last executing test programs: 2m2.867072546s ago: executing program 32 (id=170): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x57b, &(0x7f00000010c0)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x71) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') 1m59.171957091s ago: executing program 2 (id=222): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m59.090704317s ago: executing program 2 (id=224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb988"], 0xfdef) 1m58.902712374s ago: executing program 2 (id=226): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x109301) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) migrate_pages(0x0, 0xfc, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1m58.865983218s ago: executing program 2 (id=229): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x44000, 0x0) 1m58.817761482s ago: executing program 2 (id=230): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file6\x00', 0x1000000, &(0x7f0000000380)={[{@jqfmt_vfsv1}, {@inlinecrypt}, {@noquota}, {@grpid}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c450) socket(0x10, 0x3, 0x4) setresuid(0x0, 0xee00, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x40e8662e, 0x0) 1m58.482969191s ago: executing program 2 (id=234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m58.354226622s ago: executing program 33 (id=234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m26.788770743s ago: executing program 4 (id=737): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setstatus(r0, 0x4, 0x6c00) write$UHID_INPUT(r0, &(0x7f00000011c0)={0x8, {"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", 0x1000}}, 0x1006) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 1m25.903731001s ago: executing program 4 (id=753): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x800, 0x11, 0x407f}, &(0x7f0000000500)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x8) 1m25.539008643s ago: executing program 4 (id=760): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r3, &(0x7f0000000340), 0x0}, 0x20) 1m24.98987002s ago: executing program 4 (id=770): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) setxattr$incfs_size(0x0, 0x0, 0x0, 0x0, 0x1) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 1m24.873268221s ago: executing program 4 (id=771): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x800, 0x11, 0x407f}, &(0x7f0000000500)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x8) 1m24.76966155s ago: executing program 4 (id=772): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@bh}, {@minixdf}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x563, &(0x7f0000000a00)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunIyla+uPCV5sl6LDgd7P0J6V0XQZTTrWOnC7cDfeyBBEHIj3eu+VDP8B/4qBDoaMohfeVE560nZL02Rd1nTm84GzvW/OSd7z5Jzn7fvmnJAABtZo9k8h4uWI+CqJOBwRSb5uOPKVo6vbLT+6MZUtSaysfPxn0tguqzdfq/m8g3nlpYj49YuIk4XWdmuLS7PlSiWdz+tj9bmrY7XFpVOX58oz6Ux6ZWJy8sxbkxPvvvN2z2J948Lf33507/0zXx5f/uanB0fuJHE2DuXrNsbxDG5urIzGaP6eFOPsExuOr/7XizZ3haTfO8C2DOV5XoysDzgcQ3nWA/99n0fECjCgkg75vyfvKXZqf4Cd0hwHNOf2PZoHvzAenludALXGP7z62Ujsa8yNDiwnj82MsvnuSA/az9r4+Y+7d7Ilevc5BEBHN29FxOnh4db+L8n7v+073cU2T7ah/4Odc+/c6qimNf8La+Of2GT8c3CT3N2OzvlfeNCDZtrKxn/vtYk/NzKU1/7XGPMVk0uXK2nWt/0/Ik5EcW9WH9+ijTPL91fards4/suWrP3mWDDfjwfDex9/znS5Xn6WmDd6eCvilU3Hv8na8U82Of7Z+3GhyzaOpXdfa7euc/zP18oPEa9vevzXr2glW1+fHGucD2PNs6LVX7eP/dau/X7Hnx3/A1vHP5JsvF5be/o2vt/3T9pu3WPxR/fn/57kk0a5+enU9XK9Pj8esSf5sPXxifXnNuvN7bP4Txzfuv9bP/9/WXud/RHxaZfx3z7646v7uom/T8d/+qmO/9MX7n/w2Xft2u+u/3uzUTqRP9JN/9dhv4qx7bMZAAAAAAAAdq9CRByKpFBaKxcKpdLq/R1H40ChUq3VT16qLlyZjsZ3ZUeiWGhe6T684X6I8fx+2GZ94on6ZEQciYivh/Y36qWpamW638EDAAAAAAAAAAAAAAAAAADALnGwzff/M78P9XvvgOfOT37D4OqY/734pSdgV/L3HwaX/IfBJf9hcMl/GFzyHwaX/IfBJf9hcMl/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KkL589ny8ryoxtTWX362uLCbPXaqem0NluaW5gqTVXnr5ZmqtWZSlqaqs51er1KtXp1fCIWro/V01p9rLa4dHGuunClfvHyXHkmvZgWdyQqAAAAAAAAAAAAAAAAAAAAeLHUFpdmy5VKOq+gsK3C8O7YDYUeF/rdMwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAun8DAAD//0DeL9I=") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) fallocate(r1, 0x8, 0x4000, 0x4000) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000440)={0x0, 0xfffffffffffffff9, 0x4, 0xfff}) 1m24.728333474s ago: executing program 34 (id=772): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@bh}, {@minixdf}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x563, &(0x7f0000000a00)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunIyla+uPCV5sl6LDgd7P0J6V0XQZTTrWOnC7cDfeyBBEHIj3eu+VDP8B/4qBDoaMohfeVE560nZL02Rd1nTm84GzvW/OSd7z5Jzn7fvmnJAABtZo9k8h4uWI+CqJOBwRSb5uOPKVo6vbLT+6MZUtSaysfPxn0tguqzdfq/m8g3nlpYj49YuIk4XWdmuLS7PlSiWdz+tj9bmrY7XFpVOX58oz6Ux6ZWJy8sxbkxPvvvN2z2J948Lf33507/0zXx5f/uanB0fuJHE2DuXrNsbxDG5urIzGaP6eFOPsExuOr/7XizZ3haTfO8C2DOV5XoysDzgcQ3nWA/99n0fECjCgkg75vyfvKXZqf4Cd0hwHNOf2PZoHvzAenludALXGP7z62Ujsa8yNDiwnj82MsvnuSA/az9r4+Y+7d7Ilevc5BEBHN29FxOnh4db+L8n7v+073cU2T7ah/4Odc+/c6qimNf8La+Of2GT8c3CT3N2OzvlfeNCDZtrKxn/vtYk/NzKU1/7XGPMVk0uXK2nWt/0/Ik5EcW9WH9+ijTPL91fards4/suWrP3mWDDfjwfDex9/znS5Xn6WmDd6eCvilU3Hv8na8U82Of7Z+3GhyzaOpXdfa7euc/zP18oPEa9vevzXr2glW1+fHGucD2PNs6LVX7eP/dau/X7Hnx3/A1vHP5JsvF5be/o2vt/3T9pu3WPxR/fn/57kk0a5+enU9XK9Pj8esSf5sPXxifXnNuvN7bP4Txzfuv9bP/9/WXud/RHxaZfx3z7646v7uom/T8d/+qmO/9MX7n/w2Xft2u+u/3uzUTqRP9JN/9dhv4qx7bMZAAAAAAAAdq9CRByKpFBaKxcKpdLq/R1H40ChUq3VT16qLlyZjsZ3ZUeiWGhe6T684X6I8fx+2GZ94on6ZEQciYivh/Y36qWpamW638EDAAAAAAAAAAAAAAAAAADALnGwzff/M78P9XvvgOfOT37D4OqY/734pSdgV/L3HwaX/IfBJf9hcMl/GFzyHwaX/IfBJf9hcMl/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KkL589ny8ryoxtTWX362uLCbPXaqem0NluaW5gqTVXnr5ZmqtWZSlqaqs51er1KtXp1fCIWro/V01p9rLa4dHGuunClfvHyXHkmvZgWdyQqAAAAAAAAAAAAAAAAAAAAeLHUFpdmy5VKOq+gsK3C8O7YDYUeF/rdMwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAun8DAAD//0DeL9I=") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) fallocate(r1, 0x8, 0x4000, 0x4000) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000440)={0x0, 0xfffffffffffffff9, 0x4, 0xfff}) 1m16.317395582s ago: executing program 7 (id=901): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="448b7cff000000000000108a88a8", 0xe}], 0x1) 1m16.048065876s ago: executing program 7 (id=904): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000140)=""/120, 0x78}], 0x2, 0x5, 0x2) 1m15.888553089s ago: executing program 7 (id=907): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x101141, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r0, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 1m15.821143205s ago: executing program 7 (id=909): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 1m15.760188651s ago: executing program 7 (id=910): unshare(0x22020400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x42800) sendfile(r1, r0, 0x0, 0x578410e9) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1m15.478501856s ago: executing program 7 (id=915): r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) getpid() syz_clone3(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r2, r2) shmctl$SHM_UNLOCK(r0, 0xc) 1m15.436863139s ago: executing program 35 (id=915): r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) getpid() syz_clone3(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r2, r2) shmctl$SHM_UNLOCK(r0, 0xc) 1m15.032836615s ago: executing program 5 (id=924): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback=r0, 0x1d, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setresuid(0x0, 0xee01, 0xffffffffffffffff) mmap(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x3000000, 0x32, 0xffffffffffffffff, 0x1a326000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m14.97484402s ago: executing program 5 (id=925): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)={0x10, 0x2d, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0x24000040}, 0x0) 1m14.920570515s ago: executing program 5 (id=926): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x1001) 1m14.838723032s ago: executing program 5 (id=927): prlimit64(0x0, 0x8, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xd9, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x394, &(0x7f0000000700)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x14c) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x44c00, 0xe898d2275f586997) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 1m14.093808467s ago: executing program 5 (id=935): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000100)={[{@nobh}, {@quota}, {@grpjquota}, {@noquota}]}, 0x26, 0x769, &(0x7f0000000b00)="$eJzs3M9rHGUfAPDvTLNNf+R9Ny+88L56EKGFFko3SXNpT00v3gqFgtcakkkImWRDdlO7sWDrWajNRUEQ9ezRq1DqH+BNCgp6FkRrPIiXldn80MRsum2SjqSfD0zmeZ758f1+N8OTHchMAC+sV4sfScRARFyLiOr6eBoRRzutYxF31vZbfXx7oliSaLev/5QUh8Vqu7p5rmR9fTI6h8T/I+JhJeLcO3+P22gtz47neba43h9qzi0MNVrL52fmxqez6Wx+ZPTS8MXR0YvDo0+s4X891nr69UvH73/12srK1583773Sdz6JsU7dsV5bj6d5KmufSSXGto3PH0SwEiVlJwAAQE+K7/lHIqKv8y21Gkc6LQAAAOAwafe3AQAAgEMvibIzAAAAAA7Wxv8BbDzbe1DPwXbz45WIGNwpfl/nGeKIY1GJiBOryZYnE5K1w2BP7tyNiAdj26+/T4sr7M4ezz28rb/1Gemjezw7++FBMf+M7TT/pJvzT+ww//RtvDthj/46/x3vEv9Il/nvWo8xvvjopUrX+HcjXu7bqf5kM37SJf4bPca/t/Lu/W7b2p9EnNnx70+yJdYu74cYm5rJd339wMPfzz7arf4T3eInu9e/0GP9b63+MtttLininz21+/W3U/zimnhvPY80Iu6vr4v+yrYYp+a++XK3+icj2s/y+/+4x/q/+6z/Vo+7AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQEcaEQORpLXNdprWahEnI+K/cSLN643muan60vxksS1iMCrp1EyeDUdEda2fFP2RTvvP/oVt/dGI+M+3x9eCzuRZbaKeT5ZdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJtORsRAJGktItKI+LWaprVaRF8Px/Y/h/wAAACAfTJYdgIAAADAgXP/DwAAAIffs97/J/ucBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXbt6tVjaq49vTxT9yZutpdn6zfOTWWO2Nrc0UZuoLy7Upuv16TyrTdTnnnS+vF5fGLkUS7eGmlmjOdRoLd+Yqy/NN2/MzI1PZzeyynOpCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKc10FmStBYRaaedprVaxL8iYjAqydRMng1HxL8j4lG10l/0R8pOGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH3XaC3Pjud5tri10R/bRzSufB/xD0hDYx8aG5d/aWm8HRFlfwi7N8qdlwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKEejtTw7nufZYqPsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAChX+kMSEcVypnp6YPvWo8lv1c46It788Pr7t8abzcWRYvznzfHmB+vjF8rIHwAAAF4Il59m54379I37eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF41Wsuz43meLe6tcTlay+2kyz5l1wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADybPwIAAP//1/rBhQ==") chdir(&(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)='\x00', 0x1}]) 1m13.583613062s ago: executing program 5 (id=939): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x63ba000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x3, 0x337}) 1m13.511441688s ago: executing program 36 (id=939): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x63ba000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x3, 0x337}) 1m6.363075286s ago: executing program 9 (id=1037): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000280), &(0x7f0000000000)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@random="25c3704acacc", @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @local, {[], {{0x0, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x0, 0x10, 0x2}}}}}}}, 0x0) 1m6.08364173s ago: executing program 9 (id=1041): fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 1m6.032134835s ago: executing program 9 (id=1043): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$9p(r0, &(0x7f0000000100)="d5c0e9", 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 1m5.952001922s ago: executing program 9 (id=1048): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x8}]}}]}, 0x4c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) 1m5.887106147s ago: executing program 9 (id=1050): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m5.823461753s ago: executing program 9 (id=1053): r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(0x0, 0x0, &(0x7f00000000c0)='\xc8\x10\xdf\x86:.{#\xef\xff\xda\xbcr\x03\x00\x00\x00\x00', r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x8000000000000000, &(0x7f00000000c0)={0xe, 0x5fff, 0x3}) 50.438851893s ago: executing program 37 (id=1053): r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(0x0, 0x0, &(0x7f00000000c0)='\xc8\x10\xdf\x86:.{#\xef\xff\xda\xbcr\x03\x00\x00\x00\x00', r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x8000000000000000, &(0x7f00000000c0)={0xe, 0x5fff, 0x3}) 3.08061262s ago: executing program 0 (id=1823): r0 = socket(0x1d, 0x2, 0x6) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x4, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}, 0x1}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) bind$can_j1939(r0, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000004480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48c4}}], 0x1, 0x1d3) 3.029548554s ago: executing program 0 (id=1835): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004b80)={0x0}, 0x1, 0x0, 0x0, 0x4040df5}, 0x4040084) 2.805330804s ago: executing program 1 (id=1827): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@loopback, 0x4d5, 0x6c}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}]}]}, 0x1ac}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000cc0)=@newsa={0x138, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@remote, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffc, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x3}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) 2.805053454s ago: executing program 1 (id=1828): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000140)="40024193d18113b61f80858b31e7a81a015bd22a92ae499318e13855be8aafa30e46fbd1f5caabf496c0914c42b86d4747143e29cf011c3092566b783af5bcdcea090c5599d251b6509528c37c27f72d5a5dd3756f015b8c787fdb5f91", 0x5d}, {&(0x7f00000007c0)="7967fc", 0x3}, {&(0x7f0000000540)="e796825829f8a1d6c3293c79395ae15b8a95e2716fec5a83165fb3fc921096068b8528a92e2935f27a179090bbcc699334df808b6b7aae724a2bb4c359efacc84eaca60ac56b540d", 0x48}, {&(0x7f00000005c0)="238beccb6a", 0x5}, {&(0x7f00000008c0)="7a7c7e298e4bdf50", 0x8}, {&(0x7f00000009c0)="7e1765", 0x3}, {&(0x7f0000000a00)="78553180", 0x4}], 0x7, &(0x7f0000006200)}}, {{&(0x7f0000001000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc31f79cd38a279d05", 0x9}, {&(0x7f0000001080)="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", 0xd3f}, {&(0x7f0000002180)="2dd1", 0x2}, {&(0x7f0000002240)="52e8da01534b68eb517df185ded372b2df74fb80d9310eacd6ce72c95d0b9037c6572b7da359effd164297fce36fa377e7", 0x31}, {0x0}, {&(0x7f00000033c0)="c6a19f723c5b8c82ea8bf6f4c4e509930580", 0xffffff2c}, {&(0x7f00000034c0)="5bc6c2", 0x3}, {&(0x7f0000002080)="64824011397588d999f31dfd6821b03502aa677c", 0x14}, {&(0x7f0000003580)="949709d742", 0x5}], 0x9, &(0x7f0000003680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x58}}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000037c0)="f9e2dcf64a03da0a77e48a7ba72668c93696f1b19d12dc43e8b2b9149c41de374b02f9a530c477d7c54fa05a1149e6ab73ed257a44f9a21bf3949d037ddcb1224b25dd186f9e3ad6cb21c30b63d9ea16a82714", 0x53}, {&(0x7f0000003880)="3d8f2f300b6687174697", 0xa}, {&(0x7f0000003900)="cd52c0793e0c", 0x6}], 0x3}}], 0x3, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 2.676303245s ago: executing program 1 (id=1832): socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0xfc}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0)=0x8, 0x4) 2.559414426s ago: executing program 3 (id=1834): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x820b, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 2.558804936s ago: executing program 0 (id=1836): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x5fc168c9d6b4368d}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x10) 2.39331815s ago: executing program 3 (id=1837): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r2, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 2.28720832s ago: executing program 0 (id=1848): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r2 = syz_open_pts(r0, 0x80) r3 = dup3(r2, r0, 0x80000) read(r0, &(0x7f00000005c0)=""/228, 0xe4) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000200)={0x3, 0x6, 0x8, 0xfffffff7, 0x23, "4bbe21000000911604000000f3ab00", 0x1, 0x8}) 1.991641686s ago: executing program 1 (id=1842): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1.862963417s ago: executing program 6 (id=1846): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x7fffffff) 1.457823722s ago: executing program 8 (id=1850): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) iopl(0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 1.457105353s ago: executing program 3 (id=1851): socket(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000400)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000000), &(0x7f0000000500)=""/216}, 0x20) 1.399489567s ago: executing program 8 (id=1852): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.399162997s ago: executing program 0 (id=1853): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4204, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x106a, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc, 0x9, 0x0, 0x1, 0x2000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x80ffffff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.360150741s ago: executing program 3 (id=1854): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0xba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffffb, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in6=@loopback, 0x4, 0x32}, 0x0, @in=@multicast1, 0x1, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.14014017s ago: executing program 3 (id=1855): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x60000600) sync() r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x200000000000000) 1.13998939s ago: executing program 8 (id=1856): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000002380)=""/4107, 0x0) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x6, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c00000009060108fffffc0000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1.13793005s ago: executing program 1 (id=1865): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1.061002707s ago: executing program 8 (id=1857): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) recvfrom(r0, 0x0, 0x300, 0x40000103, 0x0, 0x0) shutdown(r0, 0x0) 945.393207ms ago: executing program 6 (id=1858): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000000c0), &(0x7f00000002c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r2}, &(0x7f00000014c0), &(0x7f0000001500)=r1}, 0x20) 944.869837ms ago: executing program 6 (id=1869): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0x2000e7b6, 0x13500}, &(0x7f0000000280), &(0x7f0000001880)) poll(&(0x7f0000000a80)=[{r1, 0x1000}], 0x1, 0x6) 942.167288ms ago: executing program 8 (id=1870): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x40c2, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x14, 0x74099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x8, 0x1}, 0x2002, 0x8a6, 0x7, 0x7, 0xb, 0x2, 0x2, 0x0, 0x6, 0x0, 0x2009}, 0x0, 0x8, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mincore(&(0x7f0000322000/0xc00000)=nil, 0xc00000, &(0x7f0000000ec0)=""/4096) truncate(&(0x7f0000000900)='./file1\x00', 0x9) 289.829365ms ago: executing program 1 (id=1859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4000, 0x0, @mcast2}}, {{0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 289.533965ms ago: executing program 6 (id=1860): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x7}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='cpu\t>0&&\t') socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000020000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 289.392395ms ago: executing program 3 (id=1861): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9}}, 0x0}, 0x94) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000880)={[], 0xf000}, 0x0) 289.206105ms ago: executing program 8 (id=1862): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r2, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 287.246665ms ago: executing program 0 (id=1872): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_ethernet(0x68, &(0x7f0000000080)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x6, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x7f]}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x2, {0x0, 0xfffd}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20030, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 175.934225ms ago: executing program 6 (id=1863): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001"], 0xc0}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002800128009000100766574680000000018000280140001000000", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 0s ago: executing program 6 (id=1864): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): le_mm_fault+0xb40/0x3020 [ 73.350299][ T5667] ? vma_start_read+0x1c7/0x2c0 [ 73.350323][ T5667] do_user_addr_fault+0x62f/0x1050 [ 73.350360][ T5667] ? arch_exit_work+0x30/0x40 [ 73.350380][ T5667] ? irqentry_exit+0x3c/0x520 [ 73.350403][ T5667] ? trace_page_fault_user+0x1f/0xe0 [ 73.350509][ T5667] exc_page_fault+0x62/0xa0 [ 73.350537][ T5667] asm_exc_page_fault+0x26/0x30 [ 73.350554][ T5667] RIP: 0033:0x7f6c8d76cbb9 [ 73.350568][ T5667] Code: f0 0f 83 c0 00 00 00 48 89 75 00 49 89 4c 24 f8 48 8b 4d 08 48 8b 55 00 eb 91 0f 1f 80 00 00 00 00 4c 89 ea 4c 89 e6 48 89 df 02 ff ff ff 48 89 d8 48 29 e8 48 3d 80 00 00 00 0f 8e 7d 00 00 [ 73.350582][ T5667] RSP: 002b:00007ffc18090220 EFLAGS: 00010212 [ 73.350597][ T5667] RAX: 00007f6c8d14ecf8 RBX: 00007f6c8d14ed00 RCX: ffffffff859bf6ef [ 73.350628][ T5667] RDX: 0000000000000023 RSI: 00007f6c8d2fd000 RDI: 00007f6c8d14ed00 [ 73.350640][ T5667] RBP: 00007f6c8cefd008 R08: 00007f6c8db00000 R09: 00007f6c8db16128 [ 73.350653][ T5667] R10: 0000000000000007 R11: 0000000000000006 R12: 00007f6c8d2fd000 [ 73.350665][ T5667] R13: 0000000000000023 R14: 000000000007ffff R15: 0000000000000007 [ 73.350680][ T5667] ? xas_store+0x84f/0xce0 [ 73.350708][ T5667] [ 73.350715][ T5667] memory: usage 268960kB, limit 307200kB, failcnt 252 [ 73.627737][ T5667] memory+swap: usage 285648kB, limit 9007199254740988kB, failcnt 0 [ 73.648427][ T5667] kmem: usage 281644kB, limit 9007199254740988kB, failcnt 0 [ 73.691448][ T5667] Memory cgroup stats for /syz5: [ 73.691746][ T5667] cache 0 [ 73.739970][ T5667] rss 0 [ 73.751585][ T5667] shmem 0 [ 73.754527][ T5667] mapped_file 0 [ 73.758066][ T5667] dirty 0 [ 73.789256][ T5667] writeback 0 [ 73.792551][ T5667] workingset_refault_anon 104 [ 73.797238][ T5667] workingset_refault_file 128 [ 73.849208][ T5667] swap 471040 [ 73.852514][ T5667] swapcached 483328 [ 73.856309][ T5667] pgpgin 35020 [ 73.880160][ T5667] pgpgout 35020 [ 73.887988][ T5667] pgfault 25214 [ 73.895228][ T5667] pgmajfault 47 [ 73.902011][ T5667] inactive_anon 0 [ 73.909673][ T5667] active_anon 0 [ 73.917520][ T5667] inactive_file 0 [ 73.924927][ T5667] active_file 0 [ 73.931757][ T5667] unevictable 0 [ 73.938562][ T5667] hierarchical_memory_limit 314572800 [ 73.955638][ T5667] hierarchical_memsw_limit 9223372036854771712 [ 73.969197][ T5667] total_cache 0 [ 73.972652][ T5667] total_rss 0 [ 73.986049][ T5667] total_shmem 0 [ 73.990677][ T5667] total_mapped_file 0 [ 73.994700][ T5667] total_dirty 0 [ 74.008372][ T5667] total_writeback 0 [ 74.029202][ T5667] total_workingset_refault_anon 104 [ 74.034435][ T5667] total_workingset_refault_file 128 [ 74.089232][ T5667] total_swap 471040 [ 74.093084][ T5667] total_swapcached 483328 [ 74.097408][ T5667] total_pgpgin 35020 [ 74.112394][ T5667] total_pgpgout 35020 [ 74.116388][ T5667] total_pgfault 25214 [ 74.139225][ T5667] total_pgmajfault 47 [ 74.149399][ T5667] total_inactive_anon 0 [ 74.163170][ T5667] total_active_anon 0 [ 74.167244][ T5667] total_inactive_file 0 [ 74.177860][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.208042][ T5667] total_active_file 0 [ 74.212681][ T5667] total_unevictable 0 [ 74.217194][ T5667] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.724,pid=5667,uid=0 [ 74.273065][ T5667] Memory cgroup out of memory: Killed process 5667 (syz.5.724) total-vm:96208kB, anon-rss:1224kB, file-rss:22236kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 74.351230][ T5704] loop4: detected capacity change from 0 to 512 [ 74.384445][ T5704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.415283][ T5704] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.433273][ T28] audit: type=1400 audit(1771843662.759:392): avc: denied { override_creds } for pid=5698 comm="syz.5.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 74.494771][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.753906][ T28] audit: type=1400 audit(1771843663.079:393): avc: denied { read write } for pid=5732 comm="syz.6.745" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 74.794525][ T28] audit: type=1400 audit(1771843663.079:394): avc: denied { open } for pid=5732 comm="syz.6.745" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 74.846299][ T28] audit: type=1400 audit(1771843663.169:395): avc: denied { read } for pid=5736 comm="syz.6.747" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 74.869986][ T28] audit: type=1400 audit(1771843663.169:396): avc: denied { open } for pid=5736 comm="syz.6.747" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 75.466301][ T28] audit: type=1400 audit(1771843663.789:397): avc: denied { write } for pid=5749 comm="syz.1.752" name="vlan0" dev="proc" ino=4026533273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 75.489508][ T5750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'. [ 75.562595][ T5759] loop1: detected capacity change from 0 to 256 [ 75.665070][ T28] audit: type=1400 audit(1771843663.989:398): avc: denied { relabelfrom } for pid=5763 comm="syz.1.756" name="" dev="pipefs" ino=19951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 75.716751][ T5766] loop6: detected capacity change from 0 to 2048 [ 75.744288][ T5766] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.758551][ T5768] gretap1: entered promiscuous mode [ 75.781976][ T5773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.759'. [ 75.794389][ T5773] netlink: 'syz.3.759': attribute type 5 has an invalid length. [ 75.837608][ T5773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.759'. [ 75.849720][ T4228] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.882030][ T5773] geneve3: entered promiscuous mode [ 75.887288][ T5773] geneve3: entered allmulticast mode [ 75.896900][ T3854] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 52698 - 0 [ 75.917913][ T3854] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 52698 - 0 [ 75.950427][ T3854] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 52698 - 0 [ 75.964345][ T3854] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 52698 - 0 [ 75.984194][ T28] audit: type=1400 audit(1771843664.309:399): avc: denied { setopt } for pid=5782 comm="syz.3.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.043667][ T28] audit: type=1400 audit(1771843664.329:400): avc: denied { connect } for pid=5782 comm="syz.3.764" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.393824][ T28] audit: type=1400 audit(1771843664.719:401): avc: denied { mounton } for pid=5797 comm="syz.4.770" path="/144/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 76.690289][ T5803] loop1: detected capacity change from 0 to 128 [ 77.052211][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 77.088548][ T5829] netlink: 12 bytes leftover after parsing attributes in process `syz.6.782'. [ 77.123374][ T5829] netlink: 4 bytes leftover after parsing attributes in process `syz.6.782'. [ 77.173752][ T5829] netlink: 12 bytes leftover after parsing attributes in process `syz.6.782'. [ 77.198443][ T3865] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.222546][ T5829] netlink: 4 bytes leftover after parsing attributes in process `syz.6.782'. [ 77.244232][ T3865] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.278583][ T3865] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.331059][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.355487][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.379357][ T5804] bridge_slave_0: entered allmulticast mode [ 77.400484][ T5804] bridge_slave_0: entered promiscuous mode [ 77.422160][ T3865] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.438512][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.456912][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.473014][ T5804] bridge_slave_1: entered allmulticast mode [ 77.487232][ T5804] bridge_slave_1: entered promiscuous mode [ 77.502624][ T5849] ipip0: entered promiscuous mode [ 77.538034][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.564061][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.617427][ T5804] team0: Port device team_slave_0 added [ 77.634078][ T5804] team0: Port device team_slave_1 added [ 77.669380][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.676357][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.729235][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.749956][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.756911][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.823613][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.888480][ T5804] hsr_slave_0: entered promiscuous mode [ 77.894779][ T5860] loop6: detected capacity change from 0 to 512 [ 77.908604][ T5804] hsr_slave_1: entered promiscuous mode [ 77.916727][ T5860] EXT4-fs: Ignoring removed i_version option [ 77.926436][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 77.934390][ T5860] EXT4-fs: Ignoring removed bh option [ 77.945224][ T5804] Cannot create hsr debugfs directory [ 77.962086][ T5860] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.995096][ T5860] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.224025][ T5804] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 78.234020][ T4228] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.245097][ T5804] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 78.254492][ T5804] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 78.271539][ T5804] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 78.299201][ T5143] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 78.317045][ T5143] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 78.429028][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.473669][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.491815][ T3854] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.498893][ T3854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.547331][ T3854] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.554468][ T3854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.691935][ T5906] loop3: detected capacity change from 0 to 512 [ 78.714406][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.739914][ T5906] EXT4-fs: Ignoring removed i_version option [ 78.754674][ T5906] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 78.780052][ T5906] EXT4-fs (loop3): 1 truncate cleaned up [ 78.794045][ T5906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.835796][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.956494][ T5804] veth0_vlan: entered promiscuous mode [ 78.973967][ T5804] veth1_vlan: entered promiscuous mode [ 79.007757][ T5804] veth0_macvtap: entered promiscuous mode [ 79.019725][ T5804] veth1_macvtap: entered promiscuous mode [ 79.032996][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.047630][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.059515][ T3854] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.068255][ T3854] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.094068][ T3854] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.102966][ T3854] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.158361][ T5942] gretap1: entered promiscuous mode [ 79.212760][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.6.819'. [ 79.226741][ T5949] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.818'. [ 79.236300][ T5950] netlink: 'syz.6.819': attribute type 5 has an invalid length. [ 79.244321][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.6.819'. [ 79.256494][ T5950] geneve2: entered promiscuous mode [ 79.261757][ T5950] geneve2: entered allmulticast mode [ 79.267631][ T3854] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 53844 - 0 [ 79.287348][ T3854] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 53844 - 0 [ 79.325273][ T3854] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 53844 - 0 [ 79.334711][ T3854] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 53844 - 0 [ 79.452741][ T5959] syzkaller0: entered promiscuous mode [ 79.465940][ T5959] syzkaller0: entered allmulticast mode [ 79.535687][ T5966] loop6: detected capacity change from 0 to 512 [ 79.585900][ T5966] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.629538][ T5966] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.647682][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 79.647695][ T28] audit: type=1400 audit(1771843667.969:416): avc: denied { create } for pid=5971 comm="syz.3.828" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.747674][ T28] audit: type=1400 audit(1771843668.009:417): avc: denied { write } for pid=5971 comm="syz.3.828" name="file0" dev="tmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.781359][ T4228] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.824852][ T28] audit: type=1400 audit(1771843668.009:418): avc: denied { open } for pid=5971 comm="syz.3.828" path="/184/file0" dev="tmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.881217][ T28] audit: type=1400 audit(1771843668.009:419): avc: denied { ioctl } for pid=5971 comm="syz.3.828" path="/184/file0" dev="tmpfs" ino=971 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.933009][ T28] audit: type=1400 audit(1771843668.019:420): avc: denied { unlink } for pid=3315 comm="syz-executor" name="file0" dev="tmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.996252][ T28] audit: type=1400 audit(1771843668.049:421): avc: denied { setattr } for pid=5965 comm="syz.6.826" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.028271][ T5994] ipip0: entered promiscuous mode [ 80.073262][ T28] audit: type=1400 audit(1771843668.399:422): avc: denied { ioctl } for pid=5996 comm="syz.1.838" path="socket:[21760]" dev="sockfs" ino=21760 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.118147][ T28] audit: type=1400 audit(1771843668.429:423): avc: denied { read } for pid=5996 comm="syz.1.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.223901][ T5143] IPVS: starting estimator thread 0... [ 80.329240][ T6009] IPVS: using max 2112 ests per chain, 105600 per kthread [ 80.564856][ T6026] loop3: detected capacity change from 0 to 1024 [ 80.589623][ T6026] EXT4-fs: Ignoring removed nobh option [ 80.605345][ T6026] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.632280][ T6026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.792488][ T6038] loop6: detected capacity change from 0 to 128 [ 80.842377][ T28] audit: type=1400 audit(1771843669.169:424): avc: denied { remount } for pid=6037 comm="syz.6.852" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 81.053267][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.086104][ T6066] netlink: 76 bytes leftover after parsing attributes in process `syz.3.865'. [ 82.146063][ T28] audit: type=1326 audit(1771843670.469:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6060 comm="syz.6.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8dfc629 code=0x7fc00000 [ 83.445575][ T6096] netlink: 'syz.1.875': attribute type 4 has an invalid length. [ 83.469430][ T6096] netlink: 'syz.1.875': attribute type 4 has an invalid length. [ 83.641555][ T6103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.689285][ T6103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.017049][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.882'. [ 84.068890][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.882'. [ 84.694382][ T6143] netlink: 'syz.5.895': attribute type 11 has an invalid length. [ 84.709259][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.5.895'. [ 84.780347][ T3858] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.789310][ T6143] netlink: 'syz.5.895': attribute type 11 has an invalid length. [ 84.807277][ T3858] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.830692][ T3858] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.833280][ T6145] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 84.840641][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.5.895'. [ 84.866228][ T3858] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.152166][ T6157] syzkaller0: entered promiscuous mode [ 85.199250][ T6157] syzkaller0: entered allmulticast mode [ 85.815318][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 85.815404][ T28] audit: type=1400 audit(1771843674.139:431): avc: denied { mounton } for pid=6177 comm="syz.6.913" path="/129/file0" dev="tmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 85.890010][ T3865] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.937577][ T6185] loop5: detected capacity change from 0 to 128 [ 85.966724][ T3865] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.975415][ T6185] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 85.989289][ T6185] FAT-fs (loop5): Filesystem has been set read-only [ 85.995915][ T6185] bio_check_eod: 11920 callbacks suppressed [ 85.995928][ T6185] syz.5.917: attempt to access beyond end of device [ 85.995928][ T6185] loop5: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 86.052369][ T3865] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.063378][ T6185] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 86.072310][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.6.918'. [ 86.082120][ T6185] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 86.114757][ T6185] syz.5.917: attempt to access beyond end of device [ 86.114757][ T6185] loop5: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 86.152051][ T3865] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.307992][ T6188] chnl_net:caif_netlink_parms(): no params data found [ 86.343697][ T3865] bridge_slave_1: left allmulticast mode [ 86.352393][ T3865] bridge_slave_1: left promiscuous mode [ 86.367985][ T3865] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.386318][ T3865] bridge_slave_0: left allmulticast mode [ 86.395065][ T3865] bridge_slave_0: left promiscuous mode [ 86.413914][ T3865] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.544657][ T6233] loop5: detected capacity change from 0 to 256 [ 86.571903][ T3865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.595904][ T3865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.610964][ T3865] bond0 (unregistering): Released all slaves [ 86.640105][ T6233] FAT-fs (loop5): Directory bread(block 64) failed [ 86.657444][ T3865] hsr_slave_0: left promiscuous mode [ 86.657980][ T6233] FAT-fs (loop5): Directory bread(block 65) failed [ 86.669591][ T3865] hsr_slave_1: left promiscuous mode [ 86.675381][ T3865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.686435][ T3865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.708673][ T3865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.718092][ T6233] FAT-fs (loop5): Directory bread(block 66) failed [ 86.719220][ T3865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.749829][ T6233] FAT-fs (loop5): Directory bread(block 67) failed [ 86.766532][ T6233] FAT-fs (loop5): Directory bread(block 68) failed [ 86.785556][ T3865] veth1_macvtap: left promiscuous mode [ 86.791185][ T3865] veth0_macvtap: left promiscuous mode [ 86.791869][ T6233] FAT-fs (loop5): Directory bread(block 69) failed [ 86.804550][ T3865] veth1_vlan: left promiscuous mode [ 86.822234][ T3865] veth0_vlan: left promiscuous mode [ 86.849251][ T6233] FAT-fs (loop5): Directory bread(block 70) failed [ 86.866173][ T6233] FAT-fs (loop5): Directory bread(block 71) failed [ 86.884440][ T6233] FAT-fs (loop5): Directory bread(block 72) failed [ 86.899657][ T6233] FAT-fs (loop5): Directory bread(block 73) failed [ 87.055826][ T6257] loop6: detected capacity change from 0 to 8192 [ 87.074954][ T28] audit: type=1400 audit(1771843675.399:432): avc: denied { mounton } for pid=6256 comm="syz.6.931" path="/133/file2/bus" dev="loop6" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 87.115974][ T3865] team0 (unregistering): Port device team_slave_1 removed [ 87.116471][ T4228] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 87.131142][ T3865] team0 (unregistering): Port device team_slave_0 removed [ 87.152091][ T4228] FAT-fs (loop6): Filesystem has been set read-only [ 87.175664][ T28] audit: type=1400 audit(1771843675.499:433): avc: denied { unmount } for pid=4228 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 87.233047][ T28] audit: type=1400 audit(1771843675.529:434): avc: denied { append } for pid=6232 comm="syz.5.927" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.267544][ T3974] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 87.359416][ T3974] FAT-fs (loop5): Filesystem has been set read-only [ 87.375926][ T6188] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.399245][ T6188] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.406469][ T6188] bridge_slave_0: entered allmulticast mode [ 87.429835][ T6188] bridge_slave_0: entered promiscuous mode [ 87.440088][ T6188] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.447169][ T6188] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.459425][ T6188] bridge_slave_1: entered allmulticast mode [ 87.466317][ T6188] bridge_slave_1: entered promiscuous mode [ 87.511149][ T6188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.530532][ T6188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.590315][ T6188] team0: Port device team_slave_0 added [ 87.597445][ T6188] team0: Port device team_slave_1 added [ 87.611046][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.938'. [ 87.626166][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.938'. [ 87.635972][ T6188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.646643][ T6188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.649344][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.938'. [ 87.672917][ T6188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.694894][ T6188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.699290][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.938'. [ 87.739253][ T6188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.825637][ T6188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.919795][ T224] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.976314][ T224] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.003383][ T6306] netlink: 'syz.1.943': attribute type 2 has an invalid length. [ 88.014210][ T6188] hsr_slave_0: entered promiscuous mode [ 88.022333][ T6188] hsr_slave_1: entered promiscuous mode [ 88.028598][ T6188] debugfs: 'hsr0' already exists in 'hsr' [ 88.034466][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.943'. [ 88.035588][ T6188] Cannot create hsr debugfs directory [ 88.050221][ T28] audit: type=1400 audit(1771843676.369:435): avc: denied { map } for pid=6304 comm="syz.6.944" path="socket:[24611]" dev="sockfs" ino=24611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.059726][ T6306] netlink: 'syz.1.943': attribute type 2 has an invalid length. [ 88.088587][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.943'. [ 88.114169][ T224] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.144674][ T224] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.221568][ T6324] netlink: 20 bytes leftover after parsing attributes in process `syz.6.946'. [ 88.242359][ T224] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.272135][ T224] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.380376][ T224] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.399405][ T224] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.423170][ T6330] loop6: detected capacity change from 0 to 1024 [ 88.535841][ T6330] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 88.550411][ T6330] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.604977][ T6330] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 3: comm syz.6.948: lblock 3 mapped to illegal pblock 3 (length 3) [ 88.620820][ T6330] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 88.634785][ T6330] EXT4-fs (loop6): This should not happen!! Data will be lost [ 88.634785][ T6330] [ 88.639984][ T6188] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 88.672556][ T6188] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 88.690954][ T3845] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 88.713175][ T6188] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 88.727520][ T224] bridge_slave_1: left allmulticast mode [ 88.749284][ T224] bridge_slave_1: left promiscuous mode [ 88.755027][ T224] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.765425][ T3845] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 88.799747][ T224] bridge_slave_0: left allmulticast mode [ 88.805417][ T224] bridge_slave_0: left promiscuous mode [ 88.814559][ T3845] EXT4-fs (loop6): This should not happen!! Data will be lost [ 88.814559][ T3845] [ 88.839586][ T224] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.848027][ T4228] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 88.969262][ T6357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.949'. [ 88.996102][ T28] audit: type=1400 audit(1771843677.319:436): avc: denied { name_bind } for pid=6358 comm="syz.6.951" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 89.033110][ T224] gretap0 (unregistering): left promiscuous mode [ 89.043762][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'. [ 89.115165][ T28] audit: type=1400 audit(1771843677.439:437): avc: denied { ioctl } for pid=6363 comm="syz.3.953" path="socket:[24120]" dev="sockfs" ino=24120 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.140270][ T28] audit: type=1400 audit(1771843677.439:438): avc: denied { bind } for pid=6363 comm="syz.3.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.160764][ T224] bond0 (unregistering): left promiscuous mode [ 89.166938][ T224] bond_slave_0: left promiscuous mode [ 89.172455][ T224] bond_slave_1: left promiscuous mode [ 89.180099][ T224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.190315][ T224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.199790][ T224] bond0 (unregistering): Released all slaves [ 89.206677][ T6188] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 89.238946][ T6301] chnl_net:caif_netlink_parms(): no params data found [ 89.304326][ T224] hsr_slave_0: left promiscuous mode [ 89.311946][ T224] hsr_slave_1: left promiscuous mode [ 89.318760][ T224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.328491][ T224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.365429][ T224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.377224][ T224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.492928][ T224] veth1_macvtap: left promiscuous mode [ 89.498498][ T224] veth0_macvtap: left promiscuous mode [ 89.504245][ T224] veth1_vlan: left promiscuous mode [ 89.510182][ T224] veth0_vlan: left promiscuous mode [ 89.516609][ T6383] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.958'. [ 89.596258][ T224] team0 (unregistering): Port device team_slave_1 removed [ 89.614015][ T224] team0 (unregistering): Port device team_slave_0 removed [ 89.685389][ T6301] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.693328][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.701145][ T6301] bridge_slave_0: entered allmulticast mode [ 89.707752][ T6301] bridge_slave_0: entered promiscuous mode [ 89.723369][ T6301] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.731048][ T6301] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.738179][ T6301] bridge_slave_1: entered allmulticast mode [ 89.744950][ T6301] bridge_slave_1: entered promiscuous mode [ 89.757091][ T6188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.778444][ T6188] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.787237][ T6301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.797838][ T6301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.818802][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.825909][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.837691][ T6301] team0: Port device team_slave_0 added [ 89.845347][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.852445][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.867553][ T6301] team0: Port device team_slave_1 added [ 89.893610][ T6301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.905378][ T6301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.931659][ T6301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.949035][ T6301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.957116][ T6301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.984863][ T6301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.018069][ T6301] hsr_slave_0: entered promiscuous mode [ 90.026866][ T6301] hsr_slave_1: entered promiscuous mode [ 90.154958][ T6188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.190884][ T6301] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 90.206996][ T6301] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 90.229549][ T6301] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 90.254898][ T6301] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 90.401438][ T6301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.437201][ T6301] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.253696][ T3854] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.260812][ T3854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.282101][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.289252][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.298732][ T6188] veth0_vlan: entered promiscuous mode [ 91.329845][ T6188] veth1_vlan: entered promiscuous mode [ 91.365509][ T6188] veth0_macvtap: entered promiscuous mode [ 91.398115][ T6301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.413301][ T6188] veth1_macvtap: entered promiscuous mode [ 91.432430][ T6188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.462784][ T6188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.475614][ T224] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.502378][ T224] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.522945][ T224] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.534406][ T224] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.551286][ T6301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.577893][ T28] audit: type=1400 audit(1771843679.899:439): avc: denied { create } for pid=6500 comm="syz.1.971" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.605209][ T28] audit: type=1400 audit(1771843679.899:440): avc: denied { map } for pid=6500 comm="syz.1.971" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.655835][ T28] audit: type=1400 audit(1771843679.899:441): avc: denied { read write } for pid=6500 comm="syz.1.971" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.747853][ T6301] veth0_vlan: entered promiscuous mode [ 91.753964][ T28] audit: type=1400 audit(1771843680.079:442): avc: denied { setopt } for pid=6525 comm="syz.8.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 91.779477][ T6301] veth1_vlan: entered promiscuous mode [ 91.790743][ T28] audit: type=1400 audit(1771843680.079:443): avc: denied { read } for pid=6525 comm="syz.8.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 91.819080][ T28] audit: type=1400 audit(1771843680.079:444): avc: denied { write } for pid=6525 comm="syz.8.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 91.829723][ T6301] veth0_macvtap: entered promiscuous mode [ 91.849116][ T6301] veth1_macvtap: entered promiscuous mode [ 91.870303][ T6301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.884984][ T6301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.896742][ T3854] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.923273][ T3854] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.932464][ T3854] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.951114][ T3854] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.961465][ T28] audit: type=1400 audit(1771843680.279:445): avc: denied { append } for pid=6534 comm="syz.9.941" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 92.047448][ T6532] syzkaller1: entered promiscuous mode [ 92.053061][ T6532] syzkaller1: entered allmulticast mode [ 92.110803][ T6550] loop9: detected capacity change from 0 to 128 [ 92.209057][ T12] kworker/u8:0: attempt to access beyond end of device [ 92.209057][ T12] loop9: rw=1, sector=129, nr_sectors = 8 limit=128 [ 92.222799][ T12] kworker/u8:0: attempt to access beyond end of device [ 92.222799][ T12] loop9: rw=1, sector=145, nr_sectors = 8 limit=128 [ 92.236233][ T12] kworker/u8:0: attempt to access beyond end of device [ 92.236233][ T12] loop9: rw=1, sector=161, nr_sectors = 8 limit=128 [ 92.255687][ T12] kworker/u8:0: attempt to access beyond end of device [ 92.255687][ T12] loop9: rw=1, sector=177, nr_sectors = 8 limit=128 [ 92.269290][ T12] kworker/u8:0: attempt to access beyond end of device [ 92.269290][ T12] loop9: rw=1, sector=193, nr_sectors = 8 limit=128 [ 92.283159][ T12] kworker/u8:0: attempt to access beyond end of device [ 92.283159][ T12] loop9: rw=1, sector=209, nr_sectors = 8 limit=128 [ 92.297104][ T12] kworker/u8:0: attempt to access beyond end of device [ 92.297104][ T12] loop9: rw=1, sector=225, nr_sectors = 8 limit=128 [ 92.310828][ T12] kworker/u8:0: attempt to access beyond end of device [ 92.310828][ T12] loop9: rw=1, sector=241, nr_sectors = 8 limit=128 [ 92.324408][ T12] kworker/u8:0: attempt to access beyond end of device [ 92.324408][ T12] loop9: rw=1, sector=257, nr_sectors = 8 limit=128 [ 92.337909][ T12] kworker/u8:0: attempt to access beyond end of device [ 92.337909][ T12] loop9: rw=1, sector=273, nr_sectors = 8 limit=128 [ 92.375703][ T6555] netlink: 'syz.9.987': attribute type 1 has an invalid length. [ 92.387812][ T6555] gretap1: entered allmulticast mode [ 92.497507][ T6564] tipc: Started in network mode [ 92.504405][ T6564] tipc: Node identity ac1414aa, cluster identity 4711 [ 92.518483][ T6564] tipc: New replicast peer: 10.1.1.2 [ 92.528582][ T28] audit: type=1400 audit(1771843680.849:446): avc: denied { ioctl } for pid=6565 comm="syz.3.993" path="socket:[25792]" dev="sockfs" ino=25792 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.553614][ T6564] tipc: Enabled bearer , priority 10 [ 93.163061][ T28] audit: type=1400 audit(1771843681.489:447): avc: denied { create } for pid=6614 comm="syz.1.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 93.569408][ T5133] tipc: Node number set to 2886997162 [ 94.050634][ T28] audit: type=1400 audit(1771843682.379:448): avc: denied { read } for pid=6651 comm="syz.1.1029" path="socket:[25933]" dev="sockfs" ino=25933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 94.133109][ T6658] process 'syz.9.1031' launched './file1' with NULL argv: empty string added [ 95.340339][ T6689] netlink: 'syz.6.1044': attribute type 1 has an invalid length. [ 95.373157][ T6689] bond1: (slave ip6gretap1): making interface the new active one [ 95.381617][ T6689] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 95.389469][ T6689] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 95.397984][ T6689] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 96.168610][ T6724] __nla_validate_parse: 1 callbacks suppressed [ 96.168625][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1061'. [ 96.199332][ T6724] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1061'. [ 96.591160][ T6744] netlink: 'syz.6.1070': attribute type 2 has an invalid length. [ 96.598996][ T6744] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1070'. [ 96.630383][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 96.630397][ T28] audit: type=1400 audit(1771843684.959:455): avc: denied { ioctl } for pid=6741 comm="syz.3.1069" path="socket:[26070]" dev="sockfs" ino=26070 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 96.685124][ T6747] capability: warning: `syz.1.1071' uses deprecated v2 capabilities in a way that may be insecure [ 96.700516][ T28] audit: type=1400 audit(1771843684.989:456): avc: denied { write } for pid=6741 comm="syz.3.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 96.958476][ T6761] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 96.958476][ T6761] The task syz.6.1076 (6761) triggered the difference, watch for misbehavior. [ 97.026797][ T6765] vlan0: entered promiscuous mode [ 97.112979][ T6764] vlan0: left promiscuous mode [ 97.429846][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'. [ 97.459396][ T6773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1092'. [ 97.468768][ T6775] loop3: detected capacity change from 0 to 256 [ 97.498585][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.507709][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'. [ 97.525108][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.535398][ T6773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1092'. [ 97.552618][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.572417][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.639895][ T28] audit: type=1400 audit(1771843685.969:457): avc: denied { mount } for pid=6779 comm="syz.1.1085" name="/" dev="autofs" ino=25450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 97.702065][ T6787] hsr_slave_0: entered allmulticast mode [ 97.737238][ T6785] hsr_slave_0: left allmulticast mode [ 97.785769][ T28] audit: type=1400 audit(1771843686.109:458): avc: denied { setopt } for pid=6792 comm="syz.6.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.914329][ T6799] geneve3: entered promiscuous mode [ 97.929208][ T6799] geneve3: entered allmulticast mode [ 97.940006][ T12] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.964368][ T12] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.983029][ T12] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.002475][ T12] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.016696][ T6803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1094'. [ 98.021129][ T6805] loop8: detected capacity change from 0 to 1024 [ 98.051261][ T6805] EXT4-fs: Ignoring removed orlov option [ 98.062304][ T6805] EXT4-fs: Ignoring removed nobh option [ 98.084229][ T6805] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.108193][ T28] audit: type=1400 audit(1771843686.429:459): avc: denied { read write } for pid=6804 comm="syz.8.1096" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.139459][ T28] audit: type=1400 audit(1771843686.459:460): avc: denied { open } for pid=6804 comm="syz.8.1096" path="/15/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.162679][ T28] audit: type=1400 audit(1771843686.489:461): avc: denied { map } for pid=6804 comm="syz.8.1096" path="/15/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.186074][ T28] audit: type=1400 audit(1771843686.489:462): avc: denied { execute } for pid=6804 comm="syz.8.1096" path="/15/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.222554][ T6188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.981212][ T6958] loop8: detected capacity change from 0 to 128 [ 111.039104][ T6188] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fff0000) [ 111.047124][ T6188] FAT-fs (loop8): Filesystem has been set read-only [ 111.065890][ T6967] loop8: detected capacity change from 0 to 512 [ 111.099036][ T28] audit: type=1400 audit(1771843699.419:463): avc: denied { read write } for pid=6968 comm="syz.3.1115" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 111.099673][ T6967] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.137140][ T6967] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.157979][ T28] audit: type=1400 audit(1771843699.419:464): avc: denied { open } for pid=6968 comm="syz.3.1115" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 111.232436][ T28] audit: type=1400 audit(1771843699.559:465): avc: denied { ioctl } for pid=6966 comm="syz.8.1114" path="/22/file0/file1" dev="loop8" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 111.271850][ T6188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.350554][ T3854] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.368178][ T6988] loop6: detected capacity change from 0 to 512 [ 111.397647][ T6988] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.438017][ T6988] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 111.448105][ T6988] System zones: 1-2, 4-12, 8-8 [ 111.455414][ T3854] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.465992][ T6988] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.1119: iget: bad i_size value: 38620345925642 [ 111.482658][ T6988] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.482935][ T6988] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1119: couldn't read orphan inode 15 (err -117) [ 111.492090][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 111.492109][ C0] EXT4-fs (loop6): initial error at time 1771843699: ext4_orphan_get:1391: inode 15 [ 111.492132][ C0] EXT4-fs (loop6): last error at time 1771843699: ext4_orphan_get:1391: inode 15 [ 111.529931][ T6988] loop6: lost filesystem error report for type 5 error -117 [ 111.537367][ T6988] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.576721][ T3854] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.637653][ T7002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.646993][ T6960] chnl_net:caif_netlink_parms(): no params data found [ 111.663191][ T3854] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.668857][ T7002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.715097][ T6960] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.722448][ T6960] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.729807][ T6960] bridge_slave_0: entered allmulticast mode [ 111.736490][ T6960] bridge_slave_0: entered promiscuous mode [ 111.743638][ T6960] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.750804][ T6960] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.758190][ T6960] bridge_slave_1: entered allmulticast mode [ 111.764830][ T6960] bridge_slave_1: entered promiscuous mode [ 111.786979][ T6960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.803467][ T6960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.838596][ T6960] team0: Port device team_slave_0 added [ 111.860135][ T6960] team0: Port device team_slave_1 added [ 111.900388][ T3854] bridge_slave_1: left allmulticast mode [ 111.906357][ T3854] bridge_slave_1: left promiscuous mode [ 111.912541][ T3854] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.920551][ T3854] bridge_slave_0: left allmulticast mode [ 111.926334][ T3854] bridge_slave_0: left promiscuous mode [ 111.933324][ T3854] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.032095][ T3854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.043028][ T3854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.054512][ T3854] bond0 (unregistering): Released all slaves [ 112.062381][ T6960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.069501][ T6960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.095925][ T6960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.101413][ T12] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:0: bg 0: block 5: invalid block bitmap [ 112.119561][ T12] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 112.132079][ T12] EXT4-fs (loop6): This should not happen!! Data will be lost [ 112.132079][ T12] [ 112.141830][ T12] EXT4-fs (loop6): Total free blocks count 0 [ 112.147894][ T12] EXT4-fs (loop6): Free/Dirty block details [ 112.156413][ T3854] hsr_slave_0: left promiscuous mode [ 112.159186][ T12] EXT4-fs (loop6): free_blocks=0 [ 112.166847][ T12] EXT4-fs (loop6): dirty_blocks=16004 [ 112.166893][ T3854] hsr_slave_1: left promiscuous mode [ 112.172251][ T12] EXT4-fs (loop6): Block reservation details [ 112.172263][ T12] EXT4-fs (loop6): i_reserved_data_blocks=16004 [ 112.221012][ T28] audit: type=1400 audit(1771843700.529:466): avc: denied { open } for pid=7008 comm="syz.8.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 112.244563][ T3854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.252024][ T3854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.259832][ T28] audit: type=1400 audit(1771843700.529:467): avc: denied { kernel } for pid=7008 comm="syz.8.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 112.279933][ T3854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.287384][ T3854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.295509][ T7014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1123'. [ 112.305647][ T3854] veth1_macvtap: left promiscuous mode [ 112.311413][ T3854] veth0_macvtap: left promiscuous mode [ 112.317098][ T3854] veth1_vlan: left promiscuous mode [ 112.329237][ T3854] veth0_vlan: left promiscuous mode [ 112.417878][ T3854] team0 (unregistering): Port device team_slave_1 removed [ 112.430302][ T3854] team0 (unregistering): Port device team_slave_0 removed [ 112.477223][ T6960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.485258][ T6960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.512047][ T6960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.572904][ T28] audit: type=1400 audit(1771843700.899:468): avc: denied { write } for pid=7018 comm="syz.3.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 112.617339][ T7022] loop8: detected capacity change from 0 to 2048 [ 112.629657][ T6960] hsr_slave_0: entered promiscuous mode [ 112.644613][ T7022] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.669783][ T6960] hsr_slave_1: entered promiscuous mode [ 112.811045][ T30] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 112.845075][ T3845] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 112.904154][ T3845] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 296 with error 28 [ 112.959437][ T3845] EXT4-fs (loop8): This should not happen!! Data will be lost [ 112.959437][ T3845] [ 112.970505][ T3845] EXT4-fs (loop8): Total free blocks count 0 [ 112.980427][ T3845] EXT4-fs (loop8): Free/Dirty block details [ 112.989483][ T3845] EXT4-fs (loop8): free_blocks=2415919504 [ 112.995208][ T3845] EXT4-fs (loop8): dirty_blocks=304 [ 113.013638][ T3845] EXT4-fs (loop8): Block reservation details [ 113.023781][ T3845] EXT4-fs (loop8): i_reserved_data_blocks=19 [ 113.033498][ T6188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.159503][ T7062] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1134'. [ 113.247597][ T6960] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.274583][ T6960] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.284806][ T6960] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.301349][ T6960] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.378487][ T6960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.404126][ T6960] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.424615][ T224] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.431724][ T224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.460803][ T224] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.467910][ T224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.493699][ T6960] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 113.505200][ T6960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.609804][ T6960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.712889][ T6960] veth0_vlan: entered promiscuous mode [ 113.722670][ T6960] veth1_vlan: entered promiscuous mode [ 113.748997][ T6960] veth0_macvtap: entered promiscuous mode [ 113.773678][ T6960] veth1_macvtap: entered promiscuous mode [ 113.791197][ T6960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.815947][ T6960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.840897][ T224] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.873985][ T224] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.894555][ T224] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.925474][ T224] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.946664][ T7143] loop6: detected capacity change from 0 to 256 [ 114.030995][ T7155] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1137'. [ 114.098732][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1139'. [ 114.127340][ T7160] netlink: 'syz.8.1139': attribute type 1 has an invalid length. [ 114.143649][ T28] audit: type=1400 audit(1771843702.469:469): avc: denied { cpu } for pid=7165 comm="syz.3.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 114.148981][ T7160] netlink: 'syz.8.1139': attribute type 2 has an invalid length. [ 114.204861][ T28] audit: type=1400 audit(1771843702.499:470): avc: denied { tracepoint } for pid=7168 comm="syz.6.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 114.461166][ T28] audit: type=1400 audit(1771843702.789:471): avc: denied { create } for pid=7195 comm="syz.8.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 114.522850][ T28] audit: type=1400 audit(1771843702.819:472): avc: denied { read } for pid=7195 comm="syz.8.1153" path="socket:[27873]" dev="sockfs" ino=27873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 114.779121][ T7217] loop8: detected capacity change from 0 to 8192 [ 115.491058][ T7257] loop3: detected capacity change from 0 to 128 [ 115.621828][ T7269] loop8: detected capacity change from 0 to 512 [ 115.681129][ T224] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.694770][ T7269] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.756383][ T224] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 53844 - 0 [ 115.788008][ T7269] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.818899][ T224] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 115.838074][ T224] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.876265][ T224] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 53844 - 0 [ 115.920693][ T224] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 115.931554][ T6188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.963188][ T224] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.010181][ T224] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 53844 - 0 [ 116.035381][ T224] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 116.064768][ T224] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.082782][ T224] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 53844 - 0 [ 116.102128][ T224] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 116.602961][ T7334] loop8: detected capacity change from 0 to 1024 [ 116.668359][ T7355] loop3: detected capacity change from 0 to 256 [ 116.719413][ T7334] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 116.748212][ T7334] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.011563][ T7334] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: block 3: comm syz.8.1168: lblock 3 mapped to illegal pblock 3 (length 3) [ 117.071756][ T7334] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 117.112752][ T7398] vlan0: entered promiscuous mode [ 117.117876][ T7398] gretap0: entered promiscuous mode [ 117.126443][ T7334] EXT4-fs (loop8): This should not happen!! Data will be lost [ 117.126443][ T7334] [ 117.200984][ T224] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 117.234723][ T224] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 117.262141][ T224] EXT4-fs (loop8): This should not happen!! Data will be lost [ 117.262141][ T224] [ 117.290197][ T6188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 117.331483][ T7409] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1182'. [ 117.409053][ T7413] bond2: entered promiscuous mode [ 117.433293][ T7413] bond2: entered allmulticast mode [ 117.449776][ T7413] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.515587][ T7413] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 117.583066][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 117.583081][ T28] audit: type=1400 audit(1771843705.909:474): avc: denied { read } for pid=7416 comm="syz.8.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 117.796347][ T7422] sock: sock_set_timeout: `syz.8.1187' (pid 7422) tries to set negative timeout [ 117.860631][ T7425] loop8: detected capacity change from 0 to 1024 [ 117.884795][ T7425] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 117.928616][ T7425] System zones: 0-1, 3-36 [ 117.949755][ T7425] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1188: bad orphan inode 134217728 [ 117.989217][ T7425] loop8: lost filesystem error report for type 5 error -117 [ 117.989821][ T7425] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.522486][ T6188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.072631][ T7474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1205'. [ 119.099325][ T7474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1205'. [ 119.276100][ T7466] bridge_slave_0: left allmulticast mode [ 119.285696][ T7466] bridge_slave_0: left promiscuous mode [ 119.296248][ T7466] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.314639][ T7466] bridge_slave_1: left allmulticast mode [ 119.323910][ T7466] bridge_slave_1: left promiscuous mode [ 119.341414][ T7466] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.352675][ T7466] bond0: (slave bond_slave_0): Releasing backup interface [ 119.355402][ T7472] loop8: detected capacity change from 0 to 32768 [ 119.372790][ T7476] loop3: detected capacity change from 0 to 1024 [ 119.380257][ T28] audit: type=1400 audit(1771843707.709:475): avc: denied { bind } for pid=7465 comm="syz.1.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.410588][ T7466] bond0: (slave bond_slave_1): Releasing backup interface [ 119.419610][ T6974] loop8: p1 p3 < p5 p6 > [ 119.424028][ T6974] loop8: partition table partially beyond EOD, truncated [ 119.431754][ T7466] team0: Port device team_slave_0 removed [ 119.445153][ T7466] team0: Port device team_slave_1 removed [ 119.446097][ T7472] loop8: p1 p3 < p5 p6 > [ 119.456471][ T7472] loop8: partition table partially beyond EOD, truncated [ 119.458608][ T7466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.483598][ T7476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 119.510198][ T7466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.519027][ T7476] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.531130][ T7466] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 119.589849][ T6974] udevd[6974]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 119.600580][ T6956] udevd[6956]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 119.611696][ T7006] udevd[7006]: inotify_add_watch(7, /dev/loop8p5, 10) failed: No such file or directory [ 119.616297][ T7476] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 3: comm syz.3.1206: lblock 3 mapped to illegal pblock 3 (length 3) [ 119.623062][ T7007] udevd[7007]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory [ 119.653490][ T7476] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 119.687488][ T7476] EXT4-fs (loop3): This should not happen!! Data will be lost [ 119.687488][ T7476] [ 119.702269][ T7006] udevd[7006]: inotify_add_watch(7, /dev/loop8p5, 10) failed: No such file or directory [ 119.702356][ T7007] udevd[7007]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory [ 119.713278][ T6974] udevd[6974]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 119.733399][ T6956] udevd[6956]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 119.805858][ T3845] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 119.841062][ T3845] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 119.868265][ T3845] EXT4-fs (loop3): This should not happen!! Data will be lost [ 119.868265][ T3845] [ 119.888278][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 120.008131][ T7506] sd 0:0:1:0: device reset [ 120.013535][ T7507] xt_hashlimit: size too large, truncated to 1048576 [ 120.051318][ T7509] netlink: 'syz.6.1221': attribute type 1 has an invalid length. [ 120.059877][ T7509] netlink: 'syz.6.1221': attribute type 4 has an invalid length. [ 120.067688][ T7509] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1221'. [ 120.115012][ T7513] af_packet: tpacket_rcv: packet too big, clamped from 65386 to 4294967272. macoff=96 [ 120.179135][ T28] audit: type=1400 audit(1771843708.499:476): avc: denied { ioctl } for pid=7516 comm="syz.8.1225" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 120.223732][ T28] audit: type=1400 audit(1771843708.509:477): avc: denied { create } for pid=7516 comm="syz.8.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 120.251400][ T28] audit: type=1400 audit(1771843708.539:478): avc: denied { write } for pid=7516 comm="syz.8.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 120.407311][ T7519] loop0: detected capacity change from 0 to 1024 [ 120.503239][ T7519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 120.517603][ T7519] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.595706][ T7519] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: block 3: comm syz.0.1223: lblock 3 mapped to illegal pblock 3 (length 3) [ 120.604423][ T28] audit: type=1400 audit(1771843708.889:479): avc: denied { ioctl } for pid=7550 comm="syz.3.1231" path="socket:[28147]" dev="sockfs" ino=28147 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.641205][ T7519] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 120.655621][ T7519] EXT4-fs (loop0): This should not happen!! Data will be lost [ 120.655621][ T7519] [ 120.684828][ T3845] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 120.712535][ T3845] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 120.741574][ T3845] EXT4-fs (loop0): This should not happen!! Data will be lost [ 120.741574][ T3845] [ 120.753353][ T6960] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 120.852723][ T28] audit: type=1400 audit(1771843709.179:480): avc: denied { write } for pid=7578 comm="syz.0.1239" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 121.502292][ T28] audit: type=1400 audit(1771843709.829:481): avc: denied { name_connect } for pid=7618 comm="syz.6.1246" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 121.612080][ T7623] loop8: detected capacity change from 0 to 8192 [ 121.647851][ T7623] FAT-fs (loop8): error, clusters badly computed (2 != 1) [ 121.664763][ T7623] FAT-fs (loop8): Filesystem has been set read-only [ 121.869219][ T7631] mmap: syz.0.1249 (7631) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 122.079461][ T5129] Process accounting resumed [ 122.186327][ T7649] loop0: detected capacity change from 0 to 2048 [ 122.204500][ T7649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.232223][ T7649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.000776][ T224] Bluetooth: hci0: Frame reassembly failed (-84) [ 124.197442][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1267'. [ 124.817632][ T7702] batadv_slave_1: entered promiscuous mode [ 124.825789][ T7702] batadv_slave_0: entered promiscuous mode [ 124.833590][ T7701] batadv_slave_0: left promiscuous mode [ 124.839877][ T7701] batadv_slave_1: left promiscuous mode [ 125.218021][ T7728] netlink: 'syz.6.1287': attribute type 1 has an invalid length. [ 125.231031][ T7728] 8021q: adding VLAN 0 to HW filter on device bond3 [ 125.243790][ T7728] bond3: option tlb_dynamic_lb: unable to set because the bond device is up [ 125.437274][ T7750] netlink: 'syz.6.1297': attribute type 5 has an invalid length. [ 125.474797][ T28] audit: type=1400 audit(1771843713.799:482): avc: denied { write } for pid=7755 comm="syz.6.1299" path="socket:[28859]" dev="sockfs" ino=28859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.039437][ T3558] Bluetooth: hci0: command 0x1003 tx timeout [ 126.039909][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 126.786194][ T5143] Process accounting resumed [ 127.145567][ T7849] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 127.189239][ T7849] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 127.218102][ T7849] vhci_hcd vhci_hcd.4: default hub control req: 0016 v0014 i0000 l0 [ 127.334318][ T7858] loop0: detected capacity change from 0 to 256 [ 127.398680][ T7858] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 127.423592][ T7858] FAT-fs (loop0): Filesystem has been set read-only [ 127.443981][ T7870] loop3: detected capacity change from 0 to 1024 [ 127.460102][ T7858] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 127.482475][ T7858] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 127.496083][ T7878] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 127.519826][ T7878] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 127.528726][ T7858] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 127.538350][ T7870] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c01c, mo2=0003] [ 127.538400][ T7858] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 127.559732][ T7878] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 127.570939][ T7870] System zones: 0-1, 3-8 [ 127.590490][ T7870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 127.610907][ T7878] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 127.634190][ T7858] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 127.651315][ T7870] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.690284][ T7889] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1344'. [ 127.841029][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1346'. [ 127.869604][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1346'. [ 127.906889][ T224] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.986090][ T3845] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.996312][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 128.011852][ T3845] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.032684][ T3845] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.370052][ T7923] loop8: detected capacity change from 0 to 1024 [ 128.376675][ T7923] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.431117][ T7923] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.499412][ T7931] geneve2: entered promiscuous mode [ 128.509568][ T3385] Process accounting resumed [ 128.522864][ T7923] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.1357: Allocating blocks 497-513 which overlap fs metadata [ 128.593256][ T7938] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.1357: Allocating blocks 497-513 which overlap fs metadata [ 128.643745][ T7921] EXT4-fs (loop8): pa ffff888108148460: logic 0, phys. 113, len 25 [ 128.651826][ T7921] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 128.714816][ T7943] loop3: detected capacity change from 0 to 2048 [ 128.715454][ T6188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.821804][ T7943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.844415][ T7956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7956 comm=syz.8.1360 [ 129.057587][ T28] audit: type=1400 audit(1771843717.379:483): avc: denied { setopt } for pid=7963 comm="syz.1.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 129.141209][ T7943] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.218542][ T28] audit: type=1326 audit(1771843717.539:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7983 comm="syz.1.1367" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50bcaac629 code=0x0 [ 129.498479][ T28] audit: type=1400 audit(1771843717.819:485): avc: denied { create } for pid=8010 comm="syz.0.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 129.528937][ T28] audit: type=1400 audit(1771843717.849:486): avc: denied { setopt } for pid=8010 comm="syz.0.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 129.586028][ T28] audit: type=1400 audit(1771843717.849:487): avc: denied { write } for pid=8010 comm="syz.0.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 129.984887][ T8018] loop8: detected capacity change from 0 to 128 [ 130.075651][ T8023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1377'. [ 130.109285][ T28] audit: type=1400 audit(1771843718.429:488): avc: denied { ioctl } for pid=8022 comm="syz.3.1378" path="socket:[29259]" dev="sockfs" ino=29259 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 130.499465][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1386'. [ 130.581316][ T28] audit: type=1400 audit(1771843718.909:489): avc: denied { write } for pid=8041 comm="syz.0.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 130.648669][ T28] audit: type=1400 audit(1771843718.969:490): avc: denied { sqpoll } for pid=8044 comm="syz.8.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 130.694721][ T28] audit: type=1400 audit(1771843718.979:491): avc: denied { name_bind } for pid=8048 comm="syz.1.1390" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 130.770936][ T8055] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.1391'. [ 130.971243][ T28] audit: type=1400 audit(1771843719.299:492): avc: denied { shutdown } for pid=8064 comm="syz.3.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.084265][ T28] audit: type=1326 audit(1771843719.409:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8074 comm="syz.8.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244000c629 code=0x7ffc0000 [ 131.162406][ T28] audit: type=1326 audit(1771843719.409:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8074 comm="syz.8.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f244000c629 code=0x7ffc0000 [ 131.229044][ T28] audit: type=1326 audit(1771843719.409:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8074 comm="syz.8.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244000c629 code=0x7ffc0000 [ 131.465958][ T28] audit: type=1400 audit(1771843719.789:496): avc: denied { getopt } for pid=8098 comm="syz.8.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.784792][ T8121] loop8: detected capacity change from 0 to 128 [ 131.812787][ T8121] bio_check_eod: 85 callbacks suppressed [ 131.812870][ T8121] syz.8.1417: attempt to access beyond end of device [ 131.812870][ T8121] loop8: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 131.841575][ T8121] syz.8.1417: attempt to access beyond end of device [ 131.841575][ T8121] loop8: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 131.858252][ T8121] Buffer I/O error on dev loop8, logical block 80, lost async page write [ 131.869392][ T8121] syz.8.1417: attempt to access beyond end of device [ 131.869392][ T8121] loop8: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 131.894939][ T8121] syz.8.1417: attempt to access beyond end of device [ 131.894939][ T8121] loop8: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 131.922411][ T8121] Buffer I/O error on dev loop8, logical block 77, lost async page write [ 131.942828][ T8121] syz.8.1417: attempt to access beyond end of device [ 131.942828][ T8121] loop8: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 131.958509][ T8121] Buffer I/O error on dev loop8, logical block 78, lost async page write [ 131.980225][ T8121] syz.8.1417: attempt to access beyond end of device [ 131.980225][ T8121] loop8: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 132.002104][ T8121] Buffer I/O error on dev loop8, logical block 79, lost async page write [ 132.011815][ T8121] syz.8.1417: attempt to access beyond end of device [ 132.011815][ T8121] loop8: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 132.025687][ T8121] Buffer I/O error on dev loop8, logical block 80, lost async page write [ 132.053574][ T8126] syz.8.1417: attempt to access beyond end of device [ 132.053574][ T8126] loop8: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 132.381004][ T8159] loop3: detected capacity change from 0 to 256 [ 132.400220][ T8159] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 132.413019][ T8159] FAT-fs (loop3): Filesystem has been set read-only [ 132.419903][ T8159] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 132.428988][ T8159] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 132.438844][ T8159] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 132.448254][ T8159] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 132.457714][ T8159] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 132.467143][ T8159] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 132.476278][ T8159] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 132.485223][ T8159] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 132.494313][ T8159] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 133.356484][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1444'. [ 133.368095][ T8191] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1444'. [ 133.373910][ T28] audit: type=1400 audit(1771843721.689:497): avc: denied { mounton } for pid=8193 comm="syz.8.1445" path="/file0" dev="autofs" ino=30986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 133.418912][ T28] audit: type=1400 audit(1771843721.739:498): avc: denied { mount } for pid=8195 comm="syz.3.1446" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 133.585566][ T8205] loop3: detected capacity change from 0 to 1024 [ 133.596033][ T8205] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.679693][ T8205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.708160][ T8205] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.1450: Allocating blocks 497-513 which overlap fs metadata [ 133.757433][ T8205] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.1450: Allocating blocks 497-513 which overlap fs metadata [ 133.795056][ T8204] EXT4-fs (loop3): pa ffff888108148460: logic 0, phys. 113, len 25 [ 133.803060][ T8204] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 133.860739][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.999840][ T8237] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1462'. [ 134.167298][ T8247] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1466'. [ 134.652048][ T8266] Invalid ELF header magic: != ELF [ 134.803978][ T8277] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1479'. [ 134.957542][ T8281] loop0: detected capacity change from 0 to 256 [ 135.011885][ T8281] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.354214][ T8300] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 135.537540][ T8311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.685835][ T8317] loop0: detected capacity change from 0 to 512 [ 135.720714][ T8317] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 135.772257][ T8317] EXT4-fs (loop0): orphan cleanup on readonly fs [ 135.805414][ T8317] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.1495: Block bitmap for bg 0 marked uninitialized [ 135.853224][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1499'. [ 135.869747][ T8317] loop0: lost filesystem error report for type 5 error -117 [ 135.871065][ T8317] EXT4-fs (loop0): Remounting filesystem read-only [ 135.885250][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 135.885274][ C1] EXT4-fs (loop0): initial error at time 1771843724: ext4_read_block_bitmap_nowait:517 [ 135.885300][ C1] EXT4-fs (loop0): last error at time 1771843724: ext4_read_block_bitmap_nowait:517 [ 135.940897][ T8317] EXT4-fs (loop0): 1 orphan inode deleted [ 135.972450][ T8317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 136.046006][ T8341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.069865][ T8341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.176875][ T8346] loop3: detected capacity change from 0 to 512 [ 136.205079][ T8346] EXT4-fs: Ignoring removed nobh option [ 136.259219][ T8346] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 136.340501][ T8346] EXT4-fs (loop3): 1 truncate cleaned up [ 136.358632][ T6960] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.399721][ T8346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.203211][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 137.203227][ T28] audit: type=1326 audit(1771843725.529:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8370 comm="syz.8.1517" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f244000c629 code=0x0 [ 137.364992][ T8342] syz.3.1516 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 137.399426][ T8342] CPU: 0 UID: 0 PID: 8342 Comm: syz.3.1516 Not tainted syzkaller #0 PREEMPT(full) [ 137.399474][ T8342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 137.399487][ T8342] Call Trace: [ 137.399494][ T8342] [ 137.399502][ T8342] __dump_stack+0x1d/0x30 [ 137.399570][ T8342] dump_stack_lvl+0x95/0xd0 [ 137.399690][ T8342] dump_stack+0x15/0x1b [ 137.399712][ T8342] dump_header+0x80/0x240 [ 137.399737][ T8342] oom_kill_process+0x295/0x350 [ 137.399815][ T8342] out_of_memory+0x97d/0xb80 [ 137.399833][ T8342] try_charge_memcg+0x62e/0xa10 [ 137.399865][ T8342] __mem_cgroup_charge+0x65/0x150 [ 137.399895][ T8342] filemap_add_folio+0x110/0x350 [ 137.400032][ T8342] __filemap_get_folio_mpol+0x326/0x680 [ 137.400091][ T8342] filemap_fault+0x486/0xb90 [ 137.400116][ T8342] ? css_rstat_updated+0xbb/0x280 [ 137.400167][ T8342] ? probe_sched_wakeup+0x84/0xa0 [ 137.400208][ T8342] ? __rcu_read_lock+0x36/0x50 [ 137.400226][ T8342] __do_fault+0xbc/0x200 [ 137.400252][ T8342] handle_mm_fault+0xfa1/0x3020 [ 137.400281][ T8342] ? vma_start_read+0x1c7/0x2c0 [ 137.400382][ T8342] do_user_addr_fault+0x62f/0x1050 [ 137.400408][ T8342] ? arch_exit_work+0x30/0x40 [ 137.400455][ T8342] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 137.400478][ T8342] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 137.400501][ T8342] ? trace_page_fault_user+0x1f/0xe0 [ 137.400583][ T8342] exc_page_fault+0x62/0xa0 [ 137.400698][ T8342] asm_exc_page_fault+0x26/0x30 [ 137.400716][ T8342] RIP: 0033:0x7f4b78e61532 [ 137.400739][ T8342] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 73 8d fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 137.400758][ T8342] RSP: 002b:00007fffa83342a0 EFLAGS: 00010202 [ 137.400776][ T8342] RAX: 0000000000015008 RBX: 00007f4b79d35720 RCX: 0000000000000000 [ 137.400790][ T8342] RDX: 0000001b33d0f000 RSI: 0000000000000008 RDI: 00007f4b79d35720 [ 137.400849][ T8342] RBP: 00000000000008fb R08: 00007f4b791f0000 R09: 00007f4b79206128 [ 137.400861][ T8342] R10: 0000000000000001 R11: 0000000000000006 R12: ffffffff81f363a7 [ 137.400872][ T8342] R13: 00007f4b79206128 R14: 000000000000010c R15: fffffffffffeb000 [ 137.400932][ T8342] ? dd_dispatch_request+0x1a7/0x420 [ 137.400964][ T8342] [ 137.402019][ T8342] memory: usage 307200kB, limit 307200kB, failcnt 685 [ 137.632848][ T8342] memory+swap: usage 308272kB, limit 9007199254740988kB, failcnt 0 [ 137.644014][ T8342] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 137.651575][ T8342] Memory cgroup stats for /syz3: [ 137.651782][ T8342] cache 24576 [ 137.660029][ T8342] rss 0 [ 137.662893][ T8342] shmem 0 [ 137.665972][ T8342] mapped_file 0 [ 137.684663][ T8342] dirty 0 [ 137.687757][ T8381] syz.6.1521 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 137.698433][ T8342] writeback 0 [ 137.704277][ T8342] workingset_refault_anon 235 [ 137.709039][ T8342] workingset_refault_file 1958 [ 137.713982][ T8342] swap 1097728 [ 137.720692][ T8342] swapcached 2863104 [ 137.735093][ T8342] pgpgin 79260 [ 137.738556][ T8342] pgpgout 79252 [ 137.742599][ T8342] pgfault 105612 [ 137.746812][ T8342] pgmajfault 142 [ 137.759327][ T8342] inactive_anon 4096 [ 137.764671][ T8342] active_anon 0 [ 137.777432][ T8342] inactive_file 0 [ 137.777898][ T28] audit: type=1400 audit(1771843726.099:509): avc: denied { watch watch_reads } for pid=8390 comm="syz.6.1526" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 137.781165][ T8342] active_file 28672 [ 137.807562][ T8342] unevictable 0 [ 137.816695][ T8342] hierarchical_memory_limit 314572800 [ 137.822255][ T8342] hierarchical_memsw_limit 9223372036854771712 [ 137.828586][ T8342] total_cache 24576 [ 137.845290][ T8342] total_rss 0 [ 137.849424][ T28] audit: type=1326 audit(1771843726.169:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.6.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8dfc629 code=0x7ffc0000 [ 137.872975][ T8342] total_shmem 0 [ 137.876717][ T8342] total_mapped_file 0 [ 137.881809][ T8342] total_dirty 0 [ 137.885852][ T8342] total_writeback 0 [ 137.890570][ T8342] total_workingset_refault_anon 235 [ 137.896139][ T8342] total_workingset_refault_file 1958 [ 137.902080][ T28] audit: type=1326 audit(1771843726.179:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.6.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8dfc629 code=0x7ffc0000 [ 137.921612][ T8342] total_swap 1097728 [ 137.929669][ T8342] total_swapcached 2863104 [ 137.930382][ T28] audit: type=1326 audit(1771843726.179:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.6.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8dfc629 code=0x7ffc0000 [ 137.943291][ T8342] total_pgpgin 79260 [ 137.971977][ T28] audit: type=1326 audit(1771843726.179:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.6.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8dfc629 code=0x7ffc0000 [ 137.980511][ T8342] total_pgpgout 79252 [ 137.998659][ T28] audit: type=1326 audit(1771843726.199:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.6.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f04e8dfc629 code=0x7ffc0000 [ 138.017656][ T8342] total_pgfault 105612 [ 138.023492][ T28] audit: type=1326 audit(1771843726.199:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.6.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8dfc629 code=0x7ffc0000 [ 138.051623][ T28] audit: type=1326 audit(1771843726.199:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.6.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8dfc629 code=0x7ffc0000 [ 138.071365][ T8342] total_pgmajfault 142 [ 138.079436][ T28] audit: type=1326 audit(1771843726.199:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.6.1529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04e8dfc629 code=0x7ffc0000 [ 138.103565][ T8342] total_inactive_anon 4096 [ 138.108009][ T8342] total_active_anon 0 [ 138.112691][ T8342] total_inactive_file 0 [ 138.116900][ T8342] total_active_file 28672 [ 138.121690][ T8342] total_unevictable 0 [ 138.125665][ T8342] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1516,pid=8342,uid=0 [ 138.141783][ T8342] Memory cgroup out of memory: Killed process 8342 (syz.3.1516) total-vm:96340kB, anon-rss:1224kB, file-rss:22404kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 138.368125][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.433932][ T8424] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1539'. [ 138.757402][ T8440] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1540'. [ 138.984998][ T8461] netlink: 'syz.6.1549': attribute type 29 has an invalid length. [ 138.994284][ T8461] netlink: 'syz.6.1549': attribute type 29 has an invalid length. [ 139.009946][ T8461] netlink: 'syz.6.1549': attribute type 29 has an invalid length. [ 139.039445][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1551'. [ 139.184948][ T8468] Invalid ELF header magic: != ELF [ 139.220365][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1554'. [ 139.230589][ T8470] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1554'. [ 139.327921][ T8476] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1557'. [ 139.513613][ T8482] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1560'. [ 141.120612][ T8508] syz.0.1570 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 141.134919][ T8508] CPU: 0 UID: 0 PID: 8508 Comm: syz.0.1570 Not tainted syzkaller #0 PREEMPT(full) [ 141.134957][ T8508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.134965][ T8508] Call Trace: [ 141.134970][ T8508] [ 141.134975][ T8508] __dump_stack+0x1d/0x30 [ 141.134993][ T8508] dump_stack_lvl+0x95/0xd0 [ 141.135007][ T8508] dump_stack+0x15/0x1b [ 141.135029][ T8508] dump_header+0x80/0x240 [ 141.135044][ T8508] oom_kill_process+0x295/0x350 [ 141.135057][ T8508] out_of_memory+0x97d/0xb80 [ 141.135069][ T8508] try_charge_memcg+0x62e/0xa10 [ 141.135175][ T8508] obj_cgroup_charge_pages+0x23/0xc0 [ 141.135199][ T8508] __memcg_kmem_charge_page+0x9e/0x170 [ 141.135222][ T8508] __alloc_frozen_pages_noprof+0x18a/0x360 [ 141.135291][ T8508] alloc_pages_mpol+0xb3/0x260 [ 141.135307][ T8508] alloc_pages_noprof+0x8f/0x130 [ 141.135323][ T8508] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 141.135401][ T8508] __kvmalloc_node_noprof+0x3d4/0x650 [ 141.135416][ T8508] ? ip_set_alloc+0x24/0x30 [ 141.135430][ T8508] ? ip_set_alloc+0x24/0x30 [ 141.135490][ T8508] ? __kmalloc_cache_noprof+0x18a/0x410 [ 141.135504][ T8508] ip_set_alloc+0x24/0x30 [ 141.135517][ T8508] hash_netiface_create+0x282/0x740 [ 141.135532][ T8508] ? __pfx_hash_netiface_create+0x10/0x10 [ 141.135615][ T8508] ip_set_create+0x3cf/0x970 [ 141.135635][ T8508] ? __nla_parse+0x40/0x60 [ 141.135692][ T8508] nfnetlink_rcv_msg+0x509/0x5d0 [ 141.135749][ T8508] netlink_rcv_skb+0x123/0x220 [ 141.135764][ T8508] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 141.135780][ T8508] nfnetlink_rcv+0x167/0x1720 [ 141.135793][ T8508] ? __kfree_skb+0x109/0x150 [ 141.135807][ T8508] ? nlmon_xmit+0x4f/0x60 [ 141.135847][ T8508] ? consume_skb+0x4b/0x160 [ 141.135860][ T8508] ? nlmon_xmit+0x4f/0x60 [ 141.135876][ T8508] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 141.135970][ T8508] ? __dev_queue_xmit+0x1393/0x1f40 [ 141.136052][ T8508] ? __dev_queue_xmit+0x148/0x1f40 [ 141.136067][ T8508] ? ref_tracker_free+0x37d/0x3e0 [ 141.136082][ T8508] ? __netlink_deliver_tap+0x4dc/0x500 [ 141.136143][ T8508] netlink_unicast+0x5c0/0x690 [ 141.136157][ T8508] netlink_sendmsg+0x5c8/0x6f0 [ 141.136174][ T8508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.136190][ T8508] ____sys_sendmsg+0x5af/0x600 [ 141.136239][ T8508] ___sys_sendmsg+0x195/0x1e0 [ 141.136261][ T8508] __x64_sys_sendmsg+0xd4/0x160 [ 141.136278][ T8508] x64_sys_call+0x194c/0x3020 [ 141.136299][ T8508] do_syscall_64+0x12c/0x370 [ 141.136319][ T8508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.136344][ T8508] RIP: 0033:0x7ff15952c629 [ 141.136355][ T8508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.136406][ T8508] RSP: 002b:00007ff157f87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.136419][ T8508] RAX: ffffffffffffffda RBX: 00007ff1597a5fa0 RCX: 00007ff15952c629 [ 141.136435][ T8508] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 141.136443][ T8508] RBP: 00007ff1595c2b39 R08: 0000000000000000 R09: 0000000000000000 [ 141.136451][ T8508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.136504][ T8508] R13: 00007ff1597a6038 R14: 00007ff1597a5fa0 R15: 00007ffe3d106d38 [ 141.136515][ T8508] [ 141.136543][ T8508] memory: usage 307200kB, limit 307200kB, failcnt 280 [ 141.464250][ T8508] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 141.476703][ T8508] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 141.489230][ T8508] Memory cgroup stats for /syz0: [ 141.489465][ T8508] cache 0 [ 141.497570][ T8508] rss 0 [ 141.500772][ T8508] shmem 0 [ 141.507626][ T8508] mapped_file 0 [ 141.511200][ T8508] dirty 0 [ 141.514404][ T8508] writeback 0 [ 141.517857][ T8508] workingset_refault_anon 691 [ 141.523050][ T8508] workingset_refault_file 373 [ 141.528073][ T8508] swap 204800 [ 141.531504][ T8508] swapcached 204800 [ 141.535308][ T8508] pgpgin 41266 [ 141.538754][ T8508] pgpgout 41266 [ 141.564379][ T8508] pgfault 58974 [ 141.567909][ T8508] pgmajfault 171 [ 141.571850][ T8508] inactive_anon 0 [ 141.575489][ T8508] active_anon 0 [ 141.578938][ T8508] inactive_file 0 [ 141.595395][ T8508] active_file 0 [ 141.599004][ T8508] unevictable 0 [ 141.604010][ T8508] hierarchical_memory_limit 314572800 [ 141.609875][ T8508] hierarchical_memsw_limit 9223372036854771712 [ 141.616676][ T8508] total_cache 0 [ 141.620624][ T8508] total_rss 0 [ 141.623945][ T8508] total_shmem 0 [ 141.627590][ T8508] total_mapped_file 0 [ 141.631941][ T8508] total_dirty 0 [ 141.635447][ T8508] total_writeback 0 [ 141.639496][ T8508] total_workingset_refault_anon 691 [ 141.645421][ T8508] total_workingset_refault_file 373 [ 141.661217][ T8508] total_swap 204800 [ 141.667650][ T8508] total_swapcached 204800 [ 141.673160][ T8508] total_pgpgin 41266 [ 141.677101][ T8508] total_pgpgout 41266 [ 141.681391][ T8508] total_pgfault 58974 [ 141.685459][ T8508] total_pgmajfault 171 [ 141.689797][ T8508] total_inactive_anon 0 [ 141.694045][ T8508] total_active_anon 0 [ 141.698161][ T8508] total_inactive_file 0 [ 141.702643][ T8508] total_active_file 0 [ 141.706692][ T8508] total_unevictable 0 [ 141.711064][ T8508] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1570,pid=8507,uid=0 [ 141.762754][ T8508] Memory cgroup out of memory: Killed process 8507 (syz.0.1570) total-vm:96340kB, anon-rss:1228kB, file-rss:22148kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 141.837275][ T8536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1580'. [ 141.945803][ T8537] bond3 (unregistering): Released all slaves [ 142.024741][ T8541] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1580'. [ 142.065741][ T8541] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.343113][ T8553] loop3: detected capacity change from 0 to 128 [ 142.392542][ T8553] syz.3.1587: attempt to access beyond end of device [ 142.392542][ T8553] loop3: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 142.430758][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1586'. [ 142.451935][ T8553] syz.3.1587: attempt to access beyond end of device [ 142.451935][ T8553] loop3: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 142.475920][ T8553] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 143.788742][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 143.788758][ T28] audit: type=1400 audit(1771843732.109:556): avc: denied { mount } for pid=8585 comm="syz.1.1600" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 144.906331][ T8608] chnl_net:caif_netlink_parms(): no params data found [ 145.113318][ T8608] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.239222][ T8608] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.259874][ T8608] bridge_slave_0: entered allmulticast mode [ 145.266469][ T8608] bridge_slave_0: entered promiscuous mode [ 145.282417][ T8608] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.289592][ T8608] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.296789][ T8608] bridge_slave_1: entered allmulticast mode [ 145.303692][ T8608] bridge_slave_1: entered promiscuous mode [ 145.347070][ T8650] loop0: detected capacity change from 0 to 128 [ 145.349788][ T8608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.381919][ T8608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.428552][ T8608] team0: Port device team_slave_0 added [ 145.441217][ T8650] syz.0.1627: attempt to access beyond end of device [ 145.441217][ T8650] loop0: rw=8390657, sector=129, nr_sectors = 1 limit=128 [ 145.441415][ T8608] team0: Port device team_slave_1 added [ 145.465909][ T8650] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 145.485626][ T8650] syz.0.1627: attempt to access beyond end of device [ 145.485626][ T8650] loop0: rw=8390657, sector=130, nr_sectors = 1 limit=128 [ 145.505372][ T8608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.517986][ T8650] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 145.521386][ T8608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.545905][ T8650] syz.0.1627: attempt to access beyond end of device [ 145.545905][ T8650] loop0: rw=8390657, sector=131, nr_sectors = 1 limit=128 [ 145.573952][ T8650] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 145.574681][ T8608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.605506][ T8608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.607578][ T8650] syz.0.1627: attempt to access beyond end of device [ 145.607578][ T8650] loop0: rw=8390657, sector=132, nr_sectors = 1 limit=128 [ 145.620436][ T8608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.629183][ T8650] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 145.661103][ T8608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.663145][ T8650] syz.0.1627: attempt to access beyond end of device [ 145.663145][ T8650] loop0: rw=8390657, sector=133, nr_sectors = 1 limit=128 [ 145.686141][ T8650] Buffer I/O error on dev loop0, logical block 133, lost async page write [ 145.690992][ T8608] hsr_slave_0: entered promiscuous mode [ 145.701075][ T8608] hsr_slave_1: entered promiscuous mode [ 145.707266][ T8608] debugfs: 'hsr0' already exists in 'hsr' [ 145.713443][ T8608] Cannot create hsr debugfs directory [ 145.714022][ T8650] syz.0.1627: attempt to access beyond end of device [ 145.714022][ T8650] loop0: rw=8390657, sector=129, nr_sectors = 1 limit=128 [ 145.733248][ T8650] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 145.742026][ T8650] syz.0.1627: attempt to access beyond end of device [ 145.742026][ T8650] loop0: rw=8390657, sector=130, nr_sectors = 1 limit=128 [ 145.755942][ T8650] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 145.764763][ T8650] syz.0.1627: attempt to access beyond end of device [ 145.764763][ T8650] loop0: rw=8390657, sector=131, nr_sectors = 1 limit=128 [ 145.778842][ T8650] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 145.802786][ T8650] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 145.816831][ T8608] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.930367][ T8608] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.974567][ T8669] netlink: 'syz.3.1633': attribute type 29 has an invalid length. [ 145.985578][ T8669] netlink: 'syz.3.1633': attribute type 29 has an invalid length. [ 145.999983][ T8608] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.014783][ T8669] netlink: 'syz.3.1633': attribute type 29 has an invalid length. [ 146.060648][ T8608] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.079283][ T28] audit: type=1400 audit(1771843734.399:557): avc: denied { kexec_image_load } for pid=8675 comm="syz.3.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 146.176972][ T8608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 146.270801][ T8608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 146.291374][ T8608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 146.306111][ T8608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 146.343069][ T8687] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.359930][ T8687] bridge_slave_1: left allmulticast mode [ 146.371054][ T8687] bridge_slave_1: left promiscuous mode [ 146.382424][ T8687] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.493560][ T8608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.514091][ T8608] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.535163][ T3854] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.542398][ T3854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.561915][ T3854] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.569166][ T3854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.596855][ T8608] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 146.619380][ T8608] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.723709][ T8608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.864561][ T8608] veth0_vlan: entered promiscuous mode [ 146.872870][ T8608] veth1_vlan: entered promiscuous mode [ 146.910640][ T8608] veth0_macvtap: entered promiscuous mode [ 146.930339][ T8608] veth1_macvtap: entered promiscuous mode [ 146.946777][ T8608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.963953][ T8608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.994211][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.018605][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.035010][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.064139][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.237941][ T8725] netlink: 'syz.8.1649': attribute type 10 has an invalid length. [ 147.256413][ T8725] geneve1: entered promiscuous mode [ 147.276100][ T8725] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 147.313183][ T28] audit: type=1400 audit(1771843735.639:558): avc: denied { setopt } for pid=8726 comm="syz.0.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 147.313369][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1650'. [ 147.455732][ T8676] kexec: Could not allocate control_code_buffer [ 147.498836][ T28] audit: type=1400 audit(1771843735.819:559): avc: denied { bind } for pid=8742 comm="syz.0.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 147.572298][ T28] audit: type=1400 audit(1771843735.899:560): avc: denied { accept } for pid=8744 comm="syz.3.1660" path="socket:[36430]" dev="sockfs" ino=36430 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 148.032712][ T8758] loop3: detected capacity change from 0 to 128 [ 148.256719][ T8759] bio_check_eod: 2 callbacks suppressed [ 148.256784][ T8759] syz.3.1663: attempt to access beyond end of device [ 148.256784][ T8759] loop3: rw=8390657, sector=129, nr_sectors = 1 limit=128 [ 148.279258][ T8759] buffer_io_error: 1 callbacks suppressed [ 148.279273][ T8759] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 148.311305][ T8759] syz.3.1663: attempt to access beyond end of device [ 148.311305][ T8759] loop3: rw=8390657, sector=130, nr_sectors = 1 limit=128 [ 148.329241][ T8759] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 148.338411][ T8759] syz.3.1663: attempt to access beyond end of device [ 148.338411][ T8759] loop3: rw=8390657, sector=131, nr_sectors = 1 limit=128 [ 148.407359][ T8759] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 148.489306][ T8759] syz.3.1663: attempt to access beyond end of device [ 148.489306][ T8759] loop3: rw=8390657, sector=132, nr_sectors = 1 limit=128 [ 148.503257][ T8759] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 148.522244][ T8759] syz.3.1663: attempt to access beyond end of device [ 148.522244][ T8759] loop3: rw=8390657, sector=133, nr_sectors = 1 limit=128 [ 148.550993][ T8759] Buffer I/O error on dev loop3, logical block 133, lost async page write [ 148.561812][ T8759] syz.3.1663: attempt to access beyond end of device [ 148.561812][ T8759] loop3: rw=8390657, sector=129, nr_sectors = 1 limit=128 [ 148.576091][ T8759] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 148.585656][ T8759] syz.3.1663: attempt to access beyond end of device [ 148.585656][ T8759] loop3: rw=8390657, sector=130, nr_sectors = 1 limit=128 [ 148.600553][ T8759] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 148.624857][ T8759] syz.3.1663: attempt to access beyond end of device [ 148.624857][ T8759] loop3: rw=8390657, sector=131, nr_sectors = 1 limit=128 [ 148.638974][ T8759] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 148.647938][ T8759] syz.3.1663: attempt to access beyond end of device [ 148.647938][ T8759] loop3: rw=8390657, sector=132, nr_sectors = 1 limit=128 [ 148.662531][ T8759] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 148.671395][ T8759] syz.3.1663: attempt to access beyond end of device [ 148.671395][ T8759] loop3: rw=8390657, sector=133, nr_sectors = 1 limit=128 [ 148.678233][ T8775] loop8: detected capacity change from 0 to 1024 [ 148.688171][ T8759] Buffer I/O error on dev loop3, logical block 133, lost async page write [ 148.741291][ T8775] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 148.769425][ T8775] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.809911][ T28] audit: type=1400 audit(1771843737.139:561): avc: denied { mounton } for pid=8786 comm="syz.6.1673" path="/file0" dev="ramfs" ino=38984 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 148.937353][ T6188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 149.455808][ T8806] loop3: detected capacity change from 0 to 128 [ 149.921863][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1694'. [ 150.206888][ T28] audit: type=1400 audit(1771843738.529:562): avc: denied { read } for pid=8849 comm="syz.0.1698" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 150.257897][ T28] audit: type=1400 audit(1771843738.529:563): avc: denied { open } for pid=8849 comm="syz.0.1698" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 150.260566][ T8855] netlink: 'syz.6.1700': attribute type 1 has an invalid length. [ 150.392560][ T8858] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1700'. [ 150.434893][ T28] audit: type=1400 audit(1771843738.529:564): avc: denied { ioctl } for pid=8849 comm="syz.0.1698" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 150.474705][ T8858] bond4: entered promiscuous mode [ 150.479979][ T8858] bond4: entered allmulticast mode [ 150.485455][ T8858] 8021q: adding VLAN 0 to HW filter on device bond4 [ 150.552733][ T8862] io-wq is not configured for unbound workers [ 150.645936][ T8869] bridge_slave_1: left allmulticast mode [ 150.670898][ T8869] bridge_slave_1: left promiscuous mode [ 150.676884][ T8869] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.697909][ T8869] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 150.729249][ T8873] netlink: 'syz.6.1707': attribute type 1 has an invalid length. [ 150.762822][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1708'. [ 150.773336][ T8873] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 150.783903][ T8873] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 150.808636][ T8873] bond5: (slave ip6gre1): making interface the new active one [ 150.825390][ T8873] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 150.846677][ T8877] bond5: option fail_over_mac: unable to set because the bond device has slaves [ 150.971014][ T8883] netlink: 'syz.6.1711': attribute type 10 has an invalid length. [ 150.989086][ T8883] geneve1: entered promiscuous mode [ 151.013150][ T8883] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 151.041556][ T3845] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.064217][ T3845] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.097835][ T3845] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.108022][ T8887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1712'. [ 151.127474][ T3845] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.539312][ T28] audit: type=1400 audit(1771843739.859:565): avc: denied { setopt } for pid=8904 comm="syz.6.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 151.664465][ T8911] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.680236][ T8911] bridge_slave_1: left allmulticast mode [ 151.697909][ T8911] bridge_slave_1: left promiscuous mode [ 151.716440][ T8911] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.487557][ T8928] loop0: detected capacity change from 0 to 128 [ 153.429322][ T28] audit: type=1400 audit(1771843741.719:566): avc: denied { write } for pid=8948 comm="syz.6.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 153.470720][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1738'. [ 153.743386][ T8962] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1742'. [ 153.763709][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1742'. [ 154.073440][ T8978] netlink: 2036 bytes leftover after parsing attributes in process `syz.8.1746'. [ 154.082847][ T8978] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1746'. [ 154.831250][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1753'. [ 155.904852][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1765'. [ 155.925719][ T9022] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1765'. [ 155.942669][ T9022] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1765'. [ 155.997813][ T9032] loop8: detected capacity change from 0 to 1024 [ 156.014711][ T9032] EXT4-fs: Ignoring removed orlov option [ 156.035872][ T9034] loop0: detected capacity change from 0 to 1024 [ 156.042890][ T9032] EXT4-fs: Ignoring removed nobh option [ 156.047936][ T9034] EXT4-fs: Ignoring removed nobh option [ 156.071172][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1772'. [ 156.085108][ T9032] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.100765][ T9034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.135767][ T6960] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.165079][ T6188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.820721][ T9071] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.845056][ T9069] loop3: detected capacity change from 0 to 128 [ 156.883088][ T9071] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.924616][ T9071] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.985445][ T9071] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.067638][ T41] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.105779][ T41] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.118862][ T41] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.141665][ T41] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.228291][ T9087] loop0: detected capacity change from 0 to 128 [ 157.289584][ T28] audit: type=1400 audit(1771843745.609:567): avc: denied { listen } for pid=9092 comm="syz.3.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 157.310704][ T28] audit: type=1400 audit(1771843745.609:568): avc: denied { accept } for pid=9092 comm="syz.3.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 157.807299][ T9122] team0: Port device team_slave_0 removed [ 158.097637][ T28] audit: type=1400 audit(1771843746.419:569): avc: denied { bind } for pid=9138 comm="syz.0.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 158.470989][ T9161] bridge_slave_0: left allmulticast mode [ 158.476671][ T9161] bridge_slave_0: left promiscuous mode [ 158.482680][ T9161] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.493957][ T9161] bridge_slave_1: left allmulticast mode [ 158.500024][ T9161] bridge_slave_1: left promiscuous mode [ 158.505919][ T9161] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.517595][ T9161] bond0: (slave bond_slave_0): Releasing backup interface [ 158.528426][ T9161] bond0: (slave bond_slave_1): Releasing backup interface [ 158.542174][ T9161] team0: Port device team_slave_0 removed [ 158.551456][ T9161] team0: Port device team_slave_1 removed [ 158.558022][ T9161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.565695][ T9161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.574886][ T9161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.582504][ T9161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.598425][ T9161] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 158.724042][ T28] audit: type=1326 audit(1771843747.049:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.3.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b78f8c629 code=0x7ffc0000 [ 158.747855][ T5129] Process accounting resumed [ 158.794623][ T28] audit: type=1326 audit(1771843747.049:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.3.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b78f8c629 code=0x7ffc0000 [ 158.821506][ T28] audit: type=1326 audit(1771843747.049:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.3.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f4b78f8c629 code=0x7ffc0000 [ 158.869234][ T28] audit: type=1326 audit(1771843747.049:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.3.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b78f8c629 code=0x7ffc0000 [ 158.923094][ T28] audit: type=1326 audit(1771843747.049:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.3.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b78f8c629 code=0x7ffc0000 [ 158.948237][ T9190] loop3: detected capacity change from 0 to 1024 [ 158.970266][ T28] audit: type=1326 audit(1771843747.069:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.3.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4b78f8c629 code=0x7ffc0000 [ 159.003668][ T28] audit: type=1326 audit(1771843747.079:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9178 comm="syz.3.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b78f8c629 code=0x7ffc0000 [ 159.029705][ T9190] EXT4-fs: Ignoring removed oldalloc option [ 159.035827][ T9190] EXT4-fs: Ignoring removed bh option [ 159.111322][ T9190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.126326][ T9177] pim6reg: entered allmulticast mode [ 159.188036][ T9177] pim6reg: left allmulticast mode [ 159.732636][ T9190] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.1837: Allocating blocks 1-17 which overlap fs metadata [ 159.746999][ T9204] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.1837: Allocating blocks 1-17 which overlap fs metadata [ 159.898218][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.930416][ T9229] __nla_validate_parse: 12 callbacks suppressed [ 159.930431][ T9229] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1852'. [ 160.425025][ T9251] loop8: detected capacity change from 0 to 256 [ 160.456663][ T9251] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.483939][ T9251] FAT-fs (loop8): error, corrupted file size (i_pos 196, 2048) [ 160.491982][ T9251] FAT-fs (loop8): Filesystem has been set read-only [ 161.075706][ T9256] loop8: detected capacity change from 0 to 1024 [ 161.085838][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1860'. [ 161.095905][ T9256] EXT4-fs: Ignoring removed oldalloc option [ 161.119382][ T9256] EXT4-fs: Ignoring removed bh option [ 161.146789][ T9256] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.621134][ T9271] ================================================================== [ 161.629262][ T9271] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 161.637273][ T9271] [ 161.639601][ T9271] write to 0xffff88810062770c of 4 bytes by task 9256 on cpu 1: [ 161.647234][ T9271] xas_set_mark+0x12b/0x140 [ 161.651762][ T9271] __folio_start_writeback+0x17b/0x370 [ 161.657234][ T9271] ext4_bio_write_folio+0x5ad/0x9f0 [ 161.662442][ T9271] mpage_process_page_bufs+0x4a1/0x620 [ 161.667986][ T9271] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 161.673793][ T9271] ext4_do_writepages+0xa07/0x2840 [ 161.678903][ T9271] ext4_writepages+0x18f/0x320 [ 161.683674][ T9271] do_writepages+0x1c6/0x310 [ 161.688263][ T9271] file_write_and_wait_range+0x178/0x2f0 [ 161.693898][ T9271] generic_buffers_fsync_noflush+0x45/0x130 [ 161.699828][ T9271] ext4_sync_file+0x1aa/0x6b0 [ 161.704500][ T9271] vfs_fsync_range+0xc5/0xe0 [ 161.709082][ T9271] ext4_buffered_write_iter+0x34f/0x3c0 [ 161.714636][ T9271] ext4_file_write_iter+0x380/0xfa0 [ 161.719835][ T9271] iter_file_splice_write+0x6c4/0xa80 [ 161.725200][ T9271] direct_splice_actor+0x156/0x2a0 [ 161.730300][ T9271] splice_direct_to_actor+0x311/0x670 [ 161.735664][ T9271] do_splice_direct+0x119/0x1a0 [ 161.740504][ T9271] do_sendfile+0x382/0x650 [ 161.744912][ T9271] __x64_sys_sendfile64+0x105/0x150 [ 161.750106][ T9271] x64_sys_call+0x2dc4/0x3020 [ 161.754776][ T9271] do_syscall_64+0x12c/0x370 [ 161.759371][ T9271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.765255][ T9271] [ 161.767566][ T9271] read to 0xffff88810062770c of 4 bytes by task 9271 on cpu 0: [ 161.775093][ T9271] file_write_and_wait_range+0x130/0x2f0 [ 161.780728][ T9271] generic_buffers_fsync_noflush+0x45/0x130 [ 161.786614][ T9271] ext4_sync_file+0x1aa/0x6b0 [ 161.791281][ T9271] vfs_fsync_range+0xc5/0xe0 [ 161.795863][ T9271] ext4_buffered_write_iter+0x34f/0x3c0 [ 161.801413][ T9271] ext4_file_write_iter+0x380/0xfa0 [ 161.806609][ T9271] iter_file_splice_write+0x6c4/0xa80 [ 161.811989][ T9271] direct_splice_actor+0x156/0x2a0 [ 161.817090][ T9271] splice_direct_to_actor+0x311/0x670 [ 161.822466][ T9271] do_splice_direct+0x119/0x1a0 [ 161.827321][ T9271] do_sendfile+0x382/0x650 [ 161.831736][ T9271] __x64_sys_sendfile64+0x105/0x150 [ 161.836977][ T9271] x64_sys_call+0x2dc4/0x3020 [ 161.841656][ T9271] do_syscall_64+0x12c/0x370 [ 161.846248][ T9271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.852243][ T9271] [ 161.854561][ T9271] value changed: 0x02000021 -> 0x04000021 [ 161.860265][ T9271] [ 161.862571][ T9271] Reported by Kernel Concurrency Sanitizer on: [ 161.868798][ T9271] CPU: 0 UID: 0 PID: 9271 Comm: syz.8.1862 Not tainted syzkaller #0 PREEMPT(full) [ 161.878161][ T9271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 161.888297][ T9271] ================================================================== [ 162.136778][ T6188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.