 175.956170][ T28] audit: type=1326 audit(1772549202.515:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5329 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58915c799 code=0x7ffc0000 [ 175.996587][ T5333] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 176.028003][ T5333] System zones: 0-1, 3-36 [ 176.070381][ T28] audit: type=1326 audit(1772549202.515:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5329 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd58915c799 code=0x7ffc0000 [ 176.120788][ T5333] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.398: bad orphan inode 134217728 [ 176.162312][ T38] tipc: Subscription rejected, illegal request [ 176.168856][ T5333] loop2: lost filesystem error report for type 5 error -117 [ 176.175903][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 176.189802][ C1] EXT4-fs (loop2): initial error at time 1772549203: ext4_orphan_get:1417 [ 176.198388][ C1] EXT4-fs (loop2): last error at time 1772549203: ext4_orphan_get:1417 [ 176.229147][ T28] audit: type=1326 audit(1772549202.515:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5329 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58915c799 code=0x7ffc0000 [ 176.256400][ T5333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.298199][ T28] audit: type=1326 audit(1772549202.545:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5329 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58915c799 code=0x7ffc0000 [ 176.359232][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.410606][ T5345] loop3: detected capacity change from 0 to 128 [ 176.422828][ T28] audit: type=1326 audit(1772549202.555:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5329 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd58915c799 code=0x7ffc0000 [ 176.512566][ T28] audit: type=1326 audit(1772549202.555:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5329 comm="syz.2.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58915c799 code=0x7ffc0000 [ 176.571197][ T5345] FAT-fs (loop3): bogus number of reserved sectors [ 176.585516][ T5345] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 176.637680][ T5355] xt_policy: output policy not valid in PREROUTING and INPUT [ 176.660156][ T5345] FAT-fs (loop3): Can't find a valid FAT filesystem [ 176.689521][ T5356] loop4: detected capacity change from 0 to 1024 [ 176.719544][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.733976][ T5356] EXT4-fs: inline encryption not supported [ 176.763358][ T5360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.404'. [ 176.775358][ T5356] EXT4-fs: Ignoring removed nobh option [ 176.798633][ T5356] EXT4-fs: Ignoring removed bh option [ 176.856799][ T5356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.908045][ T5360] loop2: detected capacity change from 0 to 128 [ 177.998740][ T5377] loop1: detected capacity change from 0 to 512 [ 178.070594][ T5372] loop3: detected capacity change from 0 to 512 [ 179.023452][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.072643][ T5377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.087038][ T5377] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.224087][ T38] tipc: Subscription rejected, illegal request [ 179.247145][ T5372] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.408: invalid indirect mapped block 256 (level 2) [ 179.280527][ T5372] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 179.285930][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 179.303008][ C1] EXT4-fs (loop3): initial error at time 1772549206: ext4_free_branches:1023: inode 11 [ 179.314038][ C1] EXT4-fs (loop3): last error at time 1772549206: ext4_free_branches:1023: inode 11 [ 179.327298][ T5372] EXT4-fs (loop3): 2 truncates cleaned up [ 179.333471][ T5372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.361393][ T5385] FAT-fs (loop4): bogus number of reserved sectors [ 179.474542][ T5385] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 179.549711][ T5385] FAT-fs (loop4): Can't find a valid FAT filesystem [ 179.897031][ T5396] netlink: 16 bytes leftover after parsing attributes in process `syz.3.408'. [ 180.033937][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.079920][ T5405] xt_policy: output policy not valid in PREROUTING and INPUT [ 180.155533][ T5372] netlink: 9 bytes leftover after parsing attributes in process `syz.3.408'. [ 180.239685][ T5424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.422'. [ 180.403595][ T5413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.412'. [ 180.439734][ T5399] set_capacity_and_notify: 1 callbacks suppressed [ 180.439808][ T5399] loop0: detected capacity change from 0 to 1024 [ 180.476091][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.507275][ T5413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.412'. [ 180.549893][ T5442] xt_policy: output policy not valid in PREROUTING and INPUT [ 180.582381][ T5444] loop4: detected capacity change from 0 to 256 [ 180.633868][ T5399] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 180.695412][ T5435] batadv_slave_1: entered promiscuous mode [ 180.756166][ T5444] FAT-fs (loop4): Directory bread(block 64) failed [ 180.762967][ T5444] FAT-fs (loop4): Directory bread(block 65) failed [ 180.769670][ T5444] FAT-fs (loop4): Directory bread(block 66) failed [ 180.776438][ T5444] FAT-fs (loop4): Directory bread(block 67) failed [ 180.783182][ T5444] FAT-fs (loop4): Directory bread(block 68) failed [ 180.790035][ T5444] FAT-fs (loop4): Directory bread(block 69) failed [ 180.796678][ T5444] FAT-fs (loop4): Directory bread(block 70) failed [ 180.803300][ T5444] FAT-fs (loop4): Directory bread(block 71) failed [ 180.810018][ T5444] FAT-fs (loop4): Directory bread(block 72) failed [ 180.816740][ T5444] FAT-fs (loop4): Directory bread(block 73) failed [ 180.881757][ T5399] System zones: 0-1, 3-36 [ 182.040531][ T5399] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.411: bad orphan inode 134217728 [ 182.659845][ T5455] loop1: detected capacity change from 0 to 512 [ 182.674555][ T5455] EXT4-fs: Ignoring removed nobh option [ 182.695614][ T5399] loop0: lost filesystem error report for type 5 error -117 [ 182.706048][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 182.720837][ C0] EXT4-fs (loop0): initial error at time 1772549210: ext4_orphan_get:1417 [ 182.730388][ C0] EXT4-fs (loop0): last error at time 1772549210: ext4_orphan_get:1417 [ 182.806382][ T5455] ------------[ cut here ]------------ [ 182.812892][ T5455] EA inode 11 i_nlink=1026 [ 182.813012][ T5455] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.1.417/5455 [ 182.829843][ T5455] Modules linked in: [ 182.835023][ T5455] CPU: 0 UID: 0 PID: 5455 Comm: syz.1.417 Tainted: G W syzkaller #0 PREEMPT(full) [ 182.848105][ T5455] Tainted: [W]=WARN [ 182.852161][ T5455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 182.863761][ T5455] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 182.870761][ T5455] Code: 54 5a 99 ff 4c 8d 2d 3d ea 5d 05 49 8d 7e 40 e8 c4 f0 b5 ff 49 8b 6e 40 4c 89 e7 e8 f8 eb b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 af 44 dd 03 66 66 66 66 66 66 2e [ 182.892358][ T5455] RSP: 0018:ffffc90000ec35a8 EFLAGS: 00010246 [ 182.901604][ T5455] RAX: ffff8881021b0ab8 RBX: ffff88811b0831c8 RCX: ffffffff81bffae8 [ 182.911483][ T5455] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871de510 [ 182.921444][ T5455] RBP: 000000000000000b R08: 000188811b08317b R09: 0000000000000000 [ 182.931343][ T5455] R10: ffffc90000ec34d8 R11: 0001c90000ec34d8 R12: ffff88811b083178 [ 182.941011][ T5455] R13: ffffffff871de510 R14: ffff88811b083130 R15: 0000000000000001 [ 182.950738][ T5455] FS: 00007f527bbd56c0(0000) GS:ffff8882ae8dc000(0000) knlGS:0000000000000000 [ 182.963043][ T5455] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.972188][ T5455] CR2: 0000000034747865 CR3: 0000000130b62000 CR4: 00000000003506f0 [ 182.981903][ T5455] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 182.991644][ T5455] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 183.002161][ T5455] Call Trace: [ 183.006758][ T5399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.007887][ T5455] [ 183.007901][ T5455] ext4_xattr_set_entry+0x77c/0x1010 [ 183.007949][ T5455] ext4_xattr_ibody_set+0x184/0x3c0 [ 183.029260][ T5459] loop4: detected capacity change from 0 to 4096 [ 183.031763][ T5455] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 183.054044][ T5455] __ext4_expand_extra_isize+0x246/0x280 [ 183.061681][ T5455] __ext4_mark_inode_dirty+0x29b/0x400 [ 183.069266][ T5455] ext4_evict_inode+0x7c3/0xd60 [ 183.075713][ T5455] ? __pfx_ext4_evict_inode+0x10/0x10 [ 183.081904][ T5455] evict+0x2af/0x510 [ 183.088964][ T5455] ? __dquot_initialize+0x146/0x7c0 [ 183.095974][ T5455] iput+0x41a/0x580 [ 183.101454][ T5455] ext4_process_orphan+0x1a9/0x1c0 [ 183.108121][ T5455] ext4_orphan_cleanup+0x6a8/0xa00 [ 183.115064][ T5455] ext4_fill_super+0x3408/0x37c0 [ 183.120520][ T5455] ? set_blocksize+0x14c/0x270 [ 183.123995][ T5452] loop3: detected capacity change from 0 to 1024 [ 183.126971][ T5455] ? setup_bdev_super+0x30e/0x370 [ 183.127442][ T5455] ? __pfx_ext4_fill_super+0x10/0x10 [ 183.128012][ T5455] get_tree_bdev_flags+0x291/0x300 [ 183.128308][ T5455] ? __pfx_ext4_fill_super+0x10/0x10 [ 183.157412][ T5459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.161414][ T5455] get_tree_bdev+0x1f/0x30 [ 183.178771][ T5455] ext4_get_tree+0x1c/0x30 [ 183.184834][ T5455] vfs_get_tree+0x57/0x1d0 [ 183.192284][ T5455] do_new_mount+0x288/0x8d0 [ 183.198074][ T5455] path_mount+0x4d0/0xbc0 [ 183.203821][ T5455] __se_sys_mount+0x28c/0x2e0 [ 183.204279][ T5459] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.419: corrupted inode contents [ 183.204526][ T5459] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #15: comm syz.4.419: mark_inode_dirty error [ 183.209653][ T5455] __x64_sys_mount+0x67/0x80 [ 183.241199][ T5459] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.419: corrupted inode contents [ 183.244092][ T5455] x64_sys_call+0x2d61/0x3020 [ 183.260084][ T5452] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 183.262332][ T5455] do_syscall_64+0x12c/0x370 [ 183.262994][ T5455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.271728][ T5459] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.419: mark_inode_dirty error [ 183.272090][ T5459] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.419: corrupted inode contents [ 183.277293][ T5455] RIP: 0033:0x7f527d1bda0a [ 183.283624][ T5452] System zones: [ 183.294833][ T5455] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.294953][ T5455] RSP: 002b:00007f527bbd4e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 183.295098][ T5455] RAX: ffffffffffffffda RBX: 00007f527bbd4ee0 RCX: 00007f527d1bda0a [ 183.295620][ T5455] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f527bbd4ea0 [ 183.295843][ T5455] RBP: 0000200000000180 R08: 00007f527bbd4ee0 R09: 0000000000800718 [ 183.309175][ T5459] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.419: mark_inode_dirty error [ 183.312492][ T5455] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 183.315953][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 183.315969][ T28] audit: type=1400 audit(1772549210.665:1205): avc: denied { rename } for pid=5458 comm="syz.4.419" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 183.315998][ T28] audit: type=1400 audit(1772549210.665:1206): avc: denied { unlink } for pid=5458 comm="syz.4.419" name="file3" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 183.316646][ T5459] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.419: corrupted inode contents [ 183.337314][ T5455] R13: 00007f527bbd4ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 183.345517][ T5452] 0-1, 3-36 [ 183.360371][ T5459] EXT4-fs error (device loop4): ext4_truncate:4587: inode #15: comm syz.4.419: mark_inode_dirty error [ 183.363803][ T5455] [ 183.372123][ T5452] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.418: bad orphan inode 134217728 [ 183.372532][ T5452] loop3: lost filesystem error report for type 5 error -117 [ 183.386381][ T5459] EXT4-fs error (device loop4) in ext4_setattr:5983: Corrupt filesystem [ 183.394064][ T5455] ---[ end trace 0000000000000000 ]--- [ 183.402534][ T5452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.426599][ T5464] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.419'. [ 183.455136][ T5455] EXT4-fs (loop1): 1 orphan inode deleted [ 183.526293][ T5415] batadv_slave_1: left promiscuous mode [ 183.568097][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.572896][ T5455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.596700][ T28] audit: type=1400 audit(1772549210.945:1207): avc: denied { bind } for pid=5458 comm="syz.4.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 183.624292][ T28] audit: type=1400 audit(1772549210.945:1208): avc: denied { name_bind } for pid=5458 comm="syz.4.419" src=19996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 183.646176][ T28] audit: type=1400 audit(1772549210.955:1209): avc: denied { node_bind } for pid=5458 comm="syz.4.419" src=19996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 183.667746][ T5462] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.419: corrupted inode contents [ 183.680249][ T28] audit: type=1400 audit(1772549211.035:1210): avc: denied { setattr } for pid=5458 comm="syz.4.419" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 183.714159][ T5469] xt_hashlimit: size too large, truncated to 1048576 [ 183.723732][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.764046][ T5450] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.417: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 183.800198][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.813788][ T28] audit: type=1400 audit(1772549211.095:1211): avc: denied { accept } for pid=5458 comm="syz.4.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 183.817090][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.866042][ T5472] smc: net device gretap0 applied user defined pnetid SYZ0 [ 183.905403][ T3504] tipc: Subscription rejected, illegal request [ 184.057072][ T5488] xt_policy: output policy not valid in PREROUTING and INPUT [ 184.133820][ T5489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.426'. [ 184.143515][ T5474] loop1: detected capacity change from 0 to 128 [ 184.237439][ T5474] FAT-fs (loop1): bogus number of reserved sectors [ 184.263575][ T30] tipc: Subscription rejected, illegal request [ 184.264472][ T5474] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 184.296755][ T5474] FAT-fs (loop1): Can't find a valid FAT filesystem [ 184.391231][ T28] audit: type=1400 audit(1772549467.741:1212): avc: denied { mount } for pid=5500 comm="syz.1.428" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 184.415344][ T5501] netlink: 52 bytes leftover after parsing attributes in process `syz.1.428'. [ 184.444617][ T28] audit: type=1400 audit(1772549467.761:1213): avc: denied { setopt } for pid=5500 comm="syz.1.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 184.451880][ T5493] loop2: detected capacity change from 0 to 128 [ 184.485252][ T28] audit: type=1400 audit(1772549467.831:1214): avc: denied { block_suspend } for pid=5500 comm="syz.1.428" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 184.534194][ T5504] loop1: detected capacity change from 0 to 128 [ 184.540437][ T5493] FAT-fs (loop2): bogus number of reserved sectors [ 184.558373][ T5493] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 184.574668][ T5493] FAT-fs (loop2): Can't find a valid FAT filesystem [ 184.612464][ T5508] loop4: detected capacity change from 0 to 512 [ 184.636672][ T5504] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.656442][ T5504] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.660531][ T5508] ext4: Unknown parameter 'nouser_xattr' [ 184.814732][ T5508] loop4: detected capacity change from 0 to 512 [ 184.942662][ T5508] EXT4-fs: Ignoring removed i_version option [ 185.061767][ T5508] EXT4-fs: Ignoring removed bh option [ 185.150132][ T5508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.196494][ T5517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.267365][ T5508] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 185.686103][ T5527] netlink: 'syz.4.431': attribute type 10 has an invalid length. [ 185.722340][ T5527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.746107][ T5527] team0: Port device bond0 added [ 185.938692][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.173929][ T5536] set_capacity_and_notify: 1 callbacks suppressed [ 186.173949][ T5536] loop0: detected capacity change from 0 to 1024 [ 186.333483][ T5536] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 186.364117][ T5536] System zones: 0-1, 3-36 [ 186.391497][ T5536] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.433: bad orphan inode 134217728 [ 186.415464][ T5536] loop0: lost filesystem error report for type 5 error -117 [ 186.415915][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 186.431034][ C1] EXT4-fs (loop0): initial error at time 1772549469: ext4_orphan_get:1417 [ 186.440681][ C1] EXT4-fs (loop0): last error at time 1772549469: ext4_orphan_get:1417 [ 186.479506][ T5536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.485262][ T3310] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.538978][ T5561] xt_policy: output policy not valid in PREROUTING and INPUT [ 186.613812][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.653598][ T5564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 186.807576][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.034457][ T5569] batadv_slave_1: entered promiscuous mode [ 187.543586][ T5566] batadv_slave_1: left promiscuous mode [ 187.582123][ T5577] syzkaller0: entered promiscuous mode [ 187.583222][ T5581] loop0: detected capacity change from 0 to 512 [ 187.588120][ T5577] syzkaller0: entered allmulticast mode [ 187.612457][ T5585] xt_hashlimit: size too large, truncated to 1048576 [ 187.651166][ T5577] netlink: 144 bytes leftover after parsing attributes in process `syz.3.440'. [ 187.740314][ T5581] EXT4-fs (loop0): 1 truncate cleaned up [ 187.747051][ T5581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.095745][ T5592] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.439'. [ 188.106283][ T5592] netlink: zone id is out of range [ 188.112201][ T5592] netlink: zone id is out of range [ 188.121967][ T5592] netlink: zone id is out of range [ 188.266377][ T5592] netlink: set zone limit has 8 unknown bytes [ 188.362178][ T5592] loop2: detected capacity change from 0 to 512 [ 188.393806][ T5592] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 188.446009][ T70] tipc: Subscription rejected, illegal request [ 188.535134][ T5592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.550841][ T5592] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.611893][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 188.611912][ T28] audit: type=1400 audit(1772549471.961:1296): avc: denied { append } for pid=5576 comm="syz.2.439" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 188.660342][ T5598] loop3: detected capacity change from 0 to 128 [ 188.691361][ T5598] FAT-fs (loop3): bogus number of reserved sectors [ 188.700523][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.716101][ T5598] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 188.736353][ T5598] FAT-fs (loop3): Can't find a valid FAT filesystem [ 188.900408][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.038552][ T5618] xt_policy: output policy not valid in PREROUTING and INPUT [ 189.091769][ T28] audit: type=1400 audit(1772549472.401:1297): avc: denied { create } for pid=5615 comm="syz.3.446" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 189.126038][ T28] audit: type=1400 audit(1772549472.401:1298): avc: denied { write } for pid=5615 comm="syz.3.446" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 189.397755][ T5620] loop2: detected capacity change from 0 to 764 [ 189.416331][ T5620] iso9660: Unknown parameter 'iocharsturkish' [ 189.521954][ T5609] netlink: 64 bytes leftover after parsing attributes in process `syz.0.444'. [ 189.573785][ T5607] loop1: detected capacity change from 0 to 256 [ 189.622234][ T28] audit: type=1400 audit(1772549472.471:1299): avc: denied { ioctl } for pid=5615 comm="syz.3.446" path="socket:[11165]" dev="sockfs" ino=11165 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 189.650909][ T5616] siw: device registration error -23 [ 189.657592][ T28] audit: type=1400 audit(1772549472.541:1300): avc: denied { setopt } for pid=5608 comm="syz.0.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 189.709018][ T28] audit: type=1400 audit(1772549473.051:1301): avc: denied { create } for pid=5615 comm="syz.3.446" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 189.764484][ T28] audit: type=1400 audit(1772549473.091:1302): avc: denied { setopt } for pid=5615 comm="syz.3.446" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 189.829165][ T5622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.447'. [ 189.891781][ T5623] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 190.150497][ T5631] loop1: detected capacity change from 0 to 512 [ 190.184344][ T5637] loop4: detected capacity change from 0 to 256 [ 191.079536][ T5631] EXT4-fs: Ignoring removed i_version option [ 191.097120][ T5635] loop3: detected capacity change from 0 to 128 [ 191.113777][ T5631] EXT4-fs: Ignoring removed bh option [ 192.136677][ T5631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.328579][ T28] audit: type=1326 audit(1772549475.681:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5634 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688775c799 code=0x7ffc0000 [ 192.354744][ T28] audit: type=1326 audit(1772549475.711:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5634 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688775c799 code=0x7ffc0000 [ 192.546205][ T28] audit: type=1326 audit(1772549475.711:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5634 comm="syz.3.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f688775c799 code=0x7ffc0000 [ 192.574739][ T5637] FAT-fs (loop4): Directory bread(block 64) failed [ 192.581430][ T5637] FAT-fs (loop4): Directory bread(block 65) failed [ 192.588017][ T5637] FAT-fs (loop4): Directory bread(block 66) failed [ 192.594872][ T5637] FAT-fs (loop4): Directory bread(block 67) failed [ 192.595168][ T5631] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.601469][ T5637] FAT-fs (loop4): Directory bread(block 68) failed [ 192.619036][ T5637] FAT-fs (loop4): Directory bread(block 69) failed [ 192.625594][ T5637] FAT-fs (loop4): Directory bread(block 70) failed [ 192.632293][ T5637] FAT-fs (loop4): Directory bread(block 71) failed [ 192.639254][ T5637] FAT-fs (loop4): Directory bread(block 72) failed [ 192.646116][ T5637] FAT-fs (loop4): Directory bread(block 73) failed [ 192.842019][ T70] tipc: Subscription rejected, illegal request [ 192.920867][ T5633] team0: Port device bond0 removed [ 192.935404][ T5633] bridge_slave_0: left allmulticast mode [ 192.941876][ T5633] bridge_slave_0: left promiscuous mode [ 192.954592][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.138638][ T5633] bond0: (slave bridge_slave_1): Releasing backup interface [ 193.333346][ T5633] bond0: (slave bond_slave_0): Releasing backup interface [ 193.355380][ T5633] bond0: (slave bond_slave_1): Releasing backup interface [ 193.379284][ T5633] team0: Port device team_slave_0 removed [ 193.398134][ T5633] team0: Port device team_slave_1 removed [ 193.406245][ T5633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.419635][ T5633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.428991][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.435942][ T5633] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 193.457463][ T5645] batadv_slave_1: entered promiscuous mode [ 193.566833][ T5649] loop2: detected capacity change from 0 to 128 [ 193.608485][ T5632] batadv_slave_1: left promiscuous mode [ 193.639886][ T5649] FAT-fs (loop2): bogus number of reserved sectors [ 193.666334][ T5649] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 193.682409][ T5649] FAT-fs (loop2): Can't find a valid FAT filesystem [ 193.744536][ T5664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.454'. [ 193.807439][ T5662] loop3: detected capacity change from 0 to 512 [ 193.823106][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 193.823192][ T28] audit: type=1326 audit(1772549477.171:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58915c799 code=0x7ffc0000 [ 193.845402][ T5662] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 193.854908][ T28] audit: type=1326 audit(1772549477.171:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58915c799 code=0x7ffc0000 [ 193.855008][ T28] audit: type=1326 audit(1772549477.171:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58915c799 code=0x7ffc0000 [ 193.855179][ T28] audit: type=1326 audit(1772549477.171:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fd58915c799 code=0x7ffc0000 [ 193.940494][ T5662] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.455: invalid indirect mapped block 4294967295 (level 1) [ 193.952242][ T28] audit: type=1326 audit(1772549477.171:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58915c799 code=0x7ffc0000 [ 193.970913][ T5662] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 193.978705][ T28] audit: type=1326 audit(1772549477.171:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58915c799 code=0x7ffc0000 [ 193.978742][ T28] audit: type=1326 audit(1772549477.171:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58915c799 code=0x7ffc0000 [ 193.978771][ T28] audit: type=1326 audit(1772549477.171:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58915c799 code=0x7ffc0000 [ 193.978800][ T28] audit: type=1326 audit(1772549477.171:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd58915c799 code=0x7ffc0000 [ 193.978852][ T28] audit: type=1326 audit(1772549477.171:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.2.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58915c799 code=0x7ffc0000 [ 194.116630][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 194.124387][ C0] EXT4-fs (loop3): initial error at time 1772549477: ext4_free_branches:1023: inode 11 [ 194.134420][ C0] EXT4-fs (loop3): last error at time 1772549477: ext4_free_branches:1023: inode 11 [ 194.149023][ T5662] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.455: invalid indirect mapped block 4294967295 (level 1) [ 194.187588][ T5669] lo speed is unknown, defaulting to 1000 [ 194.194294][ T5662] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 194.199834][ T5669] lo speed is unknown, defaulting to 1000 [ 194.204569][ T5662] EXT4-fs (loop3): 2 truncates cleaned up [ 194.374082][ T5662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.996277][ T5683] loop2: detected capacity change from 0 to 128 [ 195.137981][ T5672] loop0: detected capacity change from 0 to 1024 [ 195.159786][ T5687] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.459'. [ 195.195934][ T5683] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.459'. [ 195.205469][ T5685] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.459'. [ 195.346108][ T5672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.401050][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.453920][ T5694] xt_policy: output policy not valid in PREROUTING and INPUT [ 195.652065][ T5694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'. [ 195.685202][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.774070][ T30] tipc: Subscription rejected, illegal request [ 195.889355][ T5703] loop4: detected capacity change from 0 to 128 [ 195.906787][ T5703] FAT-fs (loop4): bogus number of reserved sectors [ 195.913405][ T5703] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 195.935714][ T5701] loop1: detected capacity change from 0 to 256 [ 195.949130][ T5703] FAT-fs (loop4): Can't find a valid FAT filesystem [ 196.706030][ T5712] loop1: detected capacity change from 0 to 512 [ 196.713878][ T5712] FAT-fs (loop1): IO charset utfѾ¹Éh$Û‚‰œ#wî•w9Á‹C= Yæ’³t ¤•áÁEÅ’&y3‹_òÀ©„@¥rRh¢BÀ&5dùˆÓÁxpOêø¤ß‚upˆ‚êš@HÆäX¡ð[ƒòæ›–[ò²â°î7VGø†¥1‰˜ yª{´îþvŽìX±œõªñ)P1uô&-÷@=õ6 not found [ 196.776711][ T3476] kworker/u8:8: attempt to access beyond end of device [ 196.776711][ T3476] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 196.891793][ T3504] tipc: Subscription rejected, illegal request [ 197.041280][ T5710] netlink: 64 bytes leftover after parsing attributes in process `syz.3.462'. [ 197.069301][ T5720] loop2: detected capacity change from 0 to 128 [ 197.089102][ T5720] FAT-fs (loop2): bogus number of reserved sectors [ 197.103550][ T5720] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 197.124380][ T5720] FAT-fs (loop2): Can't find a valid FAT filesystem [ 197.136522][ T5722] xt_policy: output policy not valid in PREROUTING and INPUT [ 197.248383][ T3504] tipc: Subscription rejected, illegal request [ 197.436550][ T5737] loop3: detected capacity change from 0 to 512 [ 197.453998][ T5737] EXT4-fs: Ignoring removed i_version option [ 197.464356][ T5737] EXT4-fs: Ignoring removed bh option [ 197.578682][ T5729] loop0: detected capacity change from 0 to 128 [ 197.703721][ T5742] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 198.198184][ T5741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.467'. [ 198.452695][ T5729] FAT-fs (loop0): bogus number of reserved sectors [ 198.467515][ T5737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.497646][ T5729] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 198.508498][ T5729] FAT-fs (loop0): Can't find a valid FAT filesystem [ 198.524878][ T5737] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.746979][ T5728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 199.686021][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.714435][ T5755] xt_policy: output policy not valid in PREROUTING and INPUT [ 199.839430][ T28] kauditd_printk_skb: 122 callbacks suppressed [ 199.839483][ T28] audit: type=1400 audit(1772549483.191:1490): avc: denied { append } for pid=5761 comm="syz.3.475" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 199.920475][ T5763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.474'. [ 199.972471][ T5764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.056649][ T28] audit: type=1400 audit(1772549483.231:1491): avc: denied { open } for pid=5761 comm="syz.3.475" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 200.174841][ T5768] 9pnet_fd: p9_fd_create_unix (5768): problem connecting socket: ./file0: -2 [ 200.207713][ T28] audit: type=1400 audit(1772549483.231:1492): avc: denied { ioctl } for pid=5761 comm="syz.3.475" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 200.258323][ T30] tipc: Subscription rejected, illegal request [ 200.319682][ T5777] xt_policy: output policy not valid in PREROUTING and INPUT [ 200.382295][ T5779] set_capacity_and_notify: 2 callbacks suppressed [ 200.382314][ T5779] loop0: detected capacity change from 0 to 128 [ 200.423273][ T419] tipc: Subscription rejected, illegal request [ 200.501504][ T5773] loop2: detected capacity change from 0 to 128 [ 200.530296][ T5773] FAT-fs (loop2): bogus number of reserved sectors [ 200.538559][ T5773] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 200.554527][ T5781] loop3: detected capacity change from 0 to 128 [ 200.578405][ T28] audit: type=1400 audit(1772549483.931:1493): avc: denied { accept } for pid=5778 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 200.613807][ T5773] FAT-fs (loop2): Can't find a valid FAT filesystem [ 200.661124][ T5781] FAT-fs (loop3): bogus number of reserved sectors [ 200.676478][ T5781] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 200.688604][ T5781] FAT-fs (loop3): Can't find a valid FAT filesystem [ 201.027462][ T5792] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.481'. [ 201.038012][ T5792] netlink: zone id is out of range [ 201.044275][ T5792] netlink: zone id is out of range [ 201.054875][ T5792] netlink: zone id is out of range [ 201.221735][ T5792] netlink: set zone limit has 8 unknown bytes [ 201.332309][ T5792] loop1: detected capacity change from 0 to 512 [ 201.377326][ T5792] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 201.437005][ T5792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.477792][ T5792] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.501197][ T5790] loop0: detected capacity change from 0 to 1024 [ 201.558499][ T5797] loop2: detected capacity change from 0 to 1024 [ 201.569071][ T5797] EXT4-fs: Ignoring removed orlov option [ 201.575360][ T5797] EXT4-fs: Ignoring removed bh option [ 201.592745][ T5790] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 201.595947][ T5797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.629589][ T5790] System zones: 0-1, 3-36 [ 201.633586][ T28] audit: type=1400 audit(1772549484.981:1494): avc: denied { ioctl } for pid=5796 comm="syz.2.484" path="/dev/rtc0" dev="devtmpfs" ino=245 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 201.677774][ T5797] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 201.727852][ T5800] loop4: detected capacity change from 0 to 1024 [ 201.748101][ T5790] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.482: bad orphan inode 134217728 [ 201.778754][ T5790] loop0: lost filesystem error report for type 5 error -117 [ 201.783192][ T419] tipc: Subscription rejected, illegal request [ 201.797385][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.824029][ T5790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.842873][ T5800] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 201.843262][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.863993][ T5800] System zones: 0-1, 3-36 [ 201.891970][ T5808] loop3: detected capacity change from 0 to 128 [ 201.901278][ T5808] FAT-fs (loop3): bogus number of reserved sectors [ 201.931595][ T5811] loop2: detected capacity change from 0 to 512 [ 201.938296][ T5808] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 201.952900][ T5800] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.483: bad orphan inode 134217728 [ 201.976492][ T5811] EXT4-fs: Ignoring removed oldalloc option [ 201.982682][ T5808] FAT-fs (loop3): Can't find a valid FAT filesystem [ 202.010481][ T5800] loop4: lost filesystem error report for type 5 error -117 [ 202.011958][ T5811] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.487: invalid indirect mapped block 4294967295 (level 1) [ 202.025886][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 202.040758][ C0] EXT4-fs (loop4): initial error at time 1772549485: ext4_orphan_get:1417 [ 202.049477][ C0] EXT4-fs (loop4): last error at time 1772549485: ext4_orphan_get:1417 [ 202.081244][ T5811] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 202.081479][ T5811] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.487: invalid indirect mapped block 4294967295 (level 1) [ 202.090749][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 202.090770][ C1] EXT4-fs (loop2): initial error at time 1772549485: ext4_free_branches:1023: inode 11 [ 202.090797][ C1] EXT4-fs (loop2): last error at time 1772549485: ext4_free_branches:1023: inode 11 [ 202.107873][ T5800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.122302][ T5818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'. [ 202.158619][ T5811] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 202.159709][ T5811] EXT4-fs (loop2): 2 truncates cleaned up [ 202.181110][ T5820] loop1: detected capacity change from 0 to 256 [ 202.183533][ T5811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.211784][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.421431][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.520780][ T5828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.489'. [ 202.618593][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.443980][ T5843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.498284][ T5834] 9pnet_fd: p9_fd_create_unix (5834): problem connecting socket: ./file0: -2 [ 204.788488][ T30] tipc: Subscription rejected, illegal request [ 205.068968][ T5845] ext4: Unknown parameter 'smackfshat' [ 205.079448][ T5845] netlink: 'syz.1.493': attribute type 1 has an invalid length. [ 205.405341][ T30] tipc: Subscription rejected, illegal request [ 205.481253][ T28] audit: type=1400 audit(1772549488.831:1495): avc: denied { read } for pid=5859 comm="syz.1.497" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 205.524420][ T5856] set_capacity_and_notify: 1 callbacks suppressed [ 205.524437][ T5856] loop3: detected capacity change from 0 to 128 [ 205.540762][ T28] audit: type=1400 audit(1772549488.891:1496): avc: denied { listen } for pid=5859 comm="syz.1.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 205.561435][ T5856] FAT-fs (loop3): bogus number of reserved sectors [ 205.578632][ T5856] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 205.623549][ T5856] FAT-fs (loop3): Can't find a valid FAT filesystem [ 205.651330][ T28] audit: type=1326 audit(1772549489.001:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5859 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527d1bc799 code=0x7ffc0000 [ 205.687357][ T5852] loop0: detected capacity change from 0 to 128 [ 205.690668][ T5858] netlink: 64 bytes leftover after parsing attributes in process `syz.4.496'. [ 205.710756][ T5860] netlink: 132 bytes leftover after parsing attributes in process `syz.1.497'. [ 205.755336][ T28] audit: type=1326 audit(1772549489.001:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5859 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527d1bc799 code=0x7ffc0000 [ 205.777570][ T5852] FAT-fs (loop0): bogus number of reserved sectors [ 205.807754][ T5852] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 205.828400][ T28] audit: type=1326 audit(1772549489.061:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5859 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f527d1bc799 code=0x7ffc0000 [ 205.862578][ T28] audit: type=1326 audit(1772549489.061:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5859 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527d1bc799 code=0x7ffc0000 [ 205.881792][ T5841] lo speed is unknown, defaulting to 1000 [ 205.887086][ T5852] FAT-fs (loop0): Can't find a valid FAT filesystem [ 205.917724][ T5841] lo speed is unknown, defaulting to 1000 [ 205.929619][ T28] audit: type=1326 audit(1772549489.061:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5859 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f527d1bc799 code=0x7ffc0000 [ 205.955537][ T28] audit: type=1326 audit(1772549489.061:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5859 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527d1bc799 code=0x7ffc0000 [ 205.979613][ T28] audit: type=1326 audit(1772549489.061:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5859 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f527d1bc799 code=0x7ffc0000 [ 206.003799][ T28] audit: type=1326 audit(1772549489.211:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5859 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527d1bc799 code=0x7ffc0000 [ 206.059384][ T5875] loop4: detected capacity change from 0 to 512 [ 206.126336][ T5875] EXT4-fs: Ignoring removed i_version option [ 206.135695][ T5875] EXT4-fs: Ignoring removed bh option [ 206.145570][ T5876] loop3: detected capacity change from 0 to 128 [ 206.211188][ T5875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.224406][ T5875] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.342430][ T5874] loop0: detected capacity change from 0 to 1024 [ 206.392125][ T5874] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 206.419976][ T70] tipc: Subscription rejected, illegal request [ 206.459177][ T5874] System zones: 0-1, 3-36 [ 206.597042][ T5874] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.500: bad orphan inode 134217728 [ 206.643746][ T5887] loop1: detected capacity change from 0 to 128 [ 206.710042][ T5887] FAT-fs (loop1): bogus number of reserved sectors [ 206.748301][ T5887] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 206.797168][ T5874] loop0: lost filesystem error report for type 5 error -117 [ 206.831766][ T5874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.873753][ T5887] FAT-fs (loop1): Can't find a valid FAT filesystem [ 207.018990][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.077819][ T5892] lo speed is unknown, defaulting to 1000 [ 207.084001][ T5892] lo speed is unknown, defaulting to 1000 [ 207.091784][ T5894] lo speed is unknown, defaulting to 1000 [ 207.121625][ T5894] lo speed is unknown, defaulting to 1000 [ 207.202906][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.237010][ T5896] loop4: detected capacity change from 0 to 2048 [ 207.262807][ T5897] loop3: detected capacity change from 0 to 2048 [ 207.273431][ T5896] EXT4-fs: Ignoring removed i_version option [ 207.296527][ T5897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.373002][ T5896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.450125][ T5896] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.479845][ T5908] loop1: detected capacity change from 0 to 4096 [ 207.506233][ T5908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.639146][ T5908] tipc: Can't bind to reserved service type 2 [ 207.858707][ T5911] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.504: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 208.071068][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.315985][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 208.394155][ T5920] xt_policy: output policy not valid in PREROUTING and INPUT [ 208.519154][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.508'. [ 208.882038][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.509'. [ 209.002353][ T30] tipc: Subscription rejected, illegal request [ 209.027781][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.104260][ T5927] loop4: detected capacity change from 0 to 128 [ 209.114596][ T3504] tipc: Subscription rejected, illegal request [ 209.147882][ T5927] FAT-fs (loop4): bogus number of reserved sectors [ 209.159256][ T5927] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 209.174467][ T5927] FAT-fs (loop4): Can't find a valid FAT filesystem [ 209.311429][ T5932] FAT-fs (loop3): bogus number of reserved sectors [ 209.319792][ T5932] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 209.331226][ T5932] FAT-fs (loop3): Can't find a valid FAT filesystem [ 209.464025][ T5939] netlink: 'syz.4.512': attribute type 10 has an invalid length. [ 209.472120][ T5939] macvlan1: entered allmulticast mode [ 209.478251][ T5939] veth1_vlan: entered allmulticast mode [ 209.486262][ T5939] team0: Port device macvlan1 added [ 209.755016][ T5943] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 210.181988][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.516'. [ 210.858732][ T5959] lo speed is unknown, defaulting to 1000 [ 210.864897][ T5959] lo speed is unknown, defaulting to 1000 [ 210.946694][ T5947] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 210.980447][ T5947] System zones: 0-1, 3-36 [ 211.064961][ T5947] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.515: bad orphan inode 134217728 [ 211.082881][ T5947] loop0: lost filesystem error report for type 5 error -117 [ 211.098648][ T5947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.347876][ T5966] set_capacity_and_notify: 3 callbacks suppressed [ 211.347894][ T5966] loop4: detected capacity change from 0 to 512 [ 211.396570][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.418752][ T5966] EXT4-fs: Ignoring removed i_version option [ 211.424935][ T5966] EXT4-fs: Ignoring removed bh option [ 211.476728][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.487408][ T5966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.509721][ T5966] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 211.703318][ T5965] loop3: detected capacity change from 0 to 1024 [ 212.393318][ T5965] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 212.421692][ T5965] System zones: 0-1, 3-36 [ 212.450156][ T5965] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.528: bad orphan inode 134217728 [ 212.476951][ T5965] loop3: lost filesystem error report for type 5 error -117 [ 212.484415][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.518'. [ 212.509234][ T5965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.548726][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.570219][ T5979] loop2: detected capacity change from 0 to 2048 [ 212.582327][ T5979] EXT4-fs: Ignoring removed orlov option [ 212.588196][ T5979] EXT4-fs: Ignoring removed oldalloc option [ 212.611641][ T70] tipc: Subscription rejected, illegal request [ 212.627583][ T5988] loop4: detected capacity change from 0 to 128 [ 212.634490][ T5979] EXT4-fs (loop2): filesystem too large to mount safely on this system [ 212.677430][ T5988] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 212.693656][ T5988] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.880533][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.919109][ T5979] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 213.021655][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 213.138018][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 213.138046][ T28] audit: type=1400 audit(1772549496.491:1519): avc: denied { write } for pid=5996 comm="syz.1.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 213.214662][ T6007] xt_policy: output policy not valid in PREROUTING and INPUT [ 213.257121][ T6008] loop1: detected capacity change from 0 to 512 [ 213.385993][ T6008] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 213.398229][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'. [ 213.666351][ T6008] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 213.677983][ T6008] System zones: 1-2, 4-12, 8-8 [ 213.683256][ T6008] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.522: iget: bad i_size value: 38620345925642 [ 213.696428][ T6008] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 213.696658][ T6008] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.522: couldn't read orphan inode 15 (err -117) [ 213.706435][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 213.706470][ C1] EXT4-fs (loop1): initial error at time 1772549497: ext4_orphan_get:1391: inode 15 [ 213.706504][ C1] EXT4-fs (loop1): last error at time 1772549497: ext4_orphan_get:1391: inode 15 [ 213.856956][ T6008] loop1: lost filesystem error report for type 5 error -117 [ 213.858107][ T6008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.756865][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 214.996471][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.527'. [ 215.055695][ T6027] 9p: Bad value for 'rfdno' [ 215.853256][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.108499][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'. [ 216.159065][ T6032] loop0: detected capacity change from 0 to 256 [ 216.318944][ T6036] lo speed is unknown, defaulting to 1000 [ 216.325149][ T6036] lo speed is unknown, defaulting to 1000 [ 216.702197][ T6031] lo speed is unknown, defaulting to 1000 [ 216.711269][ T6031] lo speed is unknown, defaulting to 1000 [ 218.339086][ T3476] tipc: Subscription rejected, illegal request [ 218.663188][ T6029] loop3: detected capacity change from 0 to 512 [ 218.681214][ T6029] EXT4-fs: Ignoring removed nobh option [ 218.737773][ T6029] EXT4-fs (loop3): 1 orphan inode deleted [ 218.764193][ T6029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.811780][ T6051] loop1: detected capacity change from 0 to 128 [ 218.856245][ T6051] FAT-fs (loop1): bogus number of reserved sectors [ 218.862901][ T6051] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 218.864469][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'. [ 218.886126][ T6051] FAT-fs (loop1): Can't find a valid FAT filesystem [ 218.963336][ T6025] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.532: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 219.067119][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.107780][ T6065] loop3: detected capacity change from 0 to 256 [ 219.115339][ T3884] tipc: Subscription rejected, illegal request [ 219.176933][ T28] audit: type=1400 audit(1772549502.511:1520): avc: denied { connect } for pid=6064 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 219.249563][ T6072] netlink: 20 bytes leftover after parsing attributes in process `syz.3.538'. [ 219.259577][ T6067] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 219.269634][ T28] audit: type=1400 audit(1772549502.611:1521): avc: denied { connect } for pid=6066 comm="syz.1.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 219.293787][ T6072] team0 (unregistering): Port device macvlan1 removed [ 219.331949][ T28] audit: type=1400 audit(1772549502.611:1522): avc: denied { bind } for pid=6066 comm="syz.1.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 219.385982][ T28] audit: type=1400 audit(1772549502.621:1523): avc: denied { write } for pid=6066 comm="syz.1.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 219.409256][ T6073] lo speed is unknown, defaulting to 1000 [ 219.423007][ T6073] lo speed is unknown, defaulting to 1000 [ 219.643236][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.541'. [ 219.653091][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.541'. [ 220.358606][ T6094] lo speed is unknown, defaulting to 1000 [ 220.365108][ T6094] lo speed is unknown, defaulting to 1000 [ 220.404334][ T6089] siw: device registration error -23 [ 220.611669][ T6099] xt_policy: output policy not valid in PREROUTING and INPUT [ 220.739163][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'. [ 221.291963][ T6104] xt_policy: output policy not valid in PREROUTING and INPUT [ 221.303457][ T419] tipc: Subscription rejected, illegal request [ 221.332890][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.548'. [ 221.430325][ T6113] loop3: detected capacity change from 0 to 256 [ 221.488203][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 221.519902][ T6106] loop1: detected capacity change from 0 to 128 [ 221.577333][ T6106] FAT-fs (loop1): bogus number of reserved sectors [ 221.592855][ T6106] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 221.616328][ T6106] FAT-fs (loop1): Can't find a valid FAT filesystem [ 221.704775][ T6120] xt_policy: output policy not valid in PREROUTING and INPUT [ 221.870182][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.551'. [ 221.917462][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.552'. [ 221.999876][ T6130] loop2: detected capacity change from 0 to 512 [ 222.017490][ T6132] xt_policy: output policy not valid in PREROUTING and INPUT [ 222.034947][ T6123] loop1: detected capacity change from 0 to 512 [ 222.068832][ T6130] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 222.118110][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'. [ 222.160928][ T6130] EXT4-fs (loop2): mount failed [ 222.188128][ T6130] loop2: detected capacity change from 0 to 512 [ 222.207529][ T6130] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 222.220504][ T6130] FAT-fs (loop2): bogus number of FAT sectors [ 222.226971][ T6130] FAT-fs (loop2): Can't find a valid FAT filesystem [ 222.587570][ T6150] loop4: detected capacity change from 0 to 512 [ 222.606948][ T6150] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 224.729643][ T6123] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 224.753198][ T6123] EXT4-fs (loop1): 1 orphan inode deleted [ 224.776811][ T6158] loop3: detected capacity change from 0 to 128 [ 224.805712][ T6123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.824358][ T6158] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 224.846180][ T6158] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.937640][ T6164] xt_policy: output policy not valid in PREROUTING and INPUT [ 224.972275][ T28] audit: type=1400 audit(1772549508.321:1524): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 225.019831][ T3476] tipc: Subscription rejected, illegal request [ 225.114024][ T6164] __nla_validate_parse: 1 callbacks suppressed [ 225.114137][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'. [ 225.134754][ T6171] loop2: detected capacity change from 0 to 128 [ 225.146173][ T6171] FAT-fs (loop2): bogus number of reserved sectors [ 225.164981][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.181159][ T6171] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 225.202530][ T6171] FAT-fs (loop2): Can't find a valid FAT filesystem [ 225.258107][ T6176] xt_policy: output policy not valid in PREROUTING and INPUT [ 225.401516][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'. [ 225.539025][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 225.776208][ T6188] lo speed is unknown, defaulting to 1000 [ 225.782432][ T6188] lo speed is unknown, defaulting to 1000 [ 226.136082][ T6190] loop1: detected capacity change from 0 to 128 [ 226.514471][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 226.545322][ T419] tipc: Subscription rejected, illegal request [ 226.566284][ T6197] loop3: detected capacity change from 0 to 1024 [ 226.575346][ T6197] EXT4-fs: Ignoring removed orlov option [ 226.585054][ T6197] EXT4-fs: Ignoring removed bh option [ 226.600831][ T6197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.662166][ T6197] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 226.679803][ T70] tipc: Subscription rejected, illegal request [ 226.716267][ T70] tipc: Subscription rejected, illegal request [ 226.760939][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.829841][ T6201] loop2: detected capacity change from 0 to 128 [ 226.850433][ T6206] loop0: detected capacity change from 0 to 128 [ 226.864957][ T6201] FAT-fs (loop2): bogus number of reserved sectors [ 226.878267][ T28] audit: type=1400 audit(1772549510.221:1525): avc: denied { listen } for pid=6210 comm="syz.3.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 226.898986][ T6201] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 226.917278][ T28] audit: type=1400 audit(1772549510.261:1526): avc: denied { getopt } for pid=6210 comm="syz.3.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 226.917500][ T6206] FAT-fs (loop0): bogus number of reserved sectors [ 226.931301][ T6201] FAT-fs (loop2): Can't find a valid FAT filesystem [ 226.938213][ T6206] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 226.938403][ T6206] FAT-fs (loop0): Can't find a valid FAT filesystem [ 227.123351][ T6219] xt_policy: output policy not valid in PREROUTING and INPUT [ 227.195151][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'. [ 227.257826][ T419] tipc: Subscription rejected, illegal request [ 227.340190][ T6215] loop0: detected capacity change from 0 to 1024 [ 227.405282][ T6221] loop2: detected capacity change from 0 to 128 [ 227.438562][ T6221] FAT-fs (loop2): bogus number of reserved sectors [ 227.456140][ T6227] xt_policy: output policy not valid in PREROUTING and INPUT [ 227.479543][ T6221] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 227.501057][ T6215] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 227.529805][ T6221] FAT-fs (loop2): Can't find a valid FAT filesystem [ 227.557633][ T6211] syz.3.574 (6211) used greatest stack depth: 8520 bytes left [ 227.596901][ T6215] System zones: 0-1, 3-36 [ 227.676889][ T6215] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.575: bad orphan inode 134217728 [ 227.714281][ T6237] loop2: detected capacity change from 0 to 128 [ 227.721041][ T419] tipc: Subscription rejected, illegal request [ 227.746087][ T6215] loop0: lost filesystem error report for type 5 error -117 [ 227.755875][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 227.769764][ C0] EXT4-fs (loop0): initial error at time 1772549511: ext4_orphan_get:1417 [ 227.778576][ C0] EXT4-fs (loop0): last error at time 1772549511: ext4_orphan_get:1417 [ 227.827075][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.580'. [ 227.850437][ T6215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.864638][ T6237] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 227.895969][ T6237] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.275421][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.401085][ T419] tipc: Subscription rejected, illegal request [ 228.813029][ T6254] loop3: detected capacity change from 0 to 128 [ 228.891511][ T6254] FAT-fs (loop3): bogus number of reserved sectors [ 228.913575][ T6259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.587'. [ 228.925916][ T6254] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 228.947084][ T6254] FAT-fs (loop3): Can't find a valid FAT filesystem [ 229.182257][ T6268] xt_policy: output policy not valid in PREROUTING and INPUT [ 229.344520][ T6273] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 229.353736][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'. [ 229.369537][ T6273] System zones: 0-1, 3-36 [ 229.377924][ T6273] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.591: bad orphan inode 134217728 [ 229.400014][ T6273] loop1: lost filesystem error report for type 5 error -117 [ 229.400653][ T6273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.711121][ T6282] xt_policy: output policy not valid in PREROUTING and INPUT [ 229.772837][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.851592][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.051254][ T28] audit: type=1400 audit(1772549513.401:1527): avc: denied { read } for pid=6285 comm="syz.4.595" lport=35954 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 230.241987][ T6295] set_capacity_and_notify: 1 callbacks suppressed [ 230.242007][ T6295] loop2: detected capacity change from 0 to 128 [ 230.256297][ T6295] msdos: Bad value for 'gid' [ 230.261011][ T6295] msdos: Bad value for 'gid' [ 230.477736][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'. [ 230.754223][ T6300] loop1: detected capacity change from 0 to 512 [ 230.886381][ T6300] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.598: invalid indirect mapped block 4294967295 (level 1) [ 230.914619][ T6300] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 230.914839][ T6300] EXT4-fs (loop1): Remounting filesystem read-only [ 230.924517][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 230.924540][ C1] EXT4-fs (loop1): initial error at time 1772549514: ext4_free_branches:1023: inode 11 [ 230.924571][ C1] EXT4-fs (loop1): last error at time 1772549514: ext4_free_branches:1023: inode 11 [ 230.958078][ T6300] EXT4-fs (loop1): 2 truncates cleaned up [ 230.964465][ T6300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.969596][ T28] audit: type=1400 audit(1772549514.321:1528): avc: denied { read } for pid=6285 comm="syz.4.595" path="socket:[14421]" dev="sockfs" ino=14421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 231.188081][ T6305] lo speed is unknown, defaulting to 1000 [ 231.198506][ T6305] lo speed is unknown, defaulting to 1000 [ 231.521888][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.123968][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.601'. [ 233.218723][ T6308] loop1: detected capacity change from 0 to 32768 [ 233.244321][ T6321] loop2: detected capacity change from 0 to 128 [ 233.282861][ T6321] FAT-fs (loop2): bogus number of reserved sectors [ 233.291476][ T6321] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 233.308423][ T6321] FAT-fs (loop2): Can't find a valid FAT filesystem [ 233.323565][ T3303] loop1: p1 p2 p3 < p5 p6 > [ 233.336465][ T3303] loop1: p2 size 16775168 extends beyond EOD, truncated [ 233.365423][ T3303] loop1: p5 start 4294970168 is beyond EOD, truncated [ 233.418138][ T6308] loop1: p1 p2 p3 < > [ 233.423093][ T6308] loop1: p2 size 16775168 extends beyond EOD, truncated [ 233.441277][ T6328] xt_policy: output policy not valid in PREROUTING and INPUT [ 233.443991][ T6308] loop1: p3 could not be added: -ENOMEM [ 233.449781][ T6331] loop0: detected capacity change from 0 to 1024 [ 233.489246][ T70] tipc: Subscription rejected, illegal request [ 233.531141][ T6331] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 233.539910][ T6331] System zones: 0-1, 3-36 [ 233.545058][ T6331] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.606: bad orphan inode 134217728 [ 233.605348][ T6331] loop0: lost filesystem error report for type 5 error -117 [ 233.605869][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 233.609068][ T6332] loop3: detected capacity change from 0 to 128 [ 233.613335][ C0] EXT4-fs (loop0): initial error at time 1772549516: ext4_orphan_get:1417 [ 233.613362][ C0] EXT4-fs (loop0): last error at time 1772549516: ext4_orphan_get:1417 [ 233.664934][ T6331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.750461][ T6332] FAT-fs (loop3): bogus number of reserved sectors [ 233.799719][ T6332] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 234.660845][ T6332] FAT-fs (loop3): Can't find a valid FAT filesystem [ 234.693148][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.760614][ T3581] udevd[3581]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 234.770005][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 234.777387][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 234.787319][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 234.942104][ T6356] loop1: detected capacity change from 0 to 1024 [ 234.953443][ T6355] loop3: detected capacity change from 0 to 2048 [ 234.990617][ T6356] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 235.020030][ T6356] System zones: 0-1, 3-36 [ 235.026093][ T3581] loop3: p1 p2 [ 235.035765][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'. [ 235.056308][ T6356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.650709][ T6369] lo speed is unknown, defaulting to 1000 [ 235.662332][ T6369] lo speed is unknown, defaulting to 1000 [ 236.261169][ T6355] loop3: p1 p2 [ 236.269808][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 236.281579][ T6347] udevd[6347]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 236.421748][ T3504] tipc: Subscription rejected, illegal request [ 236.440307][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 236.451632][ T3581] udevd[3581]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 236.479015][ T3581] udevd[3581]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 236.490798][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 236.501899][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.592455][ T6377] loop0: detected capacity change from 0 to 128 [ 236.622060][ T6377] FAT-fs (loop0): bogus number of reserved sectors [ 236.630910][ T6377] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 236.646037][ T6377] FAT-fs (loop0): Can't find a valid FAT filesystem [ 236.743094][ T6391] xt_policy: output policy not valid in PREROUTING and INPUT [ 236.748872][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.617'. [ 236.768747][ T6393] random: crng reseeded on system resumption [ 236.780534][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.617'. [ 236.803684][ T28] audit: type=1400 audit(1772549520.121:1529): avc: denied { write } for pid=6392 comm="syz.1.620" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 236.828936][ T28] audit: type=1400 audit(1772549520.121:1530): avc: denied { open } for pid=6392 comm="syz.1.620" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 236.855272][ T28] audit: type=1400 audit(1772549520.151:1531): avc: denied { ioctl } for pid=6392 comm="syz.1.620" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 238.849738][ T6401] loop1: detected capacity change from 0 to 512 [ 239.239587][ T6400] loop0: detected capacity change from 0 to 764 [ 239.374154][ T6400] iso9660: Unknown parameter 'iocharsturkish' [ 239.847715][ T6401] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 240.407707][ T3476] tipc: Subscription rejected, illegal request [ 240.423619][ T6401] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 240.423775][ T6401] EXT4-fs: failed to create workqueue [ 240.461818][ T6401] EXT4-fs (loop1): mount failed [ 240.557228][ T30] tipc: Subscription rejected, illegal request [ 240.751072][ T6413] loop1: detected capacity change from 0 to 128 [ 240.816301][ T6413] FAT-fs (loop1): bogus number of reserved sectors [ 240.824062][ T6413] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 240.837040][ T6413] FAT-fs (loop1): Can't find a valid FAT filesystem [ 241.059897][ T6429] lo speed is unknown, defaulting to 1000 [ 241.071843][ T6429] lo speed is unknown, defaulting to 1000 [ 241.351770][ T3476] tipc: Subscription rejected, illegal request [ 241.422290][ T6437] xt_policy: output policy not valid in PREROUTING and INPUT [ 241.431353][ T6426] loop2: detected capacity change from 0 to 128 [ 241.441008][ T6426] FAT-fs (loop2): bogus number of reserved sectors [ 241.465021][ T6426] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 241.474747][ T6426] FAT-fs (loop2): Can't find a valid FAT filesystem [ 241.614994][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'. [ 241.704009][ T419] tipc: Subscription rejected, illegal request [ 241.779751][ T6455] lo speed is unknown, defaulting to 1000 [ 241.786194][ T6455] lo speed is unknown, defaulting to 1000 [ 241.847493][ T28] audit: type=1400 audit(1772549525.201:1532): avc: denied { relabelfrom } for pid=6457 comm="syz.2.639" name="" dev="pipefs" ino=14804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 242.009482][ T30] tipc: Subscription rejected, illegal request [ 242.718788][ T6466] loop2: detected capacity change from 0 to 128 [ 243.207456][ T6466] FAT-fs (loop2): bogus number of reserved sectors [ 243.207559][ T6466] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 243.207599][ T6466] FAT-fs (loop2): Can't find a valid FAT filesystem [ 244.639731][ T6489] loop0: detected capacity change from 0 to 128 [ 244.648220][ T6492] loop4: detected capacity change from 0 to 512 [ 244.723522][ T3504] tipc: Subscription rejected, illegal request [ 244.730440][ T6489] FAT-fs (loop0): bogus number of reserved sectors [ 244.748041][ T6492] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 244.769611][ T6489] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 244.794080][ T6493] loop2: detected capacity change from 0 to 1024 [ 244.825667][ T6489] FAT-fs (loop0): Can't find a valid FAT filesystem [ 244.832342][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 244.832362][ C0] EXT4-fs (loop4): initial error at time 1772549528: ext4_mb_generate_buddy:1315 [ 244.832414][ C0] EXT4-fs (loop4): last error at time 1772549528: ext4_mb_generate_buddy:1315 [ 244.862813][ T6492] EXT4-fs (loop4): Remounting filesystem read-only [ 244.876539][ T6492] EXT4-fs (loop4): 1 truncate cleaned up [ 244.936760][ T6493] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 244.950132][ T6493] System zones: 0-1, 3-36 [ 244.961013][ T6492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.006147][ T6493] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.648: bad orphan inode 134217728 [ 245.018054][ T6493] loop2: lost filesystem error report for type 5 error -117 [ 245.054549][ T6493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.981366][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'. [ 246.578405][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.639212][ T3884] tipc: Subscription rejected, illegal request [ 246.747053][ T6505] loop4: detected capacity change from 0 to 128 [ 246.847845][ T6505] FAT-fs (loop4): bogus number of reserved sectors [ 246.857414][ T6516] xt_policy: output policy not valid in PREROUTING and INPUT [ 246.859812][ T6505] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 246.880538][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.897928][ T6505] FAT-fs (loop4): Can't find a valid FAT filesystem [ 246.923029][ T28] audit: type=1400 audit(1772549530.271:1533): avc: denied { append } for pid=6517 comm="syz.1.655" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 246.942421][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.653'. [ 246.973714][ T6520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.654'. [ 247.011228][ T6520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.654'. [ 247.024007][ T6525] netlink: 48 bytes leftover after parsing attributes in process `syz.1.657'. [ 247.034093][ T6525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.657'. [ 247.045601][ T3476] tipc: Subscription rejected, illegal request [ 247.046790][ T6525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.657'. [ 247.061203][ T6525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.657'. [ 247.100497][ T3476] tipc: Subscription rejected, illegal request [ 247.201571][ T6532] loop3: detected capacity change from 0 to 128 [ 247.251509][ T6532] FAT-fs (loop3): bogus number of reserved sectors [ 247.271395][ T6532] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 247.315511][ T6532] FAT-fs (loop3): Can't find a valid FAT filesystem [ 247.531417][ T3884] tipc: Subscription rejected, illegal request [ 247.756598][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.664'. [ 247.805203][ T6571] xt_policy: output policy not valid in PREROUTING and INPUT [ 247.989427][ T6552] lo speed is unknown, defaulting to 1000 [ 247.996246][ T6552] lo speed is unknown, defaulting to 1000 [ 248.054658][ T6581] xt_policy: output policy not valid in PREROUTING and INPUT [ 248.207589][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 248.262821][ T6594] xt_policy: output policy not valid in PREROUTING and INPUT [ 248.328227][ T419] tipc: Subscription rejected, illegal request [ 248.341054][ T6594] veth1_vlan: left allmulticast mode [ 248.354231][ T419] tipc: Subscription rejected, illegal request [ 248.413237][ T6609] xt_policy: output policy not valid in PREROUTING and INPUT [ 248.462465][ T6610] loop1: detected capacity change from 0 to 128 [ 248.474856][ T6596] loop3: detected capacity change from 0 to 128 [ 248.491769][ T6610] FAT-fs (loop1): bogus number of reserved sectors [ 248.512052][ T6610] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 248.532135][ T6610] FAT-fs (loop1): Can't find a valid FAT filesystem [ 248.576624][ T6596] FAT-fs (loop3): bogus number of reserved sectors [ 248.583884][ T6596] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 248.595214][ T6596] FAT-fs (loop3): Can't find a valid FAT filesystem [ 248.639678][ T6618] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 248.755899][ T28] audit: type=1400 audit(1772549532.081:1534): avc: denied { create } for pid=6625 comm="syz.3.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 248.806365][ T28] audit: type=1400 audit(1772549532.081:1535): avc: denied { sys_admin } for pid=6625 comm="syz.3.691" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 248.980962][ T6630] xt_policy: output policy not valid in PREROUTING and INPUT [ 249.089942][ T6622] loop4: detected capacity change from 0 to 1024 [ 249.251794][ T6635] lo speed is unknown, defaulting to 1000 [ 249.258871][ T6635] lo speed is unknown, defaulting to 1000 [ 249.374630][ T6636] xt_policy: output policy not valid in PREROUTING and INPUT [ 250.184286][ T3476] tipc: Subscription rejected, illegal request [ 250.193896][ T6622] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 250.226239][ T6622] System zones: 0-1, 3-36 [ 250.271079][ T6622] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.689: bad orphan inode 134217728 [ 250.315950][ T6622] loop4: lost filesystem error report for type 5 error -117 [ 250.334433][ T6622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.389737][ T6641] loop1: detected capacity change from 0 to 128 [ 250.469144][ T6641] FAT-fs (loop1): bogus number of reserved sectors [ 250.506063][ T6641] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 250.536983][ T6641] FAT-fs (loop1): Can't find a valid FAT filesystem [ 250.807004][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.913964][ T6657] loop1: detected capacity change from 0 to 4096 [ 250.954771][ T6664] xt_connbytes: Forcing CT accounting to be enabled [ 251.003900][ T6657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.061866][ T6655] loop0: detected capacity change from 0 to 1024 [ 251.068668][ T6646] loop3: detected capacity change from 0 to 1024 [ 251.141821][ T6646] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 251.167135][ T6675] xt_TPROXY: Can be used only with -p tcp or -p udp [ 251.176789][ T6646] System zones: 0-1, 3-36 [ 251.193507][ T6646] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.696: bad orphan inode 134217728 [ 251.210448][ T6646] loop3: lost filesystem error report for type 5 error -117 [ 251.229919][ T6646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.274466][ T6655] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 251.288990][ T6655] System zones: 0-1, 3-36 [ 251.310672][ T6655] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.709: bad orphan inode 134217728 [ 251.324899][ T6655] loop0: lost filesystem error report for type 5 error -117 [ 251.343571][ T6655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.393238][ T6684] loop4: detected capacity change from 0 to 4096 [ 251.444989][ T6684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.494475][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.606681][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.639611][ T419] tipc: Subscription rejected, illegal request [ 251.701814][ T6689] loop3: detected capacity change from 0 to 1024 [ 251.734441][ T6691] loop0: detected capacity change from 0 to 128 [ 251.752814][ T6689] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 251.769315][ T6691] FAT-fs (loop0): bogus number of reserved sectors [ 251.776577][ T6691] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 251.776596][ T6689] System zones: [ 251.776996][ T6691] FAT-fs (loop0): Can't find a valid FAT filesystem [ 251.832097][ T6689] 0-1, 3-36 [ 251.860460][ T6689] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.710: bad orphan inode 134217728 [ 251.876338][ T6689] loop3: lost filesystem error report for type 5 error -117 [ 251.883916][ T6703] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 251.911029][ T6689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.926696][ T6703] EXT4-fs (loop0): 1 truncate cleaned up [ 251.953661][ T6703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.993067][ T6703] EXT4-fs error (device loop0): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.0.714: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 252.034702][ T6703] EXT4-fs (loop0): Remounting filesystem read-only [ 252.056749][ T6703] EXT4-fs warning (device loop0): ext4_rename_delete:3729: inode #2: comm syz.0.714: Deleting old file: nlink 5, error=-117 [ 252.083088][ T6714] xt_policy: output policy not valid in PREROUTING and INPUT [ 252.164525][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.184927][ T6716] __nla_validate_parse: 2 callbacks suppressed [ 252.184946][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 252.255428][ T28] audit: type=1400 audit(1772549535.601:1536): avc: denied { setopt } for pid=6720 comm="syz.0.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 252.352291][ T3476] tipc: Subscription rejected, illegal request [ 252.376102][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.510438][ T6723] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 252.526315][ T6723] System zones: 0-1, 3-36 [ 252.575214][ T6727] FAT-fs (loop0): bogus number of reserved sectors [ 252.586604][ T6727] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 252.596686][ T6723] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.721: bad orphan inode 134217728 [ 252.602204][ T6727] FAT-fs (loop0): Can't find a valid FAT filesystem [ 252.618245][ T6723] loop2: lost filesystem error report for type 5 error -117 [ 252.655175][ T6723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.681394][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.727'. [ 252.761971][ T3476] tipc: Subscription rejected, illegal request [ 253.241655][ T6758] lo speed is unknown, defaulting to 1000 [ 253.253978][ T6758] lo speed is unknown, defaulting to 1000 [ 253.532073][ T6747] FAT-fs (loop0): bogus number of reserved sectors [ 253.547462][ T6747] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 253.562767][ T6747] FAT-fs (loop0): Can't find a valid FAT filesystem [ 253.585776][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.623012][ T6761] program syz.2.733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.632780][ T6761] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 253.712070][ T3504] tipc: Subscription rejected, illegal request [ 253.753363][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.881595][ T3504] tipc: Subscription rejected, illegal request [ 253.892096][ T6769] set_capacity_and_notify: 4 callbacks suppressed [ 253.892140][ T6769] loop0: detected capacity change from 0 to 128 [ 253.977752][ T6765] loop2: detected capacity change from 0 to 1024 [ 254.035596][ T6789] loop3: detected capacity change from 0 to 128 [ 254.040268][ T6765] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 254.051485][ T6765] System zones: 0-1, 3-36 [ 254.060727][ T6789] FAT-fs (loop3): bogus number of reserved sectors [ 254.071075][ T6789] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 254.080890][ T6789] FAT-fs (loop3): Can't find a valid FAT filesystem [ 254.092317][ T6765] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.735: bad orphan inode 134217728 [ 254.109753][ T6769] FAT-fs (loop0): bogus number of reserved sectors [ 254.116178][ T6765] loop2: lost filesystem error report for type 5 error -117 [ 254.122847][ T6765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.133126][ T6769] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 254.133235][ T6769] FAT-fs (loop0): Can't find a valid FAT filesystem [ 254.301024][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.318127][ T6797] xt_policy: output policy not valid in PREROUTING and INPUT [ 254.358781][ T6788] loop1: detected capacity change from 0 to 1024 [ 254.404067][ T6801] loop3: detected capacity change from 0 to 4096 [ 254.415014][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'. [ 254.639489][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.667078][ T6801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.704470][ T6808] xt_policy: output policy not valid in PREROUTING and INPUT [ 254.721376][ T6788] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 254.762073][ T6788] System zones: 0-1, 3-36 [ 254.852205][ T6788] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.743: bad orphan inode 134217728 [ 254.889626][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'. [ 254.899826][ T6788] loop1: lost filesystem error report for type 5 error -117 [ 254.957020][ T6810] Unsupported ieee802154 address type: 0 [ 254.960178][ T28] audit: type=1400 audit(1772549538.311:1537): avc: denied { bind } for pid=6809 comm="syz.2.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 254.990540][ T6788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.089052][ T6816] loop2: detected capacity change from 0 to 512 [ 255.115199][ T6816] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 255.148712][ T6816] EXT4-fs (loop2): 1 truncate cleaned up [ 255.157050][ T6816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.184350][ T6816] EXT4-fs error (device loop2): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.2.752: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 255.273139][ T6823] ipvlan0: entered promiscuous mode [ 255.278558][ T6823] ipvlan0: entered allmulticast mode [ 255.284025][ T6823] veth0_vlan: entered allmulticast mode [ 255.291255][ T6816] EXT4-fs (loop2): Remounting filesystem read-only [ 255.298193][ T6816] EXT4-fs warning (device loop2): ext4_rename_delete:3729: inode #2: comm syz.2.752: Deleting old file: nlink 5, error=-117 [ 255.326381][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.414506][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.445622][ T38] tipc: Subscription rejected, illegal request [ 255.459891][ T3320] ================================================================== [ 255.468113][ T3320] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 255.475692][ T3320] [ 255.478029][ T3320] read-write to 0xffff888237d26668 of 1 bytes by task 3581 on cpu 1: [ 255.486103][ T3320] folio_add_lru+0xa4/0x1e0 [ 255.490895][ T3320] shmem_get_folio_gfp+0x7b0/0xd60 [ 255.496027][ T3320] shmem_write_begin+0xfc/0x1f0 [ 255.500909][ T3320] generic_perform_write+0x183/0x490 [ 255.506218][ T3320] shmem_file_write_iter+0xc5/0xf0 [ 255.511618][ T3320] vfs_write+0x5a6/0x9f0 [ 255.515885][ T3320] ksys_write+0xdc/0x1a0 [ 255.520159][ T3320] __x64_sys_write+0x40/0x50 [ 255.524767][ T3320] x64_sys_call+0x27e1/0x3020 [ 255.529470][ T3320] do_syscall_64+0x12c/0x370 [ 255.534084][ T3320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.540081][ T3320] [ 255.542414][ T3320] read to 0xffff888237d26668 of 1 bytes by task 3320 on cpu 0: [ 255.549970][ T3320] __lru_add_drain_all+0x17e/0x450 [ 255.555100][ T3320] lru_add_drain_all+0x10/0x20 [ 255.559884][ T3320] invalidate_bdev+0x47/0x70 [ 255.564491][ T3320] ext4_put_super+0x624/0x7d0 [ 255.569201][ T3320] generic_shutdown_super+0xee/0x220 [ 255.574610][ T3320] kill_block_super+0x2a/0x70 [ 255.579317][ T3320] ext4_kill_sb+0x42/0x80 [ 255.583746][ T3320] deactivate_locked_super+0x75/0x1c0 [ 255.589136][ T3320] deactivate_super+0x97/0xa0 [ 255.593830][ T3320] cleanup_mnt+0x2bb/0x330 [ 255.598272][ T3320] __cleanup_mnt+0x19/0x20 [ 255.602713][ T3320] task_work_run+0x130/0x1a0 [ 255.607666][ T3320] exit_to_user_mode_loop+0x1f4/0x6f0 [ 255.613141][ T3320] do_syscall_64+0x249/0x370 [ 255.617746][ T3320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.623656][ T3320] [ 255.626076][ T3320] value changed: 0x00 -> 0x01 [ 255.630930][ T3320] [ 255.633268][ T3320] Reported by Kernel Concurrency Sanitizer on: [ 255.639428][ T3320] CPU: 0 UID: 0 PID: 3320 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 255.650740][ T3320] Tainted: [W]=WARN [ 255.654553][ T3320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 255.664973][ T3320] ================================================================== [ 255.686189][ T6819] loop0: detected capacity change from 0 to 1024 [ 255.720786][ T6819] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 255.738804][ T6819] System zones: 0-1, 3-36 [ 255.754764][ T6819] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.753: bad orphan inode 134217728 [ 255.768637][ T6819] loop0: lost filesystem error report for type 5 error -117 [ 255.771222][ T6829] loop4: detected capacity change from 0 to 128 [ 255.784047][ T6819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.827766][ T6829] FAT-fs (loop4): bogus number of reserved sectors [ 255.834868][ T6829] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 255.847267][ T6829] FAT-fs (loop4): Can't find a valid FAT filesystem [ 255.915417][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'. [ 256.008142][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.259324][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.