last executing test programs: 2m20.477983216s ago: executing program 32 (id=1394): open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) unshare(0x22020400) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0, 0x47}], 0x2}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) 1m33.725278233s ago: executing program 5 (id=2856): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@jqfmt_vfsv0}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}]}, 0x1, 0x5b6, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) 1m33.558342872s ago: executing program 5 (id=2861): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x102, &(0x7f0000000380)={0x0, 0x2d48, 0x10000, 0x3, 0x2000089}, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x800389b, 0xc000, 0x1, 0x323}, 0x0, 0x0) 1m33.374639693s ago: executing program 5 (id=2866): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000001c0)={0x5, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e21, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x8, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e1d, @empty}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r1, &(0x7f0000000380)=""/148, 0x94, 0x59) 1m33.319603197s ago: executing program 5 (id=2869): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="3e3a1ef16be042eeb4f16ab74342b4e9b3627285d9d5bb1bd9da14580e046a9f12f4612e67c1d3fad996b88b7afbb672f5ae7f179b47fc35eea2400fa7712f02b121224a3088777245de53fdf0393828da8e0a124f7668c06bf4f005e8d9bad3aed90be0b3e404e03f4d7fe86d641dc82aae0cec1d388933f21ffbf8cc46d2e3321534ecb1c8df79306a842863d04cf04d422f30ff45cb65b9d483e662c4d534cd69ec1ed58739f26566", @ANYRES32, @ANYRES8], 0x1, 0x123d, &(0x7f0000002200)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x3d) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 1m33.175617255s ago: executing program 5 (id=2874): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@setlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4080}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x20040840) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1m32.854304884s ago: executing program 5 (id=2878): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 1m32.854191654s ago: executing program 33 (id=2878): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 1m30.190327408s ago: executing program 3 (id=2916): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x800008, &(0x7f0000000540)=ANY=[@ANYBLOB='de=0x00000000800000b1,norock,overriderockperm,gid=', @ANYRESHEX=0x0, @ANYBLOB=',mode=0x0000000000000401,norock,showassoc,hide,hide,norock,gid=', @ANYRESHEX=0x0, @ANYBLOB=',mode=0x0000000000001000,check=strict,iocharset=cp949,cruft,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0xff, 0xa4a, &(0x7f00000007c0)="$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") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000540)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0x1f, 0x8, 0x10, {0x4e24, 0x4e22, [0x3, 0x5b, 0xf, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0x1, 0x7fffffff]}, 0x9, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x80) 1m29.950561562s ago: executing program 3 (id=2918): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4bd, &(0x7f0000000a00)="$eJzs3M9vVNUeAPDvnU4L5cdrH4/3niBKFY0osaUFlYULMZq40MTEDS5rWxAp1LTVCCFaXeDSkLg3Lk38C1zpxqgrE7a4NyTEsAE1JmPuzL3TaecH0zLtWObzSWbmnHtv55wv95yZc+5hbgA9ayR9SiJ2RcT1iBiqZFceMFJ5uXPr8tTvty5PJVEqvfFbUj7u9q3LU/mh+d/tzDNLK7fXWrh46dzk7OzMfJYfWzz/7tjCxUtPnz0/eWbmzMyFiRMnjh8bf+7ZiWeaV76//TjTOt3e/+HcgX2vvHn1talTV9/68eskj39FHO+3/6atjTTY1pcnHu9UKf8Qu8vPg+XnpJhvLXSvQrQlbZDFrCtdj6Hoi+rJi6F4+ZOuVg7YUKVSqbSt6d7h7IhMkr3WbgO2sKTt3tyv38N9JfuiTyKWptI5cO18vhfcPFmZAKVx38kelT3F6uy1vzq/7bx0tnVq6Y8v0kcsX4cY2KDiAADi25OV13zstzz+KxRrj3shWxsajoh/R8SeiPhPROyNiP9GxP8i4v8R8UDN3zRa91lt9SJJ/fizcGNdgbXp5pGI57O1rZXjv+raxXBflttdjr8/OX12duZoRPwrIg5H/7Y0P96ijO9euvZZlqwb143UjP/SR1p+PhbM6nGjuOoC3fTk4uS9xp27+XHE/mKj+JPqSkB6HvdFxP6D6yvj7FNfHWi27+7xt1BcX31qlb6MeKJy/pdiVfy5pPX65Nj2mJ05Opa3ino//Xzl9Wbl31P8HZCe/x0N2381/uGkdr12Ye1lXPnl06Zzyjbb/4p+k7b/gWRlV/pgcnFxfjxiIHm1nB8of2Kl26P+uInl49P4Dx9q3P/3xPK/xIMRkTbihyLi4Yg4mNX9kYh4NCIOtYj/hxcfe2f98W+sNP7pu5//t5+snv+miXxtu25X37nvvynvyU/ZcIv4k2hw/o+XU4ezLe18/rWs6fy9tGYAAADYegoRsSuSwmg1XSiMjlb+v/ze2FGYnVtYPHJ67r0L05XfCAxHfyG/0jVUvR4aS+PZtD6/PjqxKn8su278ed9gOT86NTc73e3gocftbNL/U7/2dbt2wIbrwDoasEWtt/+XSqWPOlwVYJP5/ofepf9D72rQ/wdX5ZvfIwDY0ooNMjUT+7+WfycM3G+ajf+vbXI9gM1n/g+9S/+H3qX/Q0/KfglfjLZ+Lb9BifTzp+kxfRHRrYo1SZRK2+vvcrAZiYEOvuGu1XdJGFrb+0RhjYUmtW1s+xru0VCXiG43gDUm/sxutrkJZaVdaX6weW9qP9HtTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDO+DsAAP//wc7YrA==") r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x9b7e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) 1m29.734818065s ago: executing program 3 (id=2930): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b0100"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0xa, 0x148, 0x0, 0x10, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @local, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg2\x00', {0xffffffffffffffff, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x200}}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x2, 0x7, [0x0, 0x10, 0x1b, 0x2b, 0x37, 0x2e, 0x2b, 0x18, 0x2b, 0x34, 0xd, 0x0, 0x3d, 0x1, 0x32, 0x37], 0x1, 0x6, 0x1570000000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x428) 1m29.069212674s ago: executing program 3 (id=2941): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="3e3a1ef16be042eeb4f16ab74342b4e9b3627285d9d5bb1bd9da14580e046a9f12f4612e67c1d3fad996b88b7afbb672f5ae7f179b47fc35eea2400fa7712f02b121224a3088777245de53fdf0393828da8e0a124f7668c06bf4f005e8d9bad3aed90be0b3e404e03f4d7fe86d641dc82aae0cec1d388933f21ffbf8cc46d2e3321534ecb1c8df79306a842863d04cf04d422f30ff45cb65b9d483e662c4d534cd69ec1ed58739f26566", @ANYRES32, @ANYRES8], 0x1, 0x123d, &(0x7f0000002200)="$eJzs3E1rY9UfB/BfOn36d/59UMfRGRAPiqCbMO3CjW6KdEAmoHSmixlByNhbDb0kpTcUIuLoyvcigrgWxJ1uuvEdCO66cTmieKRNMrXTIHQojcjns8lJzvnenHNvcuFc7rkHb+7lnKv6VrMbE7VaTOxEpIcpUkzE0Gfx2hs//PjC7bv3bq02GmvrKd1cvbP8ekpp4cXv3vvkq5e+716eiYVvZ2J/6f2DX1d+2b+6f+3gzzsftarUqlK7003NdL/T6Tbvl0XabFXb9ZTeLYtmVaRWuyp2+/WXIqIs0lbZ2dnppWZ7c35uZ7eoqtRs99J20UvdTuru9lLzw2arner1epqfC85u8lFp48uHOeeInKdiOnLO+X8xF5fj/zEfC7E4uRRPxdPxTFyJZ+NqPBfPxzc/f907TAAAAAAAAAAAAAAAAAAAAADn5x/X/8fp9f/XjlrF1Lj7DQAAAAAAAAAAAAAAAAAAAP8lt+/eu7XaaKytpzQbUX6xt7G30X/t169uRSvKKOJGLMYfcbT6P+fa4KkBOd98u7F2Ix1Zis/LB4P8g72NS8f54dMClob5fCK/3M+nk/mZmJuOiOH3r8RiXBmdXxmZn41XX/5b/+uxGD99EJ0oYzMOs8f5T5dTeuudxmP560ft+iZH7LlXLuLwAAAAwLmoD+bOaWr0/L3+qMHj9f386OsDedT1gRPz68Ps9VHTai5U1ft4u1muD96VZbHb/0ThyQu1we/6vLc8Pd5x/ZZz/jfs3rEUhv+U01UzEfHEW65FxFlTv+ecz2FcsyfOAKfbHNZNj+msxEU5Pujj7gkAAAAAAAAAAABncRF3UI57jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFztwLAAAAAAgzN86jY4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+CoAAP//VSLIQQ==") creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) 1m28.926922182s ago: executing program 3 (id=2945): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0x8d29f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x9, 0x1, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) 1m28.758223182s ago: executing program 3 (id=2948): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x19, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m28.758023021s ago: executing program 34 (id=2948): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x19, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m26.922524579s ago: executing program 0 (id=2979): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9) 1m26.811438935s ago: executing program 0 (id=2980): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r1 = syz_open_pts(r0, 0x141601) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) 1m26.777653567s ago: executing program 0 (id=2981): socket$inet6(0xa, 0x805, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000400"], 0x30}], 0x1, 0x0) 1m26.72423677s ago: executing program 0 (id=2982): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="3e3a1ef16be042eeb4f16ab74342b4e9b3627285d9d5bb1bd9da14580e046a9f12f4612e67c1d3fad996b88b7afbb672f5ae7f179b47fc35eea2400fa7712f02b121224a3088777245de53fdf0393828da8e0a124f7668c06bf4f005e8d9bad3aed90be0b3e404e03f4d7fe86d641dc82aae0cec1d388933f21ffbf8cc46d2e3321534ecb1c8df79306a842863d04cf04d422f30ff45cb65b9d483e662c4d534cd69ec1ed58739f26566", @ANYRES32, @ANYRES8], 0x1, 0x123d, &(0x7f0000002200)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) 1m26.651014664s ago: executing program 0 (id=2983): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf25050000000c00018008000100", @ANYRES32=r3, @ANYBLOB="240003801c0003801800018008000100040000000c0001800800810004000000040002"], 0x44}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) 1m26.354151681s ago: executing program 0 (id=2989): r0 = syz_io_uring_setup(0x7131, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f0000000500)=0x0, &(0x7f0000000380)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0xe7f, 0xe876, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000100)='F', 0x1) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 1m26.353831102s ago: executing program 35 (id=2989): r0 = syz_io_uring_setup(0x7131, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f0000000500)=0x0, &(0x7f0000000380)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0xe7f, 0xe876, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000100)='F', 0x1) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 55.769136269s ago: executing program 2 (id=3865): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000480)=@gcm_128={{0x304}, "68c40110c3a2c2a1", "43ce39d444a021c82eca1cc4bc46c789", '/:)N', "5f7b960b7f9d5422"}, 0x28) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x4040000, 0x0, 0x0) 55.644638756s ago: executing program 2 (id=3866): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 55.621287208s ago: executing program 2 (id=3868): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x100d, &(0x7f0000002500)=""/4109, 0x0, 0xc}, 0x94) 55.548214112s ago: executing program 2 (id=3870): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) r0 = syz_io_uring_setup(0x1a0, &(0x7f0000000380)={0x0, 0x60d0, 0x1, 0x0, 0x3df}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6003, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001700)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x28, 0x0, 0x0) 55.40211571s ago: executing program 2 (id=3871): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000080)={r2, r3+60000000}, 0xfffffffffffffffe) 54.665122343s ago: executing program 2 (id=3890): socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x35, 0x9d}}], 0x58}, 0x40) 54.602314517s ago: executing program 36 (id=3890): socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x35, 0x9d}}], 0x58}, 0x40) 23.703174343s ago: executing program 9 (id=4632): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x2}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23.496824105s ago: executing program 9 (id=4637): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) 23.311594876s ago: executing program 9 (id=4642): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x54, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x14c7da0b}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan0\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x8084) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23.221523031s ago: executing program 9 (id=4646): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 23.151579195s ago: executing program 9 (id=4649): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x28203, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) unshare(0x400) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x3d13, 0x0) 23.033357452s ago: executing program 9 (id=4651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x3ff, 0x3}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x6, 0x8}}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) 23.022436902s ago: executing program 37 (id=4651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x3ff, 0x3}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x6, 0x8}}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) 1.723327651s ago: executing program 1 (id=5234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002240)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) 1.611357417s ago: executing program 1 (id=5237): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x26, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.493783224s ago: executing program 1 (id=5241): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 1.105660216s ago: executing program 6 (id=5244): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x40) 980.278544ms ago: executing program 6 (id=5246): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) 900.897778ms ago: executing program 1 (id=5249): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x400a2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x7, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 833.653642ms ago: executing program 7 (id=5252): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa0}, 0x40041) 758.133536ms ago: executing program 7 (id=5254): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x1000, 0x9}, 0x0, 0x10000, 0x0, 0x1, 0x408, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) 731.047678ms ago: executing program 7 (id=5256): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb881}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x7}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14) 658.167482ms ago: executing program 7 (id=5259): r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) setresuid(0x0, 0xee00, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x48800, 0x50) 546.103339ms ago: executing program 1 (id=5260): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x25, 0x0, 0x0, 0xfffffffa, 0x60000000, 0x0, 0xffffffffffffffa9, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x50) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0) 545.797839ms ago: executing program 7 (id=5261): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x88, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000060f000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x4fed, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f3}) 545.287639ms ago: executing program 4 (id=5262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x2000040) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 541.443359ms ago: executing program 1 (id=5263): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) 531.422469ms ago: executing program 7 (id=5264): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x243e, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 520.06526ms ago: executing program 4 (id=5265): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xa}, 0x40, 0x0, 0x0, 0x0, 0x1, 0xbb6ed56, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$ITER_CREATE(0xb, 0x0, 0x0) 506.022721ms ago: executing program 4 (id=5266): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RVERSION(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000065ffff89"], 0x15) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) 461.293784ms ago: executing program 8 (id=5269): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb881}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x7}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14) 441.966565ms ago: executing program 8 (id=5270): fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 424.182706ms ago: executing program 4 (id=5271): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000)="826bb66f", 0x18, 0x0, 0x0, 0x0) 417.476976ms ago: executing program 8 (id=5272): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 404.531557ms ago: executing program 4 (id=5273): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000240)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802, 0x0) pwritev2(r0, &(0x7f0000000480)=[{&(0x7f0000000100)="c1", 0x1}], 0x1, 0x5412, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) preadv2(r1, &(0x7f0000001040)=[{&(0x7f0000001900)=""/4096, 0x5491}], 0x1, 0x1000, 0x4005, 0x8) 346.011891ms ago: executing program 4 (id=5274): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @private0, 0x8}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) 341.500501ms ago: executing program 8 (id=5275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000500)={@void, @void, @eth={@random="d06d0b76b77d", @link_local, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @gre={{0x6, 0x4, 0x1, 0x2, 0x5c, 0x65, 0x0, 0x80, 0x2f, 0x0, @private=0xa010101, @multicast2, {[@timestamp={0x44, 0x4, 0x6b, 0x0, 0x7}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0xb, 0x1, 0x9, 0x1, 0x0, 0x1, 0x0, 0x6}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x31, 0x3, 0x1, 0x3, 0x1, 0x59}, 0x2, {0x67e8, 0x81, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x6}}}}}}}, 0x72) 290.923674ms ago: executing program 8 (id=5276): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0xd, 0x1, 0x7, 0x0, 0xa2, 0x2, 0x3e, 0xd035, 0x15e, 0x38, 0x348, 0x200, 0x400, 0x20, 0x1, 0x8, 0x1, 0x8}, [{0x4, 0xa14, 0x2, 0x7, 0x1, 0x7, 0x0, 0x3}]}, 0x58) ftruncate(r0, 0x100) 82.473316ms ago: executing program 6 (id=5277): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xa}, 0x40, 0x0, 0x0, 0x0, 0x1, 0xbb6ed56, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$ITER_CREATE(0xb, 0x0, 0x0) 50.192057ms ago: executing program 6 (id=5278): eventfd2(0x51cc, 0x80801) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.91862ms ago: executing program 8 (id=5279): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x40) 3.44734ms ago: executing program 6 (id=5280): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 6 (id=5281): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x18, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x1c025, 0xac5d, 0x0, 0x4, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) fallocate(r0, 0x0, 0x0, 0x2000402) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0x40440c4) kernel console output (not intermixed with test programs): ft with an inconsistent configuration, please check. [ 147.686329][T12580] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3619'. [ 147.726464][T12584] loop2: detected capacity change from 0 to 7 [ 147.816831][T12592] netem: change failed [ 147.929614][T12601] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3628'. [ 147.945985][T12601] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.017268][T12610] sctp: [Deprecated]: syz.7.3631 (pid 12610) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.017268][T12610] Use struct sctp_sack_info instead [ 148.565641][T12648] batadv_slave_0: entered promiscuous mode [ 148.649346][T12647] batadv_slave_0: left promiscuous mode [ 148.767681][T12666] batadv0: entered promiscuous mode [ 148.775495][T12666] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 149.498757][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 149.498771][ T29] audit: type=1326 audit(1770159152.605:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12675 comm="syz.6.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1ebaeb9 code=0x7ffc0000 [ 149.565495][ T29] audit: type=1326 audit(1770159152.645:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12675 comm="syz.6.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1ebaeb9 code=0x7ffc0000 [ 149.589208][ T29] audit: type=1326 audit(1770159152.645:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12675 comm="syz.6.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f26d1ebaeb9 code=0x7ffc0000 [ 149.612733][ T29] audit: type=1326 audit(1770159152.645:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12675 comm="syz.6.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1ebaeb9 code=0x7ffc0000 [ 149.636310][ T29] audit: type=1326 audit(1770159152.645:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12675 comm="syz.6.3660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1ebaeb9 code=0x7ffc0000 [ 149.679101][ T29] audit: type=1400 audit(1770159152.795:1503): avc: denied { write } for pid=12689 comm="syz.7.3664" path="socket:[35421]" dev="sockfs" ino=35421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 149.935146][T12716] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3676'. [ 150.034762][T12722] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 150.042163][ T29] audit: type=1400 audit(1770159153.155:1504): avc: denied { write } for pid=12723 comm="syz.6.3681" path="socket:[35500]" dev="sockfs" ino=35500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 150.077080][ T29] audit: type=1400 audit(1770159153.185:1505): avc: denied { mount } for pid=12727 comm="syz.4.3684" name="/" dev="hugetlbfs" ino=36199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 150.100224][ T29] audit: type=1400 audit(1770159153.185:1506): avc: denied { execute } for pid=12727 comm="syz.4.3684" path="/file1" dev="hugetlbfs" ino=36200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 150.130742][ T29] audit: type=1326 audit(1770159153.235:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12729 comm="syz.6.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1ebaeb9 code=0x7ffc0000 [ 150.462310][T12742] loop4: detected capacity change from 0 to 128 [ 150.528060][ T23] kernel read not supported for file /vcs (pid: 23 comm: kworker/1:0) [ 150.719248][T12758] xt_hashlimit: size too large, truncated to 1048576 [ 151.110990][T12778] batadv_slave_0: entered promiscuous mode [ 151.189359][T12777] batadv_slave_0: left promiscuous mode [ 151.377633][T12792] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 151.434162][T12802] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3713'. [ 152.154124][T12854] loop6: detected capacity change from 0 to 128 [ 152.296923][T12864] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3740'. [ 152.388601][T12873] loop6: detected capacity change from 0 to 1024 [ 152.474084][T12873] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3744: bg 0: block 392: padding at end of block bitmap is not set [ 152.488937][T12873] EXT4-fs (loop6): Remounting filesystem read-only [ 152.865015][T12912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3761'. [ 152.942577][T12912] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.106702][T12925] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 153.175732][T12939] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3772'. [ 153.331703][T12954] loop2: detected capacity change from 0 to 7 [ 153.384941][T12958] batadv0: entered promiscuous mode [ 153.404582][T12967] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3782'. [ 153.408850][T12958] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 153.430303][T12960] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 153.507086][T12972] netlink: 'syz.2.3784': attribute type 83 has an invalid length. [ 153.695525][T12996] delete_channel: no stack [ 153.850107][T13014] loop7: detected capacity change from 0 to 512 [ 153.878310][T13014] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 153.905221][T13014] EXT4-fs (loop7): 1 truncate cleaned up [ 153.943719][T13014] EXT4-fs error (device loop7): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.7.3800: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 153.972489][T13014] EXT4-fs error (device loop7) in ext4_delete_entry:2737: Corrupt filesystem [ 154.350404][T13053] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3818'. [ 154.384501][T13053] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3818'. [ 154.543022][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 154.543037][ T29] audit: type=1326 audit(1770159157.655:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13054 comm="syz.4.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65eb8faeb9 code=0x7ffc0000 [ 154.577121][ T31] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.594754][ T29] audit: type=1326 audit(1770159157.655:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13054 comm="syz.4.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f65eb8faeb9 code=0x7ffc0000 [ 154.619101][ T29] audit: type=1326 audit(1770159157.655:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13054 comm="syz.4.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65eb8faeb9 code=0x7ffc0000 [ 154.642610][ T29] audit: type=1326 audit(1770159157.655:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13054 comm="syz.4.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65eb8faeb9 code=0x7ffc0000 [ 154.702037][ T31] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.762688][ T31] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.851240][ T31] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.915818][T13094] loop4: detected capacity change from 0 to 2048 [ 154.929260][T13094] EXT4-fs: Ignoring removed orlov option [ 154.935013][T13094] EXT4-fs: Ignoring removed oldalloc option [ 155.001932][T13094] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #2: comm syz.4.3834: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 155.002757][ T31] bridge_slave_1: left allmulticast mode [ 155.025168][ T31] bridge_slave_1: left promiscuous mode [ 155.030914][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.068463][ T31] bridge_slave_0: left allmulticast mode [ 155.074185][ T31] bridge_slave_0: left promiscuous mode [ 155.079854][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.271095][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.288404][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.315323][ T31] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 155.326002][ T31] batadv0: left promiscuous mode [ 155.335047][ T31] bond0 (unregistering): Released all slaves [ 155.364561][ T31] bond1 (unregistering): Released all slaves [ 155.372551][ T29] audit: type=1400 audit(1770159158.485:1583): avc: denied { bind } for pid=13121 comm="syz.2.3839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.446667][ T31] hsr_slave_0: left promiscuous mode [ 155.457613][ T29] audit: type=1400 audit(1770159158.565:1584): avc: denied { read } for pid=13127 comm="syz.4.3842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 155.479633][ T31] hsr_slave_1: left promiscuous mode [ 155.485296][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.492729][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.569412][ T29] audit: type=1326 audit(1770159158.675:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13133 comm="syz.8.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a523aeb9 code=0x7ffc0000 [ 155.592971][ T29] audit: type=1326 audit(1770159158.675:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13133 comm="syz.8.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a523aeb9 code=0x7ffc0000 [ 155.629968][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.637434][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.655974][ T31] veth1_macvtap: left promiscuous mode [ 155.662313][ T31] veth0_macvtap: left promiscuous mode [ 155.672374][ T31] veth1_vlan: left promiscuous mode [ 155.672690][ T29] audit: type=1326 audit(1770159158.785:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13133 comm="syz.8.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f58a523aeb9 code=0x7ffc0000 [ 155.683150][ T31] veth0_vlan: left promiscuous mode [ 155.711443][ T29] audit: type=1326 audit(1770159158.825:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13133 comm="syz.8.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a523aeb9 code=0x7ffc0000 [ 155.776211][T13140] loop6: detected capacity change from 0 to 512 [ 155.785789][T13140] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 155.792975][T13140] EXT4-fs (loop6): 1 truncate cleaned up [ 155.817880][T13140] EXT4-fs error (device loop6): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.6.3846: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 155.818046][T13140] EXT4-fs error (device loop6) in ext4_delete_entry:2737: Corrupt filesystem [ 155.930717][ T31] team0 (unregistering): Port device team_slave_1 removed [ 155.940813][ T31] team0 (unregistering): Port device team_slave_0 removed [ 156.027665][T13077] chnl_net:caif_netlink_parms(): no params data found [ 156.045488][T13155] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3851'. [ 156.096466][T13155] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3851'. [ 156.122041][T13164] loop6: detected capacity change from 0 to 128 [ 156.186406][T13077] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.193533][T13077] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.216274][T13077] bridge_slave_0: entered allmulticast mode [ 156.240981][T13077] bridge_slave_0: entered promiscuous mode [ 156.258136][T13182] loop8: detected capacity change from 0 to 256 [ 156.259022][T13077] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.271604][T13077] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.283115][ T3323] bio_check_eod: 212 callbacks suppressed [ 156.283133][ T3323] kworker/u8:5: attempt to access beyond end of device [ 156.283133][ T3323] loop6: rw=1, sector=145, nr_sectors = 16 limit=128 [ 156.297708][T13077] bridge_slave_1: entered allmulticast mode [ 156.309001][T13077] bridge_slave_1: entered promiscuous mode [ 156.349855][ T3323] kworker/u8:5: attempt to access beyond end of device [ 156.349855][ T3323] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 156.371933][T13193] loop4: detected capacity change from 0 to 1024 [ 156.373127][T13077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.390342][T13193] EXT4-fs: Ignoring removed orlov option [ 156.396273][ T3323] kworker/u8:5: attempt to access beyond end of device [ 156.396273][ T3323] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 156.410588][T13193] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 156.430479][T13077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.431935][ T3323] kworker/u8:5: attempt to access beyond end of device [ 156.431935][ T3323] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 156.456514][ T3323] kworker/u8:5: attempt to access beyond end of device [ 156.456514][ T3323] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 156.469963][ T3323] kworker/u8:5: attempt to access beyond end of device [ 156.469963][ T3323] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 156.482874][T13077] team0: Port device team_slave_0 added [ 156.484558][ T3323] kworker/u8:5: attempt to access beyond end of device [ 156.484558][ T3323] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 156.507995][T13077] team0: Port device team_slave_1 added [ 156.508896][T13193] EXT4-fs mount: 15 callbacks suppressed [ 156.508911][T13193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.527937][T13077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.539434][T13077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.560405][ T3323] kworker/u8:5: attempt to access beyond end of device [ 156.560405][ T3323] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 156.565653][T13077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.597418][T13077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.604504][T13077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.630436][T13077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.652829][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.675043][ T3323] kworker/u8:5: attempt to access beyond end of device [ 156.675043][ T3323] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 156.689264][T13216] loop2: detected capacity change from 0 to 1024 [ 156.691765][ T3323] kworker/u8:5: attempt to access beyond end of device [ 156.691765][ T3323] loop6: rw=1, sector=297, nr_sectors = 8 limit=128 [ 156.727213][T13216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.755186][T13225] netlink: 'syz.4.3869': attribute type 4 has an invalid length. [ 156.788376][T13077] hsr_slave_0: entered promiscuous mode [ 156.818220][T13077] hsr_slave_1: entered promiscuous mode [ 156.828018][T13077] debugfs: 'hsr0' already exists in 'hsr' [ 156.833806][T13077] Cannot create hsr debugfs directory [ 156.841206][T13225] netlink: 'syz.4.3869': attribute type 4 has an invalid length. [ 156.857506][T13233] syzkaller1: entered promiscuous mode [ 156.863086][T13233] syzkaller1: entered allmulticast mode [ 156.865183][T13236] loop6: detected capacity change from 0 to 2048 [ 156.902236][T13236] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.939083][T10422] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.079381][T13255] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 157.159286][T13267] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3881'. [ 157.348087][T13077] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 157.355619][T12682] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.384545][T13077] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 157.392754][T13296] loop4: detected capacity change from 0 to 512 [ 157.413430][T13296] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 157.413853][T13077] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 157.442433][T13296] EXT4-fs (loop4): 1 truncate cleaned up [ 157.448645][T13296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.479857][T13296] EXT4-fs error (device loop4): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.4.3886: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 157.508774][T13296] EXT4-fs error (device loop4) in ext4_delete_entry:2737: Corrupt filesystem [ 157.509897][T13077] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 157.575621][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.593512][ T3483] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.656725][ T3483] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.729942][T13334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3894'. [ 157.750727][ T3483] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.772919][T13077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.795530][T13077] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.810735][T13339] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 157.817394][ T3483] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.837439][T13339] syzkaller1: tun_chr_ioctl cmd 35108 [ 157.847704][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.854830][ T3323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.912585][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.919661][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.040114][T13077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.105987][ T3483] bond1 (unregistering): (slave geneve2): Releasing active interface [ 158.171033][ T3483] bond0 (unregistering): left promiscuous mode [ 158.184590][ T3483] bond0 (unregistering): Released all slaves [ 158.197223][ T3483] bond1 (unregistering): Released all slaves [ 158.229289][T13329] chnl_net:caif_netlink_parms(): no params data found [ 158.251961][ T3483] tipc: Left network mode [ 158.280647][ T3483] dummy0: left promiscuous mode [ 158.295735][ T3483] hsr_slave_0: left promiscuous mode [ 158.301635][ T3483] hsr_slave_1: left promiscuous mode [ 158.425430][T13329] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.433231][T13329] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.440503][T13329] bridge_slave_0: entered allmulticast mode [ 158.447042][T13329] bridge_slave_0: entered promiscuous mode [ 158.454381][T13329] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.461494][T13329] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.468559][T13329] bridge_slave_1: entered allmulticast mode [ 158.474995][T13329] bridge_slave_1: entered promiscuous mode [ 158.487153][T13077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.513410][T13417] loop6: detected capacity change from 0 to 256 [ 158.532784][T13329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.550583][T13329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.576721][T13423] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3916'. [ 158.599759][T13329] team0: Port device team_slave_0 added [ 158.613808][T13329] team0: Port device team_slave_1 added [ 158.661932][T13329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.669001][T13329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.694970][T13329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.708215][T13329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.715192][T13329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.741228][T13329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.797261][ T3483] IPVS: stop unused estimator thread 0... [ 158.818358][T13446] loop6: detected capacity change from 0 to 512 [ 158.823070][T13077] veth0_vlan: entered promiscuous mode [ 158.839330][T13446] EXT4-fs: Ignoring removed bh option [ 158.842363][T13077] veth1_vlan: entered promiscuous mode [ 158.844754][T13446] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.865024][T13446] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 158.893610][T13329] hsr_slave_0: entered promiscuous mode [ 158.910001][T13329] hsr_slave_1: entered promiscuous mode [ 158.918241][T13446] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 158.927908][T13077] veth0_macvtap: entered promiscuous mode [ 158.935238][T13077] veth1_macvtap: entered promiscuous mode [ 158.941252][T13446] EXT4-fs (loop6): orphan cleanup on readonly fs [ 158.951884][T13446] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.3909: Failed to acquire dquot type 1 [ 158.961243][T13077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.981429][T13446] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3909: Invalid block bitmap block 0 in block_group 0 [ 158.996900][T13446] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3909: Invalid block bitmap block 0 in block_group 0 [ 159.000001][T13077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.018002][T13446] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3909: Invalid block bitmap block 0 in block_group 0 [ 159.034030][T13446] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.3909: Failed to acquire dquot type 1 [ 159.058430][T13446] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.3909: Failed to acquire dquot type 1 [ 159.074122][ T42] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.103195][T13446] EXT4-fs (loop6): 1 orphan inode deleted [ 159.122785][ T42] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.122894][T13446] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 159.152657][T13467] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3917'. [ 159.160357][ T3438] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.169411][T13446] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.190663][ T3438] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.268100][T13329] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 159.321609][T13329] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 159.330670][T13329] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 159.350524][T13329] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 159.477883][T13329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.491696][T13329] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.529223][ T3438] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.536322][ T3438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.562476][ T3438] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.569563][ T3438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.625603][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 159.625618][ T29] audit: type=1400 audit(1770159162.735:1597): avc: denied { setopt } for pid=13536 comm="syz.8.3931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 159.672229][ T29] audit: type=1400 audit(1770159162.765:1598): avc: denied { write } for pid=13536 comm="syz.8.3931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 159.703135][T13518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.720591][T13518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.741302][T13329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.751354][T13549] loop8: detected capacity change from 0 to 1024 [ 159.775850][T13549] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.840482][ T29] audit: type=1326 audit(1770159162.945:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13532 comm="syz.6.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1ebaeb9 code=0x7ffc0000 [ 159.864043][ T29] audit: type=1326 audit(1770159162.945:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13532 comm="syz.6.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1ebaeb9 code=0x7ffc0000 [ 159.905811][T10896] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.977899][T13574] netlink: 92 bytes leftover after parsing attributes in process `syz.8.3934'. [ 160.026450][T13329] veth0_vlan: entered promiscuous mode [ 160.041826][T13329] veth1_vlan: entered promiscuous mode [ 160.060747][T13329] veth0_macvtap: entered promiscuous mode [ 160.071448][T13329] veth1_macvtap: entered promiscuous mode [ 160.141842][T13329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.152801][T13329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.222325][ T3438] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.238077][ T3438] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.257723][ T3438] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.283734][ T3438] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.313660][T13598] smc: net device bond0 applied user defined pnetid SYZ2 [ 160.330418][T13598] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3941'. [ 160.349386][T13598] smc: removing net device bond0 with user defined pnetid SYZ2 [ 160.364924][T13598] bond0 (unregistering): left promiscuous mode [ 160.371271][T13598] bond_slave_0: left promiscuous mode [ 160.376773][T13598] bond_slave_1: left promiscuous mode [ 160.391119][T13606] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3943'. [ 160.402608][T13598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.419570][T13598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.435956][T13598] bond0 (unregistering): Released all slaves [ 160.459534][T13606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.469865][T13606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.481106][T13606] bond0 (unregistering): Released all slaves [ 160.484094][T10422] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 160.495641][T10422] FAT-fs (loop6): Filesystem has been set read-only [ 160.502980][ T29] audit: type=1400 audit(1770159163.615:1601): avc: denied { unmount } for pid=10422 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 160.561663][T13613] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3945'. [ 160.570899][T13608] Falling back ldisc for ptm0. [ 160.622893][T13621] netlink: 'syz.6.3949': attribute type 4 has an invalid length. [ 160.661375][ T29] audit: type=1400 audit(1770159163.775:1602): avc: denied { ioctl } for pid=13626 comm="syz.7.3951" path="socket:[39392]" dev="sockfs" ino=39392 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 160.672317][T13621] netlink: 'syz.6.3949': attribute type 4 has an invalid length. [ 160.703632][ T29] audit: type=1400 audit(1770159163.815:1603): avc: denied { associate } for pid=13630 comm="syz.7.3952" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 160.764928][T13633] netlink: 'syz.7.3954': attribute type 3 has an invalid length. [ 160.772898][ T29] audit: type=1400 audit(1770159163.875:1604): avc: denied { name_bind } for pid=13636 comm="syz.8.3953" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 160.797496][T13639] set_capacity_and_notify: 1 callbacks suppressed [ 160.797510][T13639] loop8: detected capacity change from 0 to 128 [ 161.051479][T13663] netlink: 'syz.7.3967': attribute type 4 has an invalid length. [ 161.063063][T13663] netlink: 'syz.7.3967': attribute type 4 has an invalid length. [ 161.092316][T13668] loop8: detected capacity change from 0 to 512 [ 161.101022][T13668] EXT4-fs warning (device loop8): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 161.147020][ T3325] Bluetooth: hci0: Frame reassembly failed (-84) [ 161.296591][T13678] loop7: detected capacity change from 0 to 128 [ 161.314724][T13680] loop6: detected capacity change from 0 to 512 [ 161.343649][T13680] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.357030][T13680] ext4 filesystem being mounted at /247/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.400774][T10422] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.422973][ T52] bio_check_eod: 165 callbacks suppressed [ 161.423009][ T52] kworker/u8:3: attempt to access beyond end of device [ 161.423009][ T52] loop7: rw=1, sector=145, nr_sectors = 16 limit=128 [ 161.443219][ T52] kworker/u8:3: attempt to access beyond end of device [ 161.443219][ T52] loop7: rw=1, sector=169, nr_sectors = 8 limit=128 [ 161.457204][ T52] kworker/u8:3: attempt to access beyond end of device [ 161.457204][ T52] loop7: rw=1, sector=185, nr_sectors = 8 limit=128 [ 161.471388][ T52] kworker/u8:3: attempt to access beyond end of device [ 161.471388][ T52] loop7: rw=1, sector=201, nr_sectors = 8 limit=128 [ 161.484869][ T52] kworker/u8:3: attempt to access beyond end of device [ 161.484869][ T52] loop7: rw=1, sector=217, nr_sectors = 8 limit=128 [ 161.498522][ T52] kworker/u8:3: attempt to access beyond end of device [ 161.498522][ T52] loop7: rw=1, sector=233, nr_sectors = 8 limit=128 [ 161.512482][ T52] kworker/u8:3: attempt to access beyond end of device [ 161.512482][ T52] loop7: rw=1, sector=249, nr_sectors = 8 limit=128 [ 161.525823][ T52] kworker/u8:3: attempt to access beyond end of device [ 161.525823][ T52] loop7: rw=1, sector=265, nr_sectors = 8 limit=128 [ 161.540049][ T52] kworker/u8:3: attempt to access beyond end of device [ 161.540049][ T52] loop7: rw=1, sector=281, nr_sectors = 8 limit=128 [ 161.556316][ T52] kworker/u8:3: attempt to access beyond end of device [ 161.556316][ T52] loop7: rw=1, sector=297, nr_sectors = 8 limit=128 [ 161.688858][ T29] audit: type=1326 audit(1770159164.795:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13693 comm="syz.7.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc04aaeb9 code=0x7ffc0000 [ 161.713024][ T29] audit: type=1326 audit(1770159164.805:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13693 comm="syz.7.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc04aaeb9 code=0x7ffc0000 [ 161.853941][T13699] netlink: 'syz.7.3979': attribute type 1 has an invalid length. [ 161.861836][T13699] netlink: 16150 bytes leftover after parsing attributes in process `syz.7.3979'. [ 161.927454][T13709] loop9: detected capacity change from 0 to 512 [ 161.936383][T13709] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 162.119457][T13723] loop9: detected capacity change from 0 to 128 [ 162.517831][T13744] syzkaller0: entered promiscuous mode [ 162.524115][T13744] syzkaller0: entered allmulticast mode [ 162.595110][T13740] loop9: detected capacity change from 0 to 512 [ 162.615973][T13740] EXT4-fs: Ignoring removed i_version option [ 162.626491][T13740] EXT4-fs (loop9): 1 truncate cleaned up [ 162.633400][T13740] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.731797][T13329] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.757604][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4005'. [ 162.861855][T13774] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4019'. [ 162.969546][T13785] loop8: detected capacity change from 0 to 1024 [ 162.976574][T13785] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.983907][T13785] EXT4-fs: Ignoring removed bh option [ 163.014839][T13785] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.044648][T13785] xt_hashlimit: size too large, truncated to 1048576 [ 163.148836][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 163.154940][ T3726] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 163.215965][T13804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4020'. [ 163.256329][T10896] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.342442][T13815] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4026'. [ 163.495164][T13834] netlink: 'syz.9.4031': attribute type 3 has an invalid length. [ 163.576309][T13840] loop4: detected capacity change from 0 to 1024 [ 163.592624][T13840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.609203][T13840] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #16: comm syz.4.4034: missing EA_INODE flag [ 163.621282][T13840] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.4034: error while reading EA inode 16 err=-117 [ 163.633950][T13840] EXT4-fs error (device loop4): ext4_xattr_block_set:2220: inode #15: comm syz.4.4034: bad block 113 [ 163.647689][T13844] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4045'. [ 163.659625][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.765834][T13851] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4038'. [ 163.782164][T13851] bond0 (unregistering): left promiscuous mode [ 163.788340][T13851] bond_slave_0: left promiscuous mode [ 163.795191][T13851] bond_slave_1: left promiscuous mode [ 163.801543][T13851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.811239][T13851] bond_slave_0: left allmulticast mode [ 163.818637][T13851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.827689][T13851] bond_slave_1: left allmulticast mode [ 163.840505][T13851] bond0 (unregistering): Released all slaves [ 164.009863][T13875] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4057'. [ 164.019245][T13875] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4057'. [ 164.028087][T13875] netlink: 'syz.6.4057': attribute type 6 has an invalid length. [ 164.035978][T13875] netlink: 'syz.6.4057': attribute type 5 has an invalid length. [ 164.046944][ T52] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.046955][T13875] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4057'. [ 164.046983][T13875] netlink: 'syz.6.4057': attribute type 6 has an invalid length. [ 164.072356][ T52] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.081251][ T52] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.090156][ T52] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.202372][T13873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.228164][T13873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.270068][T13888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.282327][T13888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.293241][T13888] bond0 (unregistering): Released all slaves [ 164.474718][T13902] vhci_hcd vhci_hcd.0: invalid port number 0 [ 164.485266][T13904] loop8: detected capacity change from 0 to 512 [ 164.513596][T13904] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.529603][T13904] ext4 filesystem being mounted at /213/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.702613][T10896] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.865314][T13940] EXT4-fs warning (device loop4): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 165.226763][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 165.226777][ T29] audit: type=1400 audit(1770159168.335:1614): avc: denied { connect } for pid=13960 comm="syz.7.4086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 165.265705][ T29] audit: type=1400 audit(1770159168.365:1615): avc: denied { write } for pid=13960 comm="syz.7.4086" path="socket:[40974]" dev="sockfs" ino=40974 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 165.590093][T13986] EXT4-fs: Ignoring removed mblk_io_submit option [ 165.637776][T13986] EXT4-fs: Ignoring removed bh option [ 165.691838][T13986] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.741696][T13986] xt_hashlimit: size too large, truncated to 1048576 [ 165.957752][T13077] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.995149][T14019] set_capacity_and_notify: 2 callbacks suppressed [ 165.995167][T14019] loop9: detected capacity change from 0 to 1024 [ 166.040377][T14019] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.066630][T14006] loop8: detected capacity change from 0 to 512 [ 166.080117][T14006] EXT4-fs: Ignoring removed i_version option [ 166.106048][T14019] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #16: comm syz.9.4109: missing EA_INODE flag [ 166.120224][T14006] EXT4-fs (loop8): 1 truncate cleaned up [ 166.126321][T14019] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.4109: error while reading EA inode 16 err=-117 [ 166.155303][T14006] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.172495][T14019] EXT4-fs error (device loop9): ext4_xattr_block_set:2220: inode #15: comm syz.9.4109: bad block 113 [ 166.251713][T13329] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.267888][T10896] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.317575][T14033] validate_nla: 1 callbacks suppressed [ 166.317611][T14033] netlink: 'syz.8.4112': attribute type 6 has an invalid length. [ 166.330874][T14033] netlink: 'syz.8.4112': attribute type 5 has an invalid length. [ 166.357448][ T31] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.366371][ T31] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.378220][T14033] netlink: 'syz.8.4112': attribute type 6 has an invalid length. [ 166.386133][T14033] netlink: 'syz.8.4112': attribute type 5 has an invalid length. [ 166.396698][T14041] vhci_hcd vhci_hcd.0: invalid port number 0 [ 166.417709][ T31] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.428459][ T31] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.665996][T14065] loop6: detected capacity change from 0 to 1024 [ 167.021960][T14089] loop4: detected capacity change from 0 to 512 [ 167.039631][T14089] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 167.049492][T14089] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 167.058992][T14089] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 167.069853][T14089] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01d, mo2=0006] [ 167.114625][T14089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.126750][T14073] loop8: detected capacity change from 0 to 32768 [ 167.163266][ T29] audit: type=1400 audit(1770159170.275:1616): avc: denied { watch_reads } for pid=14088 comm="syz.4.4133" path="/862/file0" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.163492][ T3302] loop8: p1 p3 < > [ 167.279394][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.295529][T14094] __nla_validate_parse: 8 callbacks suppressed [ 167.295614][T14094] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4137'. [ 167.316193][T14073] loop8: p1 p3 < > [ 167.338870][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4136'. [ 167.347745][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4136'. [ 167.471980][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 167.474206][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 167.559535][ T3418] kernel write not supported for file bpf-prog (pid: 3418 comm: kworker/0:6) [ 167.592147][T12153] udevd[12153]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 167.603906][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 167.680639][ T29] audit: type=1400 audit(1770159170.795:1617): avc: denied { getopt } for pid=14125 comm="syz.6.4149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 167.712644][T14131] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14131 comm=syz.4.4152 [ 167.875243][ T29] audit: type=1400 audit(1770159170.985:1618): avc: denied { unmount } for pid=13077 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 167.947840][ T3387] kernel write not supported for file bpf-prog (pid: 3387 comm: kworker/0:3) [ 168.207380][T14135] loop6: detected capacity change from 0 to 32768 [ 168.249546][T14135] loop6: p1 p3 < > [ 168.409603][T14173] IPv6: NLM_F_CREATE should be specified when creating new route [ 168.442961][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 168.454522][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 168.570633][ T3418] kernel write not supported for file /input/event0 (pid: 3418 comm: kworker/0:6) [ 168.672998][T14196] loop9: detected capacity change from 0 to 512 [ 168.682789][ T29] audit: type=1400 audit(1770159171.795:1619): avc: denied { write } for pid=14197 comm="syz.7.4179" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 168.732297][T14196] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.758635][T14196] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.826048][T13329] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.004947][ T29] audit: type=1400 audit(1770159172.105:1620): avc: denied { name_connect } for pid=14212 comm="syz.7.4183" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 169.049690][T14217] IPv6: NLM_F_CREATE should be specified when creating new route [ 169.264529][T14231] ALSA: seq fatal error: cannot create timer (-16) [ 169.581745][T14246] SELinux: failed to load policy [ 169.868854][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 170.256571][ T29] audit: type=1400 audit(1770159173.365:1621): avc: denied { connect } for pid=14270 comm="syz.6.4205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 170.308278][ T52] tipc: Subscription rejected, illegal request [ 170.602418][T14295] loop8: detected capacity change from 0 to 512 [ 170.619125][T14295] EXT4-fs: Ignoring removed nobh option [ 170.634933][T14295] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.4210: iget: bad i_size value: 38620345925642 [ 170.667214][T14295] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4210: couldn't read orphan inode 15 (err -117) [ 170.733359][T14295] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.824699][ T29] audit: type=1326 audit(1770159173.935:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.9.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e21b9aeb9 code=0x7ffc0000 [ 170.848260][ T29] audit: type=1326 audit(1770159173.935:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.9.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e21b9aeb9 code=0x7ffc0000 [ 170.871821][ T29] audit: type=1326 audit(1770159173.935:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.9.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e21b9aeb9 code=0x7ffc0000 [ 170.895381][ T29] audit: type=1326 audit(1770159173.935:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.9.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e21b9aeb9 code=0x7ffc0000 [ 170.918955][ T29] audit: type=1326 audit(1770159173.935:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.9.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e21b9aeb9 code=0x7ffc0000 [ 170.942487][ T29] audit: type=1326 audit(1770159173.935:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.9.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e21b5b78e code=0x7ffc0000 [ 170.965982][ T29] audit: type=1326 audit(1770159173.935:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.9.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e21b9aeb9 code=0x7ffc0000 [ 170.989586][ T29] audit: type=1326 audit(1770159173.935:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.9.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e21b9aeb9 code=0x7ffc0000 [ 170.989844][T14313] sctp: [Deprecated]: syz.7.4212 (pid 14313) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.989844][T14313] Use struct sctp_sack_info instead [ 171.013098][ T29] audit: type=1326 audit(1770159173.935:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.9.4213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e21b9aeb9 code=0x7ffc0000 [ 171.453561][T14333] loop7: detected capacity change from 0 to 512 [ 171.539792][T14335] loop9: detected capacity change from 0 to 8192 [ 171.570819][ T3438] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm kworker/u8:7: bg 0: block 5: invalid block bitmap [ 171.586721][T14333] EXT4-fs (loop7): blocks per group (35) and clusters per group (32768) inconsistent [ 171.655612][ T3438] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 171.668123][ T3438] EXT4-fs (loop8): This should not happen!! Data will be lost [ 171.668123][ T3438] [ 171.677943][ T3438] EXT4-fs (loop8): Total free blocks count 0 [ 171.683974][ T3438] EXT4-fs (loop8): Free/Dirty block details [ 171.690034][ T3438] EXT4-fs (loop8): free_blocks=0 [ 171.694970][ T3438] EXT4-fs (loop8): dirty_blocks=2300 [ 171.700266][ T3438] EXT4-fs (loop8): Block reservation details [ 171.706297][ T3438] EXT4-fs (loop8): i_reserved_data_blocks=2300 [ 171.814204][T14344] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 171.834038][ T3438] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 244 with error 28 [ 172.497060][T14414] SELinux: failed to load policy [ 172.574333][T14416] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 172.581444][ T3418] IPVS: starting estimator thread 0... [ 172.669037][T14420] IPVS: using max 2160 ests per chain, 108000 per kthread [ 172.852385][T14445] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4244'. [ 173.135178][ T3438] tipc: Subscription rejected, illegal request [ 173.218999][T14488] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4260'. [ 173.974955][ T2963] IPVS: starting estimator thread 0... [ 173.982289][T14529] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 174.078741][T14532] IPVS: using max 2352 ests per chain, 117600 per kthread [ 174.284391][T14543] veth0: entered promiscuous mode [ 174.308610][T14543] veth0: left promiscuous mode [ 174.403849][T14552] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 174.422636][T14552] SELinux: failed to load policy [ 174.561410][T14564] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4295'. [ 174.704973][T14577] netlink: 'syz.4.4298': attribute type 3 has an invalid length. [ 174.721707][T14577] netlink: 'syz.4.4298': attribute type 3 has an invalid length. [ 174.794861][T14589] loop9: detected capacity change from 0 to 512 [ 174.831645][T14589] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.850190][T14589] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.872844][T14589] EXT4-fs error (device loop9): ext4_empty_dir:3084: inode #12: block 32: comm syz.9.4310: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 174.892162][T14589] EXT4-fs warning (device loop9): ext4_empty_dir:3087: inode #12: comm syz.9.4310: directory missing '.' [ 174.934906][T13329] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.205673][T14639] loop9: detected capacity change from 0 to 256 [ 175.535511][T14654] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4320'. [ 175.544527][T14654] netlink: 'syz.9.4320': attribute type 7 has an invalid length. [ 175.552709][T14654] netlink: 'syz.9.4320': attribute type 8 has an invalid length. [ 175.560517][T14654] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4320'. [ 175.572489][T14654] erspan0: entered promiscuous mode [ 175.578845][T14654] gretap0: entered promiscuous mode [ 175.584654][T14654] debugfs: 'hsr1' already exists in 'hsr' [ 175.590463][T14654] Cannot create hsr debugfs directory [ 175.631734][T14658] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4322'. [ 175.784533][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4326'. [ 175.886482][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 175.886499][ T29] audit: type=1326 audit(1770159178.985:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.8.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a523aeb9 code=0x7ffc0000 [ 175.916776][ T29] audit: type=1326 audit(1770159178.985:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.8.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a523aeb9 code=0x7ffc0000 [ 175.918338][T14675] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 175.941107][ T29] audit: type=1326 audit(1770159178.985:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.8.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a523aeb9 code=0x7ffc0000 [ 175.974717][ T29] audit: type=1326 audit(1770159178.985:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.8.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a523aeb9 code=0x7ffc0000 [ 175.998292][ T29] audit: type=1326 audit(1770159178.985:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.8.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a523aeb9 code=0x7ffc0000 [ 176.005052][T14679] loop7: detected capacity change from 0 to 128 [ 176.022571][ T29] audit: type=1326 audit(1770159178.985:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.8.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f58a523aeb9 code=0x7ffc0000 [ 176.051422][ T29] audit: type=1326 audit(1770159178.985:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.8.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a523aeb9 code=0x7ffc0000 [ 176.075250][T14675] SELinux: failed to load policy [ 176.080571][ T29] audit: type=1326 audit(1770159178.985:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.8.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f58a523aeb9 code=0x7ffc0000 [ 176.104100][ T29] audit: type=1326 audit(1770159178.985:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.8.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a523aeb9 code=0x7ffc0000 [ 176.140716][T14681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4331'. [ 176.152126][ T29] audit: type=1326 audit(1770159179.265:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14672 comm="syz.8.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f58a523aeb9 code=0x7ffc0000 [ 176.232992][T14693] loop7: detected capacity change from 0 to 256 [ 176.482398][T14715] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4347'. [ 176.491533][T14715] netlink: 'syz.4.4347': attribute type 7 has an invalid length. [ 176.499336][T14715] netlink: 'syz.4.4347': attribute type 8 has an invalid length. [ 176.507043][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4347'. [ 176.519268][T14715] erspan0: entered promiscuous mode [ 176.525174][T14715] ..0ªî{X¹¦: entered promiscuous mode [ 176.531644][T14715] hsr2: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 176.698588][T14733] loop7: detected capacity change from 0 to 512 [ 176.751808][T14733] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.767924][T14733] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.784088][T14733] EXT4-fs error (device loop7): ext4_empty_dir:3084: inode #12: block 32: comm syz.7.4356: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 176.803515][T14733] EXT4-fs warning (device loop7): ext4_empty_dir:3087: inode #12: comm syz.7.4356: directory missing '.' [ 176.830667][T13077] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.988324][T14752] loop7: detected capacity change from 0 to 512 [ 176.999721][T14752] FAT-fs (loop7): Directory bread(block 199916) failed [ 177.006862][T14752] FAT-fs (loop7): Directory bread(block 199917) failed [ 177.026506][T14752] FAT-fs (loop7): Directory bread(block 199918) failed [ 177.051168][T14752] FAT-fs (loop7): Directory bread(block 199919) failed [ 177.058085][T14752] FAT-fs (loop7): Directory bread(block 199920) failed [ 177.071442][T14752] FAT-fs (loop7): Directory bread(block 199921) failed [ 177.079431][T14752] FAT-fs (loop7): Directory bread(block 199922) failed [ 177.087384][T14752] FAT-fs (loop7): Directory bread(block 199923) failed [ 177.136462][T14752] FAT-fs (loop7): FAT read failed (blocknr 128) [ 177.275184][T14770] loop9: detected capacity change from 0 to 1024 [ 177.275712][T14770] EXT4-fs: Ignoring removed orlov option [ 177.291715][T14770] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.318260][T13329] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.403717][T14779] loop9: detected capacity change from 0 to 512 [ 177.423702][T14779] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 177.917770][T14809] loop8: detected capacity change from 0 to 256 [ 177.930521][T14809] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.391790][T14850] loop8: detected capacity change from 0 to 256 [ 178.400808][T14847] __nla_validate_parse: 4 callbacks suppressed [ 178.400878][T14847] netlink: 105116 bytes leftover after parsing attributes in process `syz.9.4405'. [ 178.484104][T14860] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4411'. [ 178.558250][T14869] loop6: detected capacity change from 0 to 512 [ 178.589528][T14869] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.604739][T14869] ext4 filesystem being mounted at /332/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.633515][T14869] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #18: comm syz.6.4415: corrupted inode contents [ 178.645658][T14869] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #18: comm syz.6.4415: mark_inode_dirty error [ 178.657236][T14869] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #18: comm syz.6.4415: corrupted inode contents [ 178.669747][T14869] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3001: inode #18: comm syz.6.4415: mark_inode_dirty error [ 178.683330][T14869] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3004: inode #18: comm syz.6.4415: mark inode dirty (error -117) [ 178.696441][T14869] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 178.721056][T10422] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.768277][T14879] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4419'. [ 178.826657][T14879] loop6: detected capacity change from 0 to 8192 [ 178.889315][T14889] netlink: 'syz.6.4422': attribute type 12 has an invalid length. [ 178.947610][T14898] loop6: detected capacity change from 0 to 256 [ 178.962606][T14898] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 179.041011][T14906] loop7: detected capacity change from 0 to 512 [ 179.052723][T14906] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 179.083839][T14906] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4431'. [ 179.206177][T14924] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 179.357786][T14947] xt_hashlimit: size too large, truncated to 1048576 [ 179.554300][T14959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.567941][T14959] ext4 filesystem being mounted at /922/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.695039][T14977] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.707368][T14977] ext4 filesystem being mounted at /274/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 179.745351][T14977] EXT4-fs error (device loop8): dx_make_map:1296: inode #2: block 63: comm syz.8.4462: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 179.766041][T14977] EXT4-fs error (device loop8) in do_split:2027: Corrupt filesystem [ 179.788654][T10896] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.051973][T14997] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4468'. [ 180.121567][T15001] EXT4-fs: inline encryption not supported [ 180.131313][T15001] EXT4-fs (loop7): 1 orphan inode deleted [ 180.139028][T15001] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.151651][T15001] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.152073][ T3438] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 1 [ 180.183822][T13077] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.186103][T15005] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 180.236512][T15009] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 180.350905][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.410920][T15027] netlink: 'syz.4.4481': attribute type 12 has an invalid length. [ 180.539994][T15038] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4488'. [ 180.692181][T15048] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 180.710669][T15046] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.724468][T15046] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.831500][T15057] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.876293][T15064] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4496'. [ 180.892732][T15057] ext4 filesystem being mounted at /138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 180.948503][T15057] EXT4-fs error (device loop7): dx_make_map:1296: inode #2: block 63: comm syz.7.4494: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 180.968299][T15057] EXT4-fs error (device loop7) in do_split:2027: Corrupt filesystem [ 181.015975][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 181.015990][ T29] audit: type=1326 audit(1770159184.125:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15068 comm="syz.9.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e21b9aeb9 code=0x7ffc0000 [ 181.051176][ T29] audit: type=1326 audit(1770159184.155:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15068 comm="syz.9.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e21b9aeb9 code=0x7ffc0000 [ 181.074761][ T29] audit: type=1326 audit(1770159184.155:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15068 comm="syz.9.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0e21b9aeb9 code=0x7ffc0000 [ 181.098989][ T29] audit: type=1326 audit(1770159184.155:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15068 comm="syz.9.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e21b9aeb9 code=0x7ffc0000 [ 181.122471][ T29] audit: type=1326 audit(1770159184.155:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15068 comm="syz.9.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e21b9aeb9 code=0x7ffc0000 [ 181.146750][ T29] audit: type=1326 audit(1770159184.155:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15068 comm="syz.9.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e21b9aeb9 code=0x7ffc0000 [ 181.171071][ T29] audit: type=1326 audit(1770159184.165:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15068 comm="syz.9.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e21b9aeb9 code=0x7ffc0000 [ 181.194729][ T29] audit: type=1326 audit(1770159184.165:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15068 comm="syz.9.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e21b9aeb9 code=0x7ffc0000 [ 181.218830][ T29] audit: type=1326 audit(1770159184.165:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15068 comm="syz.9.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e21b9aeb9 code=0x7ffc0000 [ 181.226921][T13077] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.242344][ T29] audit: type=1326 audit(1770159184.165:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15068 comm="syz.9.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e21b9aeb9 code=0x7ffc0000 [ 181.287411][T15071] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4499'. [ 181.508222][T10422] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.544757][T15085] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 181.569488][T15085] System zones: 0-1, 3-8 [ 181.586606][T15085] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 181.617807][T15075] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.651453][T15085] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.675467][T15075] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.704189][T15085] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: comm syz.9.4505: lblock 0 mapped to illegal pblock 0 (length 5) [ 181.717829][T15085] EXT4-fs error (device loop9): ext4_ext_remove_space:2955: inode #15: comm syz.9.4505: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 181.738192][T10896] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.745468][T15085] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: comm syz.9.4505: lblock 0 mapped to illegal pblock 0 (length 1) [ 181.796947][T15102] set_capacity_and_notify: 9 callbacks suppressed [ 181.796963][T15102] loop8: detected capacity change from 0 to 512 [ 181.824823][T13329] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 181.895342][T15102] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.919229][T15117] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4512'. [ 181.923272][T15102] ext4 filesystem being mounted at /281/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.953171][T15102] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #18: comm syz.8.4506: corrupted inode contents [ 181.968878][T15102] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #18: comm syz.8.4506: mark_inode_dirty error [ 181.980556][T15102] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #18: comm syz.8.4506: corrupted inode contents [ 181.992582][T15102] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3001: inode #18: comm syz.8.4506: mark_inode_dirty error [ 182.009397][T15102] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3004: inode #18: comm syz.8.4506: mark inode dirty (error -117) [ 182.022267][T15102] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -117) [ 182.047534][T10896] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.171412][T15131] loop8: detected capacity change from 0 to 8192 [ 182.200216][ T3302] loop8: p2 p3 p4 < > [ 182.208237][ T3302] loop8: p2 size 590592 extends beyond EOD, truncated [ 182.215904][ T3302] loop8: p3 start 589824 is beyond EOD, truncated [ 182.246988][T15131] loop8: p2 p3 p4 < > [ 182.251910][T15131] loop8: p2 size 590592 extends beyond EOD, truncated [ 182.268773][T15131] loop8: p3 start 589824 is beyond EOD, truncated [ 182.288288][T15144] loop9: detected capacity change from 0 to 512 [ 182.302128][T15144] EXT4-fs: inline encryption not supported [ 182.355158][T15154] loop4: detected capacity change from 0 to 512 [ 182.363381][T15144] EXT4-fs (loop9): 1 orphan inode deleted [ 182.369922][T15144] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.377707][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 182.385144][T12153] udevd[12153]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 182.402853][ T52] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 1 [ 182.426458][T15155] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4527'. [ 182.437214][T15154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.458033][T15144] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.465648][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 182.469803][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 182.513123][T15154] ext4 filesystem being mounted at /936/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.548749][T15154] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.4526: corrupted inode contents [ 182.570298][T13329] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.591852][T15154] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #18: comm syz.4.4526: mark_inode_dirty error [ 182.619109][T15154] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.4526: corrupted inode contents [ 182.648886][T15154] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #18: comm syz.4.4526: mark_inode_dirty error [ 182.697607][T15154] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #18: comm syz.4.4526: mark inode dirty (error -117) [ 182.730341][T15154] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 182.802081][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.060514][T15199] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 183.075325][T15199] netlink: 'syz.7.4543': attribute type 15 has an invalid length. [ 183.310684][T15215] loop4: detected capacity change from 0 to 256 [ 183.340653][T15215] vfat filesystem being mounted at /941/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 184.440344][T15259] loop6: detected capacity change from 0 to 256 [ 184.469055][T15259] vfat filesystem being mounted at /363/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 185.063655][T15278] loop8: detected capacity change from 0 to 1024 [ 185.145860][T15278] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 185.227309][T15278] System zones: 0-1, 3-8 [ 185.234707][T15278] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 185.307936][T15276] loop4: detected capacity change from 0 to 512 [ 185.328282][T15278] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.348395][T15278] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: comm syz.8.4586: lblock 0 mapped to illegal pblock 0 (length 5) [ 185.373343][T15276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.386778][T15276] ext4 filesystem being mounted at /946/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.398741][T15278] EXT4-fs error (device loop8): ext4_ext_remove_space:2955: inode #15: comm syz.8.4586: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 185.452299][T15292] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: comm syz.8.4586: lblock 0 mapped to illegal pblock 0 (length 1) [ 185.688259][T15304] __nla_validate_parse: 2 callbacks suppressed [ 185.688276][T15304] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4583'. [ 185.796272][T15309] loop8: detected capacity change from 0 to 1024 [ 185.812414][T15309] EXT4-fs: Ignoring removed oldalloc option [ 185.818464][T15309] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.910114][T15322] Invalid ELF header len 1 [ 186.197804][T15329] loop8: detected capacity change from 0 to 32768 [ 186.279543][ T3302] loop8: p1 p3 < p5 p6 > [ 186.284018][ T3302] loop8: partition table partially beyond EOD, truncated [ 186.541845][T15329] loop8: p1 p3 < p5 p6 > [ 186.546214][T15329] loop8: partition table partially beyond EOD, truncated [ 186.618423][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4596'. [ 186.628046][T15336] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4596'. [ 186.637012][T15336] netlink: 'syz.8.4596': attribute type 6 has an invalid length. [ 186.683603][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4596'. [ 186.692548][T15336] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4596'. [ 186.701443][T15336] netlink: 'syz.8.4596': attribute type 6 has an invalid length. [ 186.756815][T12153] udevd[12153]: inotify_add_watch(7, /dev/loop8p5, 10) failed: No such file or directory [ 186.756944][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 186.769949][ T3938] udevd[3938]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory [ 186.778475][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 186.834160][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 186.834299][T12153] udevd[12153]: inotify_add_watch(7, /dev/loop8p5, 10) failed: No such file or directory [ 186.859560][T15345] netlink: 'syz.8.4599': attribute type 15 has an invalid length. [ 187.018847][T11011] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.173487][T15351] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4602'. [ 187.182414][T15351] netlink: 'syz.6.4602': attribute type 5 has an invalid length. [ 187.190878][T15351] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4602'. [ 187.240451][T15351] geneve2: entered promiscuous mode [ 187.245800][T15351] geneve2: entered allmulticast mode [ 187.255433][ T3325] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 65535 - 0 [ 187.289699][ T3325] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 65535 - 0 [ 187.298539][ T3325] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 65535 - 0 [ 187.307913][ T3325] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 65535 - 0 [ 187.341397][T15360] Invalid ELF header len 1 [ 187.369665][T11012] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.407385][T15366] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4619'. [ 187.647562][T15372] loop7: detected capacity change from 0 to 32768 [ 187.700791][T15372] loop7: p1 p3 < p5 p6 > [ 187.705134][T15372] loop7: partition table partially beyond EOD, truncated [ 187.738831][T15386] IPv6: Can't replace route, no match found [ 188.331421][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 188.331437][ T29] audit: type=1400 audit(3917642840.444:1793): avc: denied { watch } for pid=15408 comm="syz.9.4625" path="/149/file0" dev="tmpfs" ino=787 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 188.463059][ T3483] Bluetooth: hci0: Frame reassembly failed (-84) [ 188.479544][T15422] loop8: detected capacity change from 0 to 512 [ 188.486258][T15422] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 188.514360][T15424] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4632'. [ 188.523284][T15424] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4632'. [ 188.532249][T15424] netlink: 'syz.9.4632': attribute type 7 has an invalid length. [ 188.554788][ T3438] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.563677][ T3438] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.572595][ T3438] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.581500][T15424] netlink: 'syz.9.4632': attribute type 7 has an invalid length. [ 188.589465][ T3438] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.614811][ T29] audit: type=1400 audit(3917642840.724:1794): avc: denied { mount } for pid=15427 comm="syz.6.4634" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 188.657242][ T29] audit: type=1400 audit(3917642840.764:1795): avc: denied { write } for pid=15429 comm="syz.8.4635" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 188.689671][ T29] audit: type=1326 audit(3917642840.794:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15431 comm="syz.6.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1ebaeb9 code=0x7ffc0000 [ 188.713257][ T29] audit: type=1326 audit(3917642840.794:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15431 comm="syz.6.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1ebaeb9 code=0x7ffc0000 [ 188.736889][ T29] audit: type=1326 audit(3917642840.794:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15431 comm="syz.6.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f26d1ebaeb9 code=0x7ffc0000 [ 188.760686][ T29] audit: type=1326 audit(3917642840.794:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15431 comm="syz.6.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1ebaeb9 code=0x7ffc0000 [ 188.784423][ T29] audit: type=1326 audit(3917642840.794:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15431 comm="syz.6.4636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1ebaeb9 code=0x7ffc0000 [ 188.910513][T15445] netlink: 'syz.9.4642': attribute type 5 has an invalid length. [ 188.921948][T15438] SELinux: failed to load policy [ 188.930071][T15445] geneve2: entered promiscuous mode [ 188.935279][T15445] geneve2: entered allmulticast mode [ 188.955907][ T3325] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 65535 - 0 [ 188.971646][ T3325] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 65535 - 0 [ 188.994769][ T3325] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 65535 - 0 [ 189.006195][ T3325] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 65535 - 0 [ 189.025858][ T29] audit: type=1400 audit(3917642841.124:1801): avc: denied { mount } for pid=15453 comm="syz.9.4646" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 189.058524][ T29] audit: type=1400 audit(3917642841.164:1802): avc: denied { unmount } for pid=13329 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 189.088937][T15461] netlink: 'syz.7.4647': attribute type 7 has an invalid length. [ 189.100545][T15461] netlink: 'syz.7.4647': attribute type 7 has an invalid length. [ 189.105561][ T52] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.119463][ T52] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.128254][ T52] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.148234][ T52] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.389806][T15468] chnl_net:caif_netlink_parms(): no params data found [ 189.446988][T15468] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.454086][T15468] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.480280][T15468] bridge_slave_0: entered allmulticast mode [ 189.496449][T15468] bridge_slave_0: entered promiscuous mode [ 189.505344][T15494] SELinux: failed to load policy [ 189.511060][T15468] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.518108][T15468] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.525376][T15468] bridge_slave_1: entered allmulticast mode [ 189.532085][T15468] bridge_slave_1: entered promiscuous mode [ 189.573132][T15468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.592899][T15468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.621029][T15468] team0: Port device team_slave_0 added [ 189.627499][T15468] team0: Port device team_slave_1 added [ 189.642931][T15468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.649932][T15468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.676320][T15468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.687440][T15468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.694378][T15468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.721258][T15468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.746349][T15468] hsr_slave_0: entered promiscuous mode [ 189.752824][T15468] hsr_slave_1: entered promiscuous mode [ 189.758801][T15468] debugfs: 'hsr0' already exists in 'hsr' [ 189.764517][T15468] Cannot create hsr debugfs directory [ 190.066174][T15468] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 190.078351][T15468] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 190.087794][T15468] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 190.096983][T15468] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 190.117331][T15468] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.124526][T15468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.131805][T15468] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.138881][T15468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.176373][T15468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.200129][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.213979][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.227850][T15468] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.241812][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.248916][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.270674][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.277807][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.346759][T15468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.471255][T15468] veth0_vlan: entered promiscuous mode [ 190.483507][T15468] veth1_vlan: entered promiscuous mode [ 190.508901][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 190.513429][T15468] veth0_macvtap: entered promiscuous mode [ 190.518923][ T3726] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 190.547286][T15468] veth1_macvtap: entered promiscuous mode [ 190.564272][T15468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.590640][T15468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.625305][ T3325] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.654886][ T3325] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.670327][ T3325] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.683307][ T3325] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.770123][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 190.784674][T15653] __nla_validate_parse: 9 callbacks suppressed [ 190.784689][T15653] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4680'. [ 190.800669][T15653] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4680'. [ 190.894567][ T52] Bluetooth: hci1: Frame reassembly failed (-84) [ 191.061577][T15703] SELinux: failed to load policy [ 191.169920][T15721] syzkaller1: entered promiscuous mode [ 191.175490][T15721] syzkaller1: entered allmulticast mode [ 191.412226][T15758] loop7: detected capacity change from 0 to 1024 [ 191.421189][T15758] EXT4-fs: Ignoring removed orlov option [ 191.444045][T15758] EXT4-fs mount: 4 callbacks suppressed [ 191.444067][T15758] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.490223][T15767] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 191.525042][T13077] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.698475][T15792] xt_hashlimit: size too large, truncated to 1048576 [ 191.890548][T15799] loop7: detected capacity change from 0 to 512 [ 191.939926][T15799] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 191.952701][T15799] ext4 filesystem being mounted at /191/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.994789][T13077] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 192.136649][T15813] loop6: detected capacity change from 0 to 1024 [ 192.143462][T15813] EXT4-fs: Ignoring removed orlov option [ 192.160484][T15813] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.186006][T10422] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.324896][T15824] netlink: 'syz.6.4718': attribute type 4 has an invalid length. [ 192.341734][T15824] netlink: 'syz.6.4718': attribute type 4 has an invalid length. [ 192.828742][ T3726] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 192.834866][T15674] Bluetooth: hci0: command 0x1003 tx timeout [ 192.913210][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 192.914473][ T3726] Bluetooth: hci1: command 0x1003 tx timeout [ 192.969382][T15839] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4726'. [ 193.020951][ T3483] Bluetooth: hci0: Frame reassembly failed (-84) [ 193.405257][T15867] SELinux: failed to load policy [ 193.426336][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 193.426351][ T29] audit: type=1400 audit(3917642845.534:1814): avc: denied { mount } for pid=15868 comm="syz.6.4739" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 193.454874][ T29] audit: type=1400 audit(3917642845.534:1815): avc: denied { mounton } for pid=15868 comm="syz.6.4739" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 193.563018][T15880] netlink: 'syz.6.4743': attribute type 12 has an invalid length. [ 193.570928][T15880] netlink: 'syz.6.4743': attribute type 29 has an invalid length. [ 193.579232][T15880] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4743'. [ 193.588237][T15880] netlink: 'syz.6.4743': attribute type 1 has an invalid length. [ 193.862653][ T9] kernel read not supported for file /ppp (pid: 9 comm: kworker/0:0) [ 193.878321][ T52] Bluetooth: hci1: Frame reassembly failed (-84) [ 194.457763][T15897] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4749'. [ 194.462892][T15898] loop4: detected capacity change from 0 to 512 [ 194.466928][T15897] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4749'. [ 194.492802][T15898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 194.505612][T15898] ext4 filesystem being mounted at /979/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.542750][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 194.618578][T15913] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15913 comm=syz.1.4757 [ 194.669501][T15920] loop4: detected capacity change from 0 to 1024 [ 194.679270][T15920] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 194.688097][T15920] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 194.701401][T15920] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 194.714323][T15920] EXT4-fs (loop4): orphan cleanup on readonly fs [ 194.727383][T15920] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.4760: Freeing blocks not in datazone - block = 0, count = 4096 [ 194.761208][T15920] EXT4-fs (loop4): Remounting filesystem read-only [ 194.777828][T15920] EXT4-fs (loop4): 1 orphan inode deleted [ 194.784854][T15925] netlink: 'syz.1.4762': attribute type 1 has an invalid length. [ 194.793364][T15920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 194.807029][T15910] loop6: detected capacity change from 0 to 256 [ 194.813756][T15910] vfat: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿ' [ 194.894310][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.003473][T15938] netlink: 'syz.1.4767': attribute type 12 has an invalid length. [ 195.012086][T15938] netlink: 'syz.1.4767': attribute type 29 has an invalid length. [ 195.020008][T15938] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4767'. [ 195.029059][T15938] netlink: 'syz.1.4767': attribute type 1 has an invalid length. [ 195.068915][T15674] Bluetooth: hci0: command 0x1003 tx timeout [ 195.075671][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 195.093589][T15946] loop1: detected capacity change from 0 to 512 [ 195.100757][T15946] EXT4-fs: Mount option(s) incompatible with ext2 [ 195.111380][T15948] loop4: detected capacity change from 0 to 2048 [ 195.159379][T15948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.227378][T15948] ext4 filesystem being mounted at /985/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.250329][T15953] netlink: 'syz.6.4773': attribute type 1 has an invalid length. [ 195.273468][T15948] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4772: bg 0: block 345: padding at end of block bitmap is not set [ 195.298573][T15948] EXT4-fs (loop4): Remounting filesystem read-only [ 195.321097][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.363988][T15963] loop6: detected capacity change from 0 to 1024 [ 195.383604][T15963] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 195.393414][T15963] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 195.409230][T15963] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 195.421390][T15963] EXT4-fs (loop6): orphan cleanup on readonly fs [ 195.427968][T15963] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.4776: Freeing blocks not in datazone - block = 0, count = 4096 [ 195.447559][T15963] EXT4-fs (loop6): Remounting filesystem read-only [ 195.454250][T15963] EXT4-fs (loop6): 1 orphan inode deleted [ 195.460989][T15963] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.507798][T10422] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.552686][T11012] kernel read not supported for file /ppp (pid: 11012 comm: kworker/1:7) [ 195.878504][ T29] audit: type=1400 audit(3917642847.984:1816): avc: denied { write } for pid=11012 comm="kworker/1:7" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=46851 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 195.949168][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 195.955205][ T3726] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 196.025128][T15848] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 196.077470][ T29] audit: type=1326 audit(3917642848.184:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15994 comm="syz.7.4789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc04aaeb9 code=0x7ffc0000 [ 196.101795][ T29] audit: type=1326 audit(3917642848.184:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15994 comm="syz.7.4789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc04aaeb9 code=0x7ffc0000 [ 196.125551][ T29] audit: type=1326 audit(3917642848.184:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15994 comm="syz.7.4789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cc04aaeb9 code=0x7ffc0000 [ 196.149264][ T29] audit: type=1326 audit(3917642848.184:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15994 comm="syz.7.4789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc04aaeb9 code=0x7ffc0000 [ 196.173425][ T29] audit: type=1326 audit(3917642848.184:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15994 comm="syz.7.4789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f3cc04aaeb9 code=0x7ffc0000 [ 196.196988][ T29] audit: type=1326 audit(3917642848.184:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15994 comm="syz.7.4789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc04aaeb9 code=0x7ffc0000 [ 196.221236][ T29] audit: type=1326 audit(3917642848.184:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15994 comm="syz.7.4789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cc04aaeb9 code=0x7ffc0000 [ 196.285954][T16008] loop4: detected capacity change from 0 to 512 [ 196.295851][T16008] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.4796: inode has both inline data and extents flags [ 196.312824][T16008] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4796: couldn't read orphan inode 15 (err -117) [ 196.325791][T16008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.353524][T16012] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4797'. [ 196.363163][T16012] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4797'. [ 196.375638][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.433917][T16016] veth0: entered promiscuous mode [ 196.457657][T16016] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4799'. [ 196.733394][T16043] sock: sock_set_timeout: `syz.8.4811' (pid 16043) tries to set negative timeout [ 196.782252][T16049] veth0: entered promiscuous mode [ 196.789472][ T3483] Bluetooth: hci0: Frame reassembly failed (-84) [ 196.800115][T16049] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4812'. [ 196.842446][T16054] loop6: detected capacity change from 0 to 512 [ 196.850208][T16054] EXT4-fs: Mount option(s) incompatible with ext2 [ 197.426785][T16086] loop7: detected capacity change from 0 to 1024 [ 197.448964][T16086] EXT4-fs: Ignoring removed oldalloc option [ 197.500183][T16086] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.520724][T16086] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 197.565658][T16102] loop8: detected capacity change from 0 to 128 [ 197.574126][T13077] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.610364][T16102] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 197.640077][T16102] ext4 filesystem being mounted at /332/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.674139][T16102] EXT4-fs error (device loop8): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.8.4834: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0 [ 197.769951][T10896] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.874931][T16122] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 197.965009][T16122] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.028836][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.033952][T16122] vfat filesystem being mounted at /213/bus supports timestamps until 2107-12-31 (0x10391447e) [ 198.334783][ T42] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.386416][T16136] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1332 [ 198.541566][T16146] SELinux: failed to load policy [ 198.588865][T16156] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4856'. [ 198.598484][T16156] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4856'. [ 198.627446][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 198.627462][ T29] audit: type=1400 audit(3917642850.734:1883): avc: denied { execmod } for pid=16157 comm="syz.1.4857" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=47308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 198.697302][T16163] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.709944][T16163] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 198.759802][T15468] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.829205][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 198.835324][ T3726] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 198.959278][T16191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4870'. [ 199.003039][T16191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4870'. [ 199.218540][T16224] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4887'. [ 199.235222][T16226] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4888'. [ 199.313052][T16234] EXT4-fs: Ignoring removed oldalloc option [ 199.332446][T16234] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.360747][T16234] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 199.390321][T10422] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.470305][T16247] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.522421][T10422] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.579323][T16262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.590292][T16262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.792528][T16293] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 199.901213][T16305] set_capacity_and_notify: 6 callbacks suppressed [ 199.901235][T16305] loop8: detected capacity change from 0 to 128 [ 199.917993][T16305] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 199.956955][T16305] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 199.969218][T16305] vfat filesystem being mounted at /343/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 200.191108][T16332] loop7: detected capacity change from 0 to 128 [ 200.198588][T16332] FAT-fs (loop7): Directory bread(block 414) failed [ 200.206059][T16332] FAT-fs (loop7): Directory bread(block 415) failed [ 200.215050][T16332] FAT-fs (loop7): Directory bread(block 416) failed [ 200.251195][T16332] FAT-fs (loop7): Directory bread(block 417) failed [ 200.257812][T16332] FAT-fs (loop7): Directory bread(block 418) failed [ 200.280106][T16332] FAT-fs (loop7): Directory bread(block 419) failed [ 200.286820][T16332] FAT-fs (loop7): Directory bread(block 420) failed [ 200.294407][T16332] FAT-fs (loop7): Directory bread(block 421) failed [ 200.302099][T16332] vfat filesystem being mounted at /237/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 200.324800][ T29] audit: type=1400 audit(3917642852.414:1884): avc: denied { mounton } for pid=16341 comm="syz.6.4942" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 200.400530][T16353] loop7: detected capacity change from 0 to 1024 [ 200.451053][T16353] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.547735][ T29] audit: type=1326 audit(3917642852.654:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16365 comm="syz.6.4952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1ebaeb9 code=0x7ffc0000 [ 200.571976][ T29] audit: type=1326 audit(3917642852.654:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16365 comm="syz.6.4952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1ebaeb9 code=0x7ffc0000 [ 200.595566][ T29] audit: type=1326 audit(3917642852.654:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16365 comm="syz.6.4952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1ebaeb9 code=0x7ffc0000 [ 200.620207][ T29] audit: type=1326 audit(3917642852.654:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16365 comm="syz.6.4952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1ebaeb9 code=0x7ffc0000 [ 200.643808][ T29] audit: type=1326 audit(3917642852.654:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16365 comm="syz.6.4952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f26d1ebaeb9 code=0x7ffc0000 [ 200.667952][ T29] audit: type=1326 audit(3917642852.654:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16365 comm="syz.6.4952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1ebaeb9 code=0x7ffc0000 [ 200.691599][T16347] loop1: detected capacity change from 0 to 32768 [ 200.698578][ T29] audit: type=1326 audit(3917642852.654:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16365 comm="syz.6.4952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1ebaeb9 code=0x7ffc0000 [ 200.722447][ T29] audit: type=1326 audit(3917642852.654:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16365 comm="syz.6.4952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f26d1ebaeb9 code=0x7ffc0000 [ 200.759424][T13077] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.784312][T16347] loop1: p1 p3 < > [ 200.832456][T16379] loop4: detected capacity change from 0 to 128 [ 200.842485][T16379] FAT-fs (loop4): Directory bread(block 414) failed [ 200.849316][T16379] FAT-fs (loop4): Directory bread(block 415) failed [ 200.857584][T16379] FAT-fs (loop4): Directory bread(block 416) failed [ 200.864356][ T3000] loop1: p1 p3 < > [ 200.868269][T16379] FAT-fs (loop4): Directory bread(block 417) failed [ 200.877034][T16379] FAT-fs (loop4): Directory bread(block 418) failed [ 200.883734][T16379] FAT-fs (loop4): Directory bread(block 419) failed [ 200.890738][T16379] FAT-fs (loop4): Directory bread(block 420) failed [ 200.897360][T16379] FAT-fs (loop4): Directory bread(block 421) failed [ 200.904452][T16379] vfat filesystem being mounted at /1010/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 201.140457][T16407] loop4: detected capacity change from 0 to 256 [ 201.166502][T16407] vfat filesystem being mounted at /1013/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 201.245144][T12153] udevd[12153]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 201.263489][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 201.334428][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 201.345045][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 201.544491][T16428] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16428 comm=syz.8.4975 [ 201.749471][T16451] loop7: detected capacity change from 0 to 512 [ 201.772008][T16451] EXT4-fs: Ignoring removed oldalloc option [ 201.798660][T16451] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: comm syz.7.4986: Parent and EA inode have the same ino 15 [ 201.814160][T16445] loop6: detected capacity change from 0 to 32768 [ 201.844957][T16451] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: comm syz.7.4986: Parent and EA inode have the same ino 15 [ 201.858472][T16451] EXT4-fs (loop7): 1 orphan inode deleted [ 201.868324][ T3300] loop6: p1 p2 p3 < p5 p6 > [ 201.869198][T16451] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.885724][ T3300] loop6: p2 size 16775168 extends beyond EOD, truncated [ 201.902424][ T3300] loop6: p5 start 4294970168 is beyond EOD, truncated [ 201.927950][T16445] loop6: p1 p2 p3 < p5 p6 > [ 201.942421][T16445] loop6: p2 size 16775168 extends beyond EOD, truncated [ 201.967038][T13077] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.981042][T16445] loop6: p5 start 4294970168 is beyond EOD, truncated [ 202.209466][ T3938] udevd[3938]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 202.210157][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 202.239850][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 202.251101][T12153] udevd[12153]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 202.286301][T12153] udevd[12153]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 202.289162][ T3938] udevd[3938]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 202.419224][T16501] loop1: detected capacity change from 0 to 512 [ 202.427310][T16501] EXT4-fs: Ignoring removed bh option [ 202.461819][T16501] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.507829][T16501] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 202.564493][T16480] loop8: detected capacity change from 0 to 32768 [ 202.578352][T15468] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.580322][T16513] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 202.599830][T16513] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.612099][T16513] vfat filesystem being mounted at /474/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 202.629551][T16480] loop8: p1 p3 < > [ 202.689444][T16517] __nla_validate_parse: 6 callbacks suppressed [ 202.689457][T16517] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5012'. [ 202.762118][T16526] vfat filesystem being mounted at /246/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 202.816396][T16529] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 202.836428][T16533] netlink: 'syz.7.5021': attribute type 1 has an invalid length. [ 202.844285][T16533] netlink: 'syz.7.5021': attribute type 4 has an invalid length. [ 202.852746][T16533] netlink: 15586 bytes leftover after parsing attributes in process `syz.7.5021'. [ 202.869256][T16529] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 202.880956][T16529] System zones: 1-12 [ 202.884953][T16529] EXT4-fs (loop8): orphan cleanup on readonly fs [ 202.925523][T16529] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5018: bg 0: block 361: padding at end of block bitmap is not set [ 202.948185][T16529] EXT4-fs (loop8): Remounting filesystem read-only [ 202.964999][T16529] EXT4-fs (loop8): 1 truncate cleaned up [ 202.971865][T16529] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 202.996459][T16544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5026'. [ 203.025626][T16544] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 203.086351][T16551] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 203.097998][T16551] EXT4-fs (loop4): 1 truncate cleaned up [ 203.104928][T16551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.150276][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.250052][T16557] SELinux: failed to load policy [ 203.503975][T10896] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 203.524915][T16568] netlink: 'syz.8.5035': attribute type 1 has an invalid length. [ 203.532813][T16568] netlink: 'syz.8.5035': attribute type 4 has an invalid length. [ 203.540564][T16568] netlink: 15586 bytes leftover after parsing attributes in process `syz.8.5035'. [ 203.582146][T16572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5036'. [ 203.672497][T16582] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 203.720330][T10896] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 203.734782][T16589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5045'. [ 203.758494][T16591] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5044'. [ 203.768087][T16591] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5044'. [ 203.809879][T16593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5046'. [ 203.883548][T16605] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 203.921960][T16609] EXT4-fs: Ignoring removed bh option [ 203.957881][T16609] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.980812][T16609] ext4 filesystem being mounted at /375/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.041876][T10896] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.062176][T16624] SELinux: failed to load policy [ 204.316789][T16665] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5080'. [ 204.392694][T16671] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 204.418170][T16671] vfat filesystem being mounted at /259/bus supports timestamps until 2107-12-31 (0x10391447e) [ 204.547982][T16683] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 204.556073][T16683] FAT-fs (loop7): Filesystem has been set read-only [ 204.572040][T16683] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 204.604262][T16644] loop4: p1 p2 p3 < p5 p6 > [ 204.614910][T16644] loop4: p2 size 16775168 extends beyond EOD, truncated [ 204.640028][T16644] loop4: p5 start 4294970168 is beyond EOD, truncated [ 204.927435][T16696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 204.976401][T15468] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 205.309761][T16732] set_capacity_and_notify: 9 callbacks suppressed [ 205.309777][T16732] loop8: detected capacity change from 0 to 1024 [ 205.320161][T16734] loop7: detected capacity change from 0 to 512 [ 205.363247][T16732] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.397109][T10896] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.582532][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 205.582547][ T29] audit: type=1326 audit(3917642857.694:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16750 comm="syz.8.5116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a523aeb9 code=0x7ffc0000 [ 205.615516][ T29] audit: type=1326 audit(3917642857.724:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16750 comm="syz.8.5116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f58a523aeb9 code=0x7ffc0000 [ 205.639857][ T29] audit: type=1326 audit(3917642857.724:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16750 comm="syz.8.5116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a523aeb9 code=0x7ffc0000 [ 205.663365][ T29] audit: type=1326 audit(3917642857.724:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16750 comm="syz.8.5116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f58a523aeb9 code=0x7ffc0000 [ 205.686665][ T29] audit: type=1326 audit(3917642857.724:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16750 comm="syz.8.5116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a523aeb9 code=0x7ffc0000 [ 205.711582][ T29] audit: type=1326 audit(3917642857.724:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16750 comm="syz.8.5116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a523aeb9 code=0x7ffc0000 [ 206.092600][T16786] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 206.100422][T16786] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 206.108178][T16786] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 206.115952][T16786] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 206.123847][T16786] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 206.131637][T16786] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 206.139442][T16786] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 206.147204][T16786] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 206.155021][T16786] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 206.162885][T16786] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 206.221448][ T29] audit: type=1400 audit(3917642858.324:1960): avc: denied { write } for pid=16789 comm="syz.4.5131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 206.316300][ T29] audit: type=1326 audit(3917642858.424:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16804 comm="syz.6.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1ebaeb9 code=0x7ffc0000 [ 206.340564][ T29] audit: type=1326 audit(3917642858.424:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16804 comm="syz.6.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f26d1ebaeb9 code=0x7ffc0000 [ 206.364101][ T29] audit: type=1326 audit(3917642858.424:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16804 comm="syz.6.5137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d1ebaeb9 code=0x7ffc0000 [ 206.720208][T16834] netlink: 'syz.4.5147': attribute type 1 has an invalid length. [ 207.364427][T16861] loop8: detected capacity change from 0 to 128 [ 207.371183][T16861] vfat: Unknown parameter 'uni_xlat0BqHDUe' [ 207.380681][T16863] loop4: detected capacity change from 0 to 256 [ 207.399064][T16863] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 207.410419][T16863] vfat filesystem being mounted at /1061/bus supports timestamps until 2107-12-31 (0x10391447e) [ 207.470680][T16863] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 207.478600][T16863] FAT-fs (loop4): Filesystem has been set read-only [ 207.485228][T16863] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 207.513967][T16866] loop1: detected capacity change from 0 to 1024 [ 207.541325][T16866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.578161][T15468] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.623275][T16881] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 208.030894][T16912] ªªªªªª: renamed from vlan0 (while UP) [ 208.359970][T16921] netlink: 'syz.1.5183': attribute type 7 has an invalid length. [ 208.371871][T16921] netlink: 'syz.1.5183': attribute type 7 has an invalid length. [ 208.371849][ T3483] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.388390][ T3483] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.397244][ T3483] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.406016][ T3483] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.780555][T16983] __nla_validate_parse: 16 callbacks suppressed [ 208.780573][T16983] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5189'. [ 208.801186][T16983] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5189'. [ 208.810632][T16983] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5189'. [ 209.094182][T17034] gretap1: entered allmulticast mode [ 209.765923][T17116] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 209.920682][T17134] netlink: 'syz.8.5213': attribute type 1 has an invalid length. [ 210.055728][T17140] loop8: detected capacity change from 0 to 128 [ 210.062456][T17140] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 210.075248][T17140] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 210.087279][T17140] vfat filesystem being mounted at /417/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 210.237684][T17152] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 210.533752][T17181] ªªªªªª: renamed from vlan0 [ 210.946949][T17189] loop6: detected capacity change from 0 to 32768 [ 211.009403][ T3302] loop6: p1 p3 < > [ 211.019845][T17189] loop6: p1 p3 < > [ 211.103381][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 211.103419][ T29] audit: type=1400 audit(3917642863.214:1977): avc: denied { setopt } for pid=17204 comm="syz.6.5244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 211.187861][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 211.199046][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 211.263273][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 211.266816][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 211.394050][T17224] ªªªªªª: renamed from vlan0 (while UP) [ 211.584127][ T29] audit: type=1400 audit(3917642863.694:1978): avc: denied { firmware_load } for pid=17232 comm="syz.8.5258" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 211.593627][T17227] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 211.848025][T17265] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 211.927210][T17275] loop8: detected capacity change from 0 to 1024 [ 211.940345][T17275] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 211.954422][T17275] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.967687][T17275] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: block 3: comm syz.8.5276: lblock 3 mapped to illegal pblock 3 (length 3) [ 211.982057][T17275] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 211.994383][T17275] EXT4-fs (loop8): This should not happen!! Data will be lost [ 211.994383][T17275] [ 212.004946][T17275] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 3: comm syz.8.5276: lblock 3 mapped to illegal pblock 3 (length 1) [ 212.019423][T17275] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 3: comm syz.8.5276: lblock 3 mapped to illegal pblock 3 (length 1) [ 212.034121][T17275] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 3: comm syz.8.5276: lblock 3 mapped to illegal pblock 3 (length 1) [ 212.048415][T17275] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 3: comm syz.8.5276: lblock 3 mapped to illegal pblock 3 (length 1) [ 212.062607][T17275] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 3: comm syz.8.5276: lblock 3 mapped to illegal pblock 3 (length 1) [ 212.076765][T17275] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 3: comm syz.8.5276: lblock 3 mapped to illegal pblock 3 (length 1) [ 212.090996][T17274] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 3: comm syz.8.5276: lblock 3 mapped to illegal pblock 3 (length 1) [ 212.107392][T17274] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 3: comm syz.8.5276: lblock 3 mapped to illegal pblock 3 (length 1) [ 212.127433][T17275] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 3: comm syz.8.5276: lblock 3 mapped to illegal pblock 3 (length 1) [ 212.185606][ T31] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 212.198000][ T31] EXT4-fs (loop8): This should not happen!! Data will be lost [ 212.198000][ T31] [ 212.214910][T10896] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 212.301336][T17289] ================================================================== [ 212.309422][T17289] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 212.316695][T17289] [ 212.319014][T17289] write to 0xffffc90001e47e18 of 8 bytes by task 17290 on cpu 1: [ 212.326717][T17289] shmem_fallocate+0x724/0x920 [ 212.331483][T17289] vfs_fallocate+0x3b6/0x450 [ 212.336048][T17289] __x64_sys_fallocate+0x7a/0xd0 [ 212.340968][T17289] x64_sys_call+0x1cd4/0x3000 [ 212.345624][T17289] do_syscall_64+0xc0/0x2a0 [ 212.350109][T17289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.355989][T17289] [ 212.358301][T17289] read to 0xffffc90001e47e18 of 8 bytes by task 17289 on cpu 0: [ 212.365900][T17289] shmem_writeout+0x2c1/0x920 [ 212.370558][T17289] shrink_folio_list+0x1e75/0x2710 [ 212.375654][T17289] evict_folios+0x2a4e/0x35b0 [ 212.380306][T17289] try_to_shrink_lruvec+0x5f6/0x960 [ 212.385494][T17289] shrink_lruvec+0x24e/0x1bc0 [ 212.390153][T17289] shrink_node+0x68e/0x2000 [ 212.394640][T17289] do_try_to_free_pages+0x404/0xcc0 [ 212.399819][T17289] try_to_free_mem_cgroup_pages+0x222/0x470 [ 212.405711][T17289] try_charge_memcg+0x37e/0xa10 [ 212.410536][T17289] obj_cgroup_charge_pages+0x23/0xc0 [ 212.415820][T17289] __memcg_kmem_charge_page+0x9e/0x170 [ 212.421268][T17289] __alloc_frozen_pages_noprof+0x18a/0x350 [ 212.427062][T17289] alloc_pages_mpol+0xb3/0x260 [ 212.431805][T17289] alloc_pages_noprof+0x8f/0x130 [ 212.436727][T17289] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 212.442602][T17289] __kvmalloc_node_noprof+0x471/0x680 [ 212.447956][T17289] ip_set_alloc+0x24/0x30 [ 212.452267][T17289] hash_netiface_create+0x282/0x740 [ 212.457450][T17289] ip_set_create+0x3cf/0x970 [ 212.462018][T17289] nfnetlink_rcv_msg+0x509/0x5d0 [ 212.466936][T17289] netlink_rcv_skb+0x123/0x220 [ 212.471682][T17289] nfnetlink_rcv+0x167/0x1720 [ 212.476339][T17289] netlink_unicast+0x5c0/0x690 [ 212.481082][T17289] netlink_sendmsg+0x5c8/0x6f0 [ 212.485821][T17289] ____sys_sendmsg+0x5af/0x600 [ 212.490558][T17289] ___sys_sendmsg+0x195/0x1e0 [ 212.495208][T17289] __x64_sys_sendmsg+0xd4/0x160 [ 212.500033][T17289] x64_sys_call+0x17ba/0x3000 [ 212.504701][T17289] do_syscall_64+0xc0/0x2a0 [ 212.509185][T17289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.515067][T17289] [ 212.517362][T17289] value changed: 0x0000000000000203 -> 0x0000000000000204 [ 212.524437][T17289] [ 212.526733][T17289] Reported by Kernel Concurrency Sanitizer on: [ 212.532867][T17289] CPU: 0 UID: 0 PID: 17289 Comm: syz.6.5281 Not tainted syzkaller #0 PREEMPT(voluntary) [ 212.542644][T17289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 212.552674][T17289] ================================================================== [ 212.875916][T17288] syz.6.5281 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 212.886963][T17288] CPU: 0 UID: 0 PID: 17288 Comm: syz.6.5281 Not tainted syzkaller #0 PREEMPT(voluntary) [ 212.887026][T17288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 212.887047][T17288] Call Trace: [ 212.887056][T17288] [ 212.887064][T17288] __dump_stack+0x1d/0x30 [ 212.887131][T17288] dump_stack_lvl+0x95/0xd0 [ 212.887151][T17288] dump_stack+0x15/0x1b [ 212.887170][T17288] dump_header+0x80/0x240 [ 212.887190][T17288] oom_kill_process+0x295/0x350 [ 212.887220][T17288] out_of_memory+0x97d/0xb80 [ 212.887284][T17288] try_charge_memcg+0x62e/0xa10 [ 212.887309][T17288] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 212.887342][T17288] __read_swap_cache_async+0x17b/0x2d0 [ 212.887450][T17288] swap_cluster_readahead+0x262/0x3c0 [ 212.887483][T17288] swapin_readahead+0xde/0x840 [ 212.887513][T17288] ? __perf_event_task_sched_in+0xa65/0xad0 [ 212.887589][T17288] ? __rcu_read_unlock+0x4e/0x70 [ 212.887616][T17288] ? swap_cache_get_folio+0x26f/0x280 [ 212.887645][T17288] do_swap_page+0x59b/0x2a50 [ 212.887746][T17288] ? finish_task_switch+0x79/0x280 [ 212.887773][T17288] ? __schedule+0x82d/0xc90 [ 212.887791][T17288] ? __rcu_read_lock+0x36/0x50 [ 212.887853][T17288] ? __pfx_default_wake_function+0x10/0x10 [ 212.887883][T17288] handle_mm_fault+0xb40/0x3030 [ 212.887914][T17288] ? vma_start_read+0x1c7/0x2c0 [ 212.887980][T17288] do_user_addr_fault+0x62f/0x1050 [ 212.888019][T17288] exc_page_fault+0x62/0xa0 [ 212.888041][T17288] asm_exc_page_fault+0x26/0x30 [ 212.888126][T17288] RIP: 0033:0x7f26d1e760b8 [ 212.888141][T17288] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 212.888158][T17288] RSP: 002b:00007ffcb2c826c0 EFLAGS: 00010246 [ 212.888175][T17288] RAX: 0000000000000000 RBX: 000055559252b500 RCX: 00007f26d1e7b78e [ 212.888252][T17288] RDX: 00007ffcb2c82710 RSI: 0000000000000000 RDI: 0000000000000000 [ 212.888265][T17288] RBP: 00007f26d2137da0 R08: 0000000000000000 R09: 0000000000000000 [ 212.888277][T17288] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000003401f [ 212.888290][T17288] R13: 00007f26d213618c R14: 0000000000033ea5 R15: 00007f26d2136180 [ 212.888309][T17288] [ 212.888318][T17288] memory: usage 307200kB, limit 307200kB, failcnt 689 [ 213.111965][T17288] memory+swap: usage 308108kB, limit 9007199254740988kB, failcnt 0 [ 213.119868][T17288] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 213.127135][T17288] Memory cgroup stats for /syz6: [ 213.127690][T17288] cache 0 [ 213.135548][T17288] rss 0 [ 213.138350][T17288] shmem 0 [ 213.141324][T17288] mapped_file 0 [ 213.144768][T17288] dirty 0 [ 213.147676][T17288] writeback 0 [ 213.151054][T17288] workingset_refault_anon 231 [ 213.155717][T17288] workingset_refault_file 0 [ 213.160234][T17288] swap 929792 [ 213.163509][T17288] swapcached 0 [ 213.166852][T17288] pgpgin 110820 [ 213.170309][T17288] pgpgout 110820 [ 213.173919][T17288] pgfault 134981 [ 213.177438][T17288] pgmajfault 151 [ 213.180981][T17288] inactive_anon 0 [ 213.184664][T17288] active_anon 0 [ 213.188093][T17288] inactive_file 0 [ 213.191723][T17288] active_file 0 [ 213.195166][T17288] unevictable 0 [ 213.198743][T17288] hierarchical_memory_limit 314572800 [ 213.204120][T17288] hierarchical_memsw_limit 9223372036854771712 [ 213.210279][T17288] total_cache 0 [ 213.213809][T17288] total_rss 0 [ 213.217076][T17288] total_shmem 0 [ 213.220603][T17288] total_mapped_file 0 [ 213.224568][T17288] total_dirty 0 [ 213.228000][T17288] total_writeback 0 [ 213.231946][T17288] total_workingset_refault_anon 231 [ 213.237142][T17288] total_workingset_refault_file 0 [ 213.242228][T17288] total_swap 929792 [ 213.246074][T17288] total_swapcached 0 [ 213.249990][T17288] total_pgpgin 110820 [ 213.253956][T17288] total_pgpgout 110820 [ 213.257993][T17288] total_pgfault 134981 [ 213.262053][T17288] total_pgmajfault 151 [ 213.266105][T17288] total_inactive_anon 0 [ 213.270254][T17288] total_active_anon 0 [ 213.274218][T17288] total_inactive_file 0 [ 213.278345][T17288] total_active_file 0 [ 213.282315][T17288] total_unevictable 0 [ 213.286356][T17288] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.5281,pid=17288,uid=0 [ 213.301023][T17288] Memory cgroup out of memory: Killed process 17288 (syz.6.5281) total-vm:94264kB, anon-rss:1208kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 213.369261][T17289] syz.6.5281 (17289) used greatest stack depth: 5600 bytes left