last executing test programs: 9m39.867833424s ago: executing program 32 (id=233): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') exit(0x9) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x3) getdents(r1, 0x0, 0x0) 9m37.241267674s ago: executing program 33 (id=265): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="40010000", @ANYRES16=r3, @ANYBLOB="3f8200000000fddbdf271700000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x20040000}, 0x24044004) 9m10.528688192s ago: executing program 34 (id=525): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) r1 = eventfd2(0x2, 0x80800) io_submit(r0, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0x0, 0x800002, 0x0, 0x0, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r1, 0x0, 0x0, 0x5, 0x0, 0x1, r1}]) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) 8m39.218716841s ago: executing program 35 (id=1338): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f000000b940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="420bb6", 0x3}], 0x1}}], 0x1, 0x400c404) syz_emit_ethernet(0x83, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)="9789b5f1c6", 0x5}], 0x1}}], 0x1, 0x84) 8m31.663857097s ago: executing program 36 (id=1478): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0x9a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6a000000006411fffe8000000000000000000000002300aafe8000000000000000000000000000aa4e1d4e20"], 0x0) 8m27.912087261s ago: executing program 37 (id=1551): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 8m4.806596499s ago: executing program 38 (id=2165): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x12, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x4}]}}]}, 0x48}}, 0x0) 7m11.244176335s ago: executing program 39 (id=3496): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0xe357, 0x0, 0x4, 0x1000000}, &(0x7f00000001c0), &(0x7f0000000580)) unshare(0x2a020400) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f00000000c0)=r0, 0x1) 6m21.659612093s ago: executing program 40 (id=4594): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x2, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) r1 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x02Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\xff\xec\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\xf3H\xf9\x7f\x102\x83\x9b\xdaR\a\xfeU\xc8\xc3\xa76\xe7%\x0eyx\x15\n\xe3l\x98\xcf\xbaU6\xf9\xb5S21Bk\xad\xe60P\xa2c)\xca\xc4`_\x15\xc4\t\xaa\xc4e\x12\x103\xf9\xc4\xba\x86[N\xb27BD\xab`\xae\x1c&\xdb\ns\x8c\x92\xe0\xa52\b\x8bj\x01X\xfa\xf2\x8b\xe1\xf9\n\xc4Ux\xa9\x1b\xc6\xad\xb4\xf0\xba+\x91/&\x81\xba\xa5\x8em0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 5m49.344098555s ago: executing program 43 (id=5345): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={r3, 0x0, &(0x7f00000005c0)=""/32}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r2, &(0x7f00000005c0)}, 0x20) 5m30.838847096s ago: executing program 44 (id=5704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) 5m29.852472712s ago: executing program 45 (id=5726): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 4m35.177991347s ago: executing program 46 (id=6557): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xff}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 4m6.451457582s ago: executing program 47 (id=7350): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e63, 0x0, @mcast2, 0x26}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 3m52.32956851s ago: executing program 0 (id=7566): r0 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r2, &(0x7f0000000140)=""/25, 0x19, 0x4) 3m52.259699705s ago: executing program 0 (id=7567): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x104000, 0x0) 3m52.174698787s ago: executing program 0 (id=7569): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x19196, 0x20000, 0x43a1bd76, 0x4, 0x2c9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000e000001000000000000000807010000080700ffe5"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0xfa, &(0x7f0000000300)=""/250}, 0x94) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', 0x100c404, &(0x7f0000000280)=ANY=[], 0x1, 0x1ff, &(0x7f0000000580)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'vlan0\x00', {0xc21}, 0x1}) 3m37.082808564s ago: executing program 48 (id=7569): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x19196, 0x20000, 0x43a1bd76, 0x4, 0x2c9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000e000001000000000000000807010000080700ffe5"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0xfa, &(0x7f0000000300)=""/250}, 0x94) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', 0x100c404, &(0x7f0000000280)=ANY=[], 0x1, 0x1ff, &(0x7f0000000580)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'vlan0\x00', {0xc21}, 0x1}) 2m58.026998972s ago: executing program 2 (id=8307): timer_create(0x7, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000000b000/0x1000)=nil) mount$tmpfs(0x0, 0x0, 0x0, 0x400, 0x0) ppoll(0x0, 0x0, &(0x7f0000000780)={0x77359400}, 0x0, 0x0) 2m57.955573737s ago: executing program 2 (id=8308): syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m57.895539514s ago: executing program 2 (id=8311): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x8000200d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)={0x40002002}) epoll_wait(r1, &(0x7f0000000400)=[{}], 0x1, 0xd) 2m57.811829877s ago: executing program 2 (id=8314): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) 2m57.811292897s ago: executing program 2 (id=8316): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 2m57.651899154s ago: executing program 2 (id=8317): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c000000000000000000ff03000000000000000000000000000000000000fcffffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000fe652f06997f400002000000000000080000000000000000010000000400000044000500000000de010300000000000000000000fffffffc3c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @private0, 0x4}, {0xa, 0x0, 0x7, @mcast1}, r3, 0x800}}, 0x48) 2m57.606641615s ago: executing program 49 (id=8317): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c000000000000000000ff03000000000000000000000000000000000000fcffffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000fe652f06997f400002000000000000080000000000000000010000000400000044000500000000de010300000000000000000000fffffffc3c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @private0, 0x4}, {0xa, 0x0, 0x7, @mcast1}, r3, 0x800}}, 0x48) 1m53.562742731s ago: executing program 1 (id=9263): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000bc0)={0x8, 0x5, 0x0, 0x9, 0x5, "4dd56300010400", 0x7, 0xa6}) read(r2, 0x0, 0x0) 1m52.611818494s ago: executing program 1 (id=9273): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c093, 0x2, @perf_config_ext={0x6fa, 0x7}, 0x4, 0x0, 0x10000, 0x6, 0x0, 0x80000001, 0xa5, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m52.352040391s ago: executing program 1 (id=9279): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x100, 0x0) getdents64(r2, &(0x7f0000000000)=""/89, 0x59) 1m52.316343943s ago: executing program 1 (id=9281): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@debug}, {@acl}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0xb6c, &(0x7f00000017c0)="$eJzs3M9rHFUcAPDvm2y2aRtNiqLWi4EeGihufkmhxUOLeFMQrOCxwaRt7PYHTUTbiym9KhTUP6AHTx5S8NCDl549epEevEsxKJSeIzP7I9smm02bTQfSzwcm+9687L7vzDdvMm/YmQBeWmP5jyzicETcThEjzfVZRFSL0lDEcuP37s3cvZAvKdbWPv03RYqIlZm7F1qflZqvB5sfMBQRfyynmLm1sd/F6zcuztbr89ea9YmlS1cnFq/feHfh0uz5+fPzl6dOnDg+OT194vhk37b12PiRn1a+/vCfO/cmHv/8wbFfUpyK4WZb53b0y1iMtffJ0z7rd2clGYiISkfuc6lSYkAAAGwp6ziHOxwjMRDrJ28jUVsoNTgAAACgL76NiDUAAABgj0vm/wAAALDHtb4HsDJz90JrKfcbCbxIq6cjYrSR/9b93Y2WSiwXr0MxGBEHHqXovK03Nd62Y2MRcfX2rYV8iV26D5vulm9GxFubjf9U5H+0uIt/Y/6ziOjHnfljT9Xl/8XaSf5P9aF/+QcAAHgx7p9uTOQ3zv+y9vWf2GT+N7DJ3O159J7/ZQ/70A1drJ6OeL/j2Y73OvLfNDrQrL1SXA8YTOcW6vOTEfFqRIzH4L68PrVFHwsf//Zmt7bO63/5kvffuhbYjONhZd+T75mbXZrdyTazbvVmxNuVzfKf2uM/dbn++8k2+/j+yx9Wu7X1zj+7ae1OxNFNx//6Ez3T1s9nnSiOBxOto8JGnw//tdKtf/kvVz7+D2yd/+L4335e7+Kz93G2+t1r3dqe9/hfTWeKAKvNdd/MLi1dm4qopo82rp9+4u3Zs2/B3tHaH639led//Mjm//+3Ov7nfxNnt9nn418fnenWZvyXK8//XI/xn54Y/89e+O/P39/o1v/2xv97RTDjzTXO/3rbboLKjhMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBfsogYjpTV2uUsq9UiDkbE63Egq19ZXDp27spXl+fytojRGMzOLdTnJyNipFFPeX2qKK/Xp5+qz0TEoYj4cWR/Ua99caU+V/bGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0HYwIoYjZbWIyIpyltVqjba/R8qODgAAAOib0bIDAAAAAHad+T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO3TonfsPUkQsn9xfLLlqs22w1MiA3ZaVHQBQmoGyAwBKUyk7AKA05vhA6tE+1LXFGQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAy+To4fsPUkQsn9xfLLlqs22w1MiA3ZaVHQBQmoGyAwBKUyk7AKA05vhA6tE+1LXFGQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAy2Tx+o2Ls/X6/DUFBQWFdqHsIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB72f8BAAD//4rO4cs=") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) 1m52.128763804s ago: executing program 1 (id=9284): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000010000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000080000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x40) 1m51.022629765s ago: executing program 1 (id=9297): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) io_setup(0x2007, &(0x7f0000000980)=0x0) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_destroy(r2) 1m50.946454689s ago: executing program 50 (id=9297): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) io_setup(0x2007, &(0x7f0000000980)=0x0) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_destroy(r2) 1m50.579772753s ago: executing program 4 (id=9306): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) 1m50.101696285s ago: executing program 4 (id=9314): syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x6, 0x2, 0x80000001, 0xa5, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1cb201, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) 1m49.999373804s ago: executing program 4 (id=9315): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) open_by_handle_at(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES32=r0], 0x0) 1m49.947604643s ago: executing program 4 (id=9316): prlimit64(0x0, 0x8, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xd9, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x394, &(0x7f0000000700)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x14c) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x44c00, 0xe898d2275f586997) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 1m49.563691193s ago: executing program 4 (id=9319): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1, 0x4) read$watch_queue(r2, &(0x7f0000000100)=""/97, 0x61) vmsplice(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) write(r0, 0x0, 0x0) 1m48.696698184s ago: executing program 4 (id=9326): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0xa, 0x20002f7}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m48.672967999s ago: executing program 51 (id=9326): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0xa, 0x20002f7}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m41.853920828s ago: executing program 7 (id=9405): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x2a11, 0x400, 0x1, 0x40000335}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m41.444171603s ago: executing program 7 (id=9411): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@delalloc}, {@data_journal}, {@barrier_val={'barrier', 0x3d, 0x3}}, {}, {@abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@nogrpid}, {@nouid32}, {@nobh}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x56b, &(0x7f0000000240)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff}) 1m41.305509594s ago: executing program 7 (id=9412): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r2, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r2, 0xd3) 1m41.184212879s ago: executing program 7 (id=9415): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) umount2(&(0x7f0000000140)='./file0/../file0\x00', 0xa) 1m41.075821967s ago: executing program 7 (id=9417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2b, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xb}, {0x0, 0xfff1}, {0x0, 0x2}}, [{0x8, 0xb, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1m40.141452023s ago: executing program 7 (id=9432): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x108) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) getdents64(r2, 0x0, 0x0) 1m40.083131671s ago: executing program 52 (id=9432): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x108) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) getdents64(r2, 0x0, 0x0) 8.383686254s ago: executing program 5 (id=10915): openat$ppp(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x24000106) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) writev(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_nanosleep(0xfffffffffffffffe, 0x1, 0x0, 0x0) 8.027793961s ago: executing program 5 (id=10917): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x439, 0x0, 0x5fffd, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1fe}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) sendto$packet(r0, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c865c6b96e84000050016f37fe8c0295f5c", 0x3d, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) 8.012995128s ago: executing program 5 (id=10919): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) 7.978043421s ago: executing program 5 (id=10921): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x54d, &(0x7f0000000580)="$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") 7.862132536s ago: executing program 5 (id=10922): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)='m', 0xffffff4c}]) io_destroy(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2a08018, &(0x7f0000000000)={[{@noblock_validity}, {@delalloc}]}, 0x3, 0x49e, &(0x7f0000002140)="$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") 7.067847792s ago: executing program 5 (id=10932): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@deltaction={0x18, 0x31, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000842}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0x280) 7.067648962s ago: executing program 53 (id=10932): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@deltaction={0x18, 0x31, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000842}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0x280) 1.806620733s ago: executing program 6 (id=10987): ioperm(0x1000, 0x1000, 0x8000000000000001) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 1.510217722s ago: executing program 9 (id=10992): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101240, 0x10a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 1.509992282s ago: executing program 0 (id=10933): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x48e4, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x40}}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x80000, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000071401"], 0x18}}, 0x0) 1.489401677s ago: executing program 8 (id=10995): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f00000046c0)=[{{0x0, 0x0, 0x0}, 0xc8b}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r1, &(0x7f0000000380)="89", 0x1) 1.265925071s ago: executing program 9 (id=10997): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r1, 0x2000) 1.239649516s ago: executing program 9 (id=10998): r0 = syz_io_uring_setup(0x11cd, &(0x7f00000003c0)={0x0, 0xde73, 0x80, 0x1103, 0x2c}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) 1.089033105s ago: executing program 9 (id=11001): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000940)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x3, 0x7fc00002}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x2007}) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000440)={0x0, 0x79a8, 0x8, 0x1, 0x29a}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 931.395892ms ago: executing program 6 (id=11007): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x3, 0x8, 0x0) 923.37495ms ago: executing program 3 (id=11008): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101240, 0x10a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 894.395924ms ago: executing program 6 (id=11009): socket$inet(0x2, 0x4000000000000001, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xf, 0x0, &(0x7f0000001a40)="c1dfb080cd217b283fd3080986dd88", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 874.77315ms ago: executing program 0 (id=11010): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000000d090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 834.555422ms ago: executing program 0 (id=11011): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000001140)={0x1, 0x1, 0x4006d1c, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x1, 0x7e77, 0x8000000a}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) 697.500384ms ago: executing program 3 (id=11012): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0'}, 0xb) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000c, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 632.547691ms ago: executing program 8 (id=11013): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 353.636613ms ago: executing program 8 (id=11014): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0x4000000}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001040)="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", 0x345}, {&(0x7f0000002b40)="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", 0x26e}], 0x2}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x80, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000003ac0)="64cc", 0x2}], 0x1}, 0x0) 227.545936ms ago: executing program 3 (id=11015): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x40000, 0x11a) fcntl$notify(r0, 0x402, 0xc0000011) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(r1, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) 227.159516ms ago: executing program 6 (id=11016): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) 226.814806ms ago: executing program 3 (id=11017): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x6}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000f0ffffffffff030000000035"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xc2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2cc, &(0x7f0000000040)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x37, 0x0, 0x30, 0x66, 0x0, 0x66, 0x37], 0x2d, [0x62, 0x34, 0x62, 0x35], 0x2d, [0x39, 0x61, 0x63, 0x39], 0x2d, [0xb, 0x34, 0x65, 0x32], 0x2d, [0x65, 0x63, 0x67, 0x34, 0x32, 0x65, 0x30, 0x39]}}}]}, 0xfd, 0x4b0, &(0x7f0000000480)="$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") ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 226.316216ms ago: executing program 8 (id=11018): socket(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)}], 0x3eb}}], 0x1, 0x8001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ec6000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x9c3d, 0xc000, 0xc, 0xa0002f4}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 218.438554ms ago: executing program 9 (id=11019): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x800, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xf7f8000000000001, 0xffffffffffffffff, 0xa) r0 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb6, 0x1, 0xffffffbc, 0x333}) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) socket$inet6_sctp(0xa, 0x4, 0x84) read$eventfd(r1, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 182.242297ms ago: executing program 3 (id=11020): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x2, 0x0) getdents64(r0, 0x0, 0x22) 181.633407ms ago: executing program 6 (id=11021): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) poll(&(0x7f00000000c0)=[{r0, 0x2006}], 0x1, 0x7ff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "491e8f6fda908499", "d656798feb353f99cb53000fac69957c56001000000000000020000000001200", "94444681", '\x00\t\x00\x00\x00YZ;'}, 0x38) shutdown(r0, 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 165.544383ms ago: executing program 3 (id=11022): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={0x0}, 0x0, 0x40a, 0x800000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 164.992123ms ago: executing program 8 (id=11032): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) socket(0x1, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 87.505927ms ago: executing program 6 (id=11023): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101240, 0x10a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 46.300059ms ago: executing program 9 (id=11024): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendto$inet6(r0, &(0x7f0000000b00)="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", 0xfffffffffffffdf6, 0xc1, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800000, 0x11, r0, 0x7ac87000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4054, 0xff79, 0x0, 0x0}, &(0x7f0000000400)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000ac0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffd29}, &(0x7f0000000a80)=0x40) 0s ago: executing program 8 (id=11025): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x101, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) kernel console output (not intermixed with test programs): 260185][T31296] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 507.285593][T31296] EXT4-fs (loop3): 1 truncate cleaned up [ 507.314617][T31296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.531098][T23103] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.680883][T31315] geneve2: entered promiscuous mode [ 507.694731][T31315] geneve2: entered allmulticast mode [ 507.707196][T28477] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 507.723619][T31317] loop1: detected capacity change from 0 to 4096 [ 507.734307][T28477] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 507.762564][T31317] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0002] [ 507.778780][T28477] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 507.798845][T31317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.815770][T28477] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 507.838840][T31319] SELinux: failed to load policy [ 508.233113][T31334] loop7: detected capacity change from 0 to 512 [ 508.260491][T31334] EXT4-fs: Ignoring removed nobh option [ 508.285818][T31334] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 508.293020][T31336] xt_hashlimit: size too large, truncated to 1048576 [ 508.323581][T31334] EXT4-fs (loop7): 1 truncate cleaned up [ 508.342630][T31334] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.625244][T28495] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.907526][T25928] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.990412][T28477] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.021029][T28477] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.050719][T31352] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9294'. [ 509.126380][T28477] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.161802][T28477] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.251031][T28477] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.275837][T28477] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.338906][T28477] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.374860][T28477] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.479158][T31388] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 509.659500][T31359] chnl_net:caif_netlink_parms(): no params data found [ 509.735359][T31401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9312'. [ 509.812150][T28477] bond1 (unregistering): (slave gretap1): Releasing active interface [ 509.837906][T28477] bond4 (unregistering): (slave gretap2): Releasing active interface [ 509.898876][T31420] random: crng reseeded on system resumption [ 509.927105][T31420] Restarting kernel threads ... [ 509.936146][T31420] Done restarting kernel threads. [ 510.022879][T31425] loop4: detected capacity change from 0 to 256 [ 510.032403][T28477] bond0 (unregistering): Released all slaves [ 510.044865][T28477] bond1 (unregistering): Released all slaves [ 510.067412][T28477] bond2 (unregistering): Released all slaves [ 510.073740][T31425] FAT-fs (loop4): Directory bread(block 64) failed [ 510.081472][T31425] FAT-fs (loop4): Directory bread(block 65) failed [ 510.091679][T28477] bond3 (unregistering): Released all slaves [ 510.097880][T31425] FAT-fs (loop4): Directory bread(block 66) failed [ 510.108097][T28477] bond4 (unregistering): Released all slaves [ 510.115078][T31425] FAT-fs (loop4): Directory bread(block 67) failed [ 510.124094][T31425] FAT-fs (loop4): Directory bread(block 68) failed [ 510.130794][T31425] FAT-fs (loop4): Directory bread(block 69) failed [ 510.147815][T31425] FAT-fs (loop4): Directory bread(block 70) failed [ 510.154613][T31425] FAT-fs (loop4): Directory bread(block 71) failed [ 510.174672][T31425] FAT-fs (loop4): Directory bread(block 72) failed [ 510.194438][T28477] hsr_slave_0: left promiscuous mode [ 510.207620][T28477] hsr_slave_1: left promiscuous mode [ 510.213387][T31425] FAT-fs (loop4): Directory bread(block 73) failed [ 510.227669][T28477] veth1_macvtap: left promiscuous mode [ 510.242806][T31429] loop3: detected capacity change from 0 to 512 [ 510.250044][T28477] veth0_macvtap: left promiscuous mode [ 510.269253][T28477] veth1_vlan: left promiscuous mode [ 510.286482][T31429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.311395][T28477] veth0_vlan: left promiscuous mode [ 510.336336][T31429] ext4 filesystem being mounted at /506/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 510.356297][T28141] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 510.379095][T28141] FAT-fs (loop4): Filesystem has been set read-only [ 510.467929][T23103] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.836429][T31359] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.850524][T31359] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.882397][T31359] bridge_slave_0: entered allmulticast mode [ 510.930309][T31359] bridge_slave_0: entered promiscuous mode [ 510.963794][T31359] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.965660][T31449] loop7: detected capacity change from 0 to 1024 [ 510.985369][T31449] EXT4-fs: quotafile must be on filesystem root [ 510.988324][T31359] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.013241][T31359] bridge_slave_1: entered allmulticast mode [ 511.030903][T31359] bridge_slave_1: entered promiscuous mode [ 511.044145][T31028] bridge0: port 3(syz_tun) entered disabled state [ 511.052862][T31028] syz_tun (unregistering): left allmulticast mode [ 511.065863][T31028] syz_tun (unregistering): left promiscuous mode [ 511.072250][T31028] bridge0: port 3(syz_tun) entered disabled state [ 511.125968][T31359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.153590][T31359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.192642][T31359] team0: Port device team_slave_0 added [ 511.216557][T31359] team0: Port device team_slave_1 added [ 511.242843][T31359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.250415][T31359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.296525][T31467] loop7: detected capacity change from 0 to 512 [ 511.330442][T31467] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.349351][T31467] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.363290][T31359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.410908][T31359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.444502][T31359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.501234][T31359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.512899][T31474] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #18: comm syz.7.9325: corrupted inode contents [ 511.527067][T31474] loop7: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 511.527293][T31474] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #18: comm syz.7.9325: mark_inode_dirty error [ 511.552875][T31474] loop7: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 511.553110][T31474] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #18: comm syz.7.9325: corrupted inode contents [ 511.576111][T31474] loop7: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 511.576290][T31474] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2999: inode #18: comm syz.7.9325: mark_inode_dirty error [ 511.577451][T28477] IPVS: stop unused estimator thread 0... [ 511.586258][T31474] loop7: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 511.637569][T31359] hsr_slave_0: entered promiscuous mode [ 511.655700][T31474] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3002: inode #18: comm syz.7.9325: mark inode dirty (error -117) [ 511.669456][T31359] hsr_slave_1: entered promiscuous mode [ 511.676252][T31359] debugfs: 'hsr0' already exists in 'hsr' [ 511.682114][T31359] Cannot create hsr debugfs directory [ 511.687763][T31474] loop7: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 511.688023][T31474] EXT4-fs warning (device loop7): ext4_evict_inode:275: xattr delete (err -117) [ 511.791412][T25928] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.957494][T31488] geneve2: entered promiscuous mode [ 511.962917][T31488] geneve2: entered allmulticast mode [ 512.306032][T31471] chnl_net:caif_netlink_parms(): no params data found [ 512.377910][T31359] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 512.388925][T31471] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.397099][T31471] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.404417][T31471] bridge_slave_0: entered allmulticast mode [ 512.411305][T31471] bridge_slave_0: entered promiscuous mode [ 512.417960][T31359] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 512.427830][T31359] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 512.437014][T31359] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 512.456497][T31471] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.463639][T31471] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.484584][T31471] bridge_slave_1: entered allmulticast mode [ 512.491344][T31471] bridge_slave_1: entered promiscuous mode [ 512.535271][T31471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.547311][T31471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.585635][T31471] team0: Port device team_slave_0 added [ 512.601041][T31359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.609860][T31471] team0: Port device team_slave_1 added [ 512.645433][T31359] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.655270][T31471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.662508][T31471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.691921][T31471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.713721][T28487] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.720857][T28487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.731303][T28487] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.738422][T28487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.757017][T31471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.767533][T31471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.796851][T31471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.847391][T31471] hsr_slave_0: entered promiscuous mode [ 512.853818][T31471] hsr_slave_1: entered promiscuous mode [ 512.861616][T31471] debugfs: 'hsr0' already exists in 'hsr' [ 512.869229][T31471] Cannot create hsr debugfs directory [ 512.973389][T31359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.105464][T31565] SELinux: failed to load policy [ 513.317621][T31471] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 513.339375][T31471] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 513.350481][T31359] veth0_vlan: entered promiscuous mode [ 513.356833][T31471] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 513.368457][T31471] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 513.381659][T31359] veth1_vlan: entered promiscuous mode [ 513.452069][T31359] veth0_macvtap: entered promiscuous mode [ 513.490662][T31359] veth1_macvtap: entered promiscuous mode [ 513.550958][T31359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.577783][T31359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.608429][T28487] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.624640][T28487] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.643434][T28487] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.670069][T28487] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.682894][T31624] Set syz1 is full, maxelem 6117 reached [ 513.738636][T31471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.790099][T31471] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.831771][T31643] loop3: detected capacity change from 0 to 512 [ 513.844279][T28483] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.851785][T28483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.888123][T31643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.919507][T28483] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.926826][T28483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.959497][T31643] ext4 filesystem being mounted at /516/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 514.026726][T31643] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.9344: corrupted inode contents [ 514.068201][T31471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 514.106473][T31643] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #2: comm syz.3.9344: mark_inode_dirty error [ 514.154760][T31643] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.9344: corrupted inode contents [ 514.202366][T31663] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.9344: corrupted inode contents [ 514.279715][T31471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.284461][T31663] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #2: comm syz.3.9344: mark_inode_dirty error [ 514.316135][T31681] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 514.348841][T31663] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.9344: corrupted inode contents [ 514.413918][T31663] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.9344: mark_inode_dirty error [ 514.454044][T31663] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.9344: corrupted inode contents [ 514.514061][T31663] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #2: comm syz.3.9344: mark_inode_dirty error [ 514.559985][T31667] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #2: comm syz.3.9344: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 514.559985][T31667] [ 514.612896][T31667] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #2: comm syz.3.9344: corrupted inode contents [ 514.678699][T23103] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.791601][T31471] veth0_vlan: entered promiscuous mode [ 514.811043][T31471] veth1_vlan: entered promiscuous mode [ 514.850179][T31471] veth0_macvtap: entered promiscuous mode [ 514.868469][T31471] veth1_macvtap: entered promiscuous mode [ 514.893658][T31471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.924768][T31471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.952400][ T30] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.969227][ T30] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.994605][ T30] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.014719][ T30] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.303157][T31745] Set syz1 is full, maxelem 6117 reached [ 515.550265][T31776] netlink: 'syz.8.9359': attribute type 1 has an invalid length. [ 515.572574][T31777] usb usb8: usbfs: process 31777 (syz.3.9357) did not claim interface 0 before use [ 515.620639][T31776] bond5: entered promiscuous mode [ 515.638509][T31783] loop9: detected capacity change from 0 to 512 [ 515.655648][T31776] 8021q: adding VLAN 0 to HW filter on device bond5 [ 515.694877][T31783] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 515.762806][T31787] 8021q: adding VLAN 0 to HW filter on device bond5 [ 515.785893][T31783] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.794373][T31787] bond5: (slave vcan0): The slave device specified does not support setting the MAC address [ 515.806286][T31783] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 515.853176][T31787] bond5: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 515.892820][T31471] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.906063][T31810] loop3: detected capacity change from 0 to 256 [ 515.919903][T31787] bond5: (slave vcan0): making interface the new active one [ 515.958663][T31787] vcan0: entered promiscuous mode [ 515.982587][T31787] bond5: (slave vcan0): Enslaving as an active interface with an up link [ 516.223599][T31834] loop3: detected capacity change from 0 to 1024 [ 516.268310][T31834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.595195][T23103] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.789320][T31881] loop6: detected capacity change from 0 to 4096 [ 516.827453][T31881] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.998241][T31899] loop9: detected capacity change from 0 to 512 [ 517.057105][T31899] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.184217][T31471] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.209895][T31914] loop3: detected capacity change from 0 to 512 [ 517.219766][T31359] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.239707][T31913] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 517.261360][T31913] SELinux: failed to load policy [ 517.650168][T31958] netlink: 'syz.9.9395': attribute type 1 has an invalid length. [ 517.819948][T31972] loop9: detected capacity change from 0 to 4096 [ 517.880427][T31972] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.028700][T31986] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9402'. [ 518.065792][T31995] netlink: 'syz.7.9404': attribute type 2 has an invalid length. [ 518.392833][T31471] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.465517][T32032] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9408'. [ 518.489444][T32032] netlink: 'syz.9.9408': attribute type 5 has an invalid length. [ 518.530002][T32032] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9408'. [ 518.551598][T32041] loop7: detected capacity change from 0 to 1024 [ 518.564845][T32032] geneve2: entered promiscuous mode [ 518.570110][T32032] geneve2: entered allmulticast mode [ 518.578219][T32041] EXT4-fs: Ignoring removed nobh option [ 518.585769][T32041] EXT4-fs (loop7): can't mount with both data=journal and delalloc [ 518.594863][ T108] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 40852 - 0 [ 518.604373][ T108] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 40852 - 0 [ 518.614510][ T108] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 40852 - 0 [ 518.660709][ T108] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 40852 - 0 [ 518.913188][T29023] bridge0: port 3(syz_tun) entered disabled state [ 518.946011][T29023] syz_tun (unregistering): left allmulticast mode [ 518.973138][T29023] syz_tun (unregistering): left promiscuous mode [ 518.994930][T29023] bridge0: port 3(syz_tun) entered disabled state [ 519.063458][ T108] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.107449][ T108] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.347426][ T108] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.379205][ T108] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.519092][ T108] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.565392][T32110] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9424'. [ 519.592973][ T108] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.759740][ T108] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.779251][ T108] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.913393][ T108] bridge_slave_0: left allmulticast mode [ 519.923017][ T108] bridge_slave_0: left promiscuous mode [ 519.937156][ T108] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.268482][ T108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.294224][ T108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.313123][T32161] netlink: 'syz.8.9444': attribute type 16 has an invalid length. [ 520.324075][ T108] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 520.347648][T32161] netlink: 'syz.8.9444': attribute type 17 has an invalid length. [ 520.357502][ T108] bond0 (unregistering): Released all slaves [ 520.369441][ T108] bond1 (unregistering): Released all slaves [ 520.390413][ T108] bond2 (unregistering): Released all slaves [ 520.617544][T32161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 520.644639][ T108] tipc: Disabling bearer [ 520.650599][ T108] tipc: Left network mode [ 520.659783][ T108] hsr_slave_0: left promiscuous mode [ 520.665997][ T108] hsr_slave_1: left promiscuous mode [ 520.671743][ T108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.680453][ T108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.697255][ T108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.723869][ T108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.745557][ T108] veth1_macvtap: left promiscuous mode [ 520.751132][ T108] veth0_macvtap: left promiscuous mode [ 520.774168][ T108] veth1_vlan: left promiscuous mode [ 520.783971][ T108] veth0_vlan: left promiscuous mode [ 520.983162][ T108] team0 (unregistering): Port device team_slave_1 removed [ 521.002336][ T108] team0 (unregistering): Port device team_slave_0 removed [ 521.332451][T32151] chnl_net:caif_netlink_parms(): no params data found [ 521.436579][ T108] IPVS: stop unused estimator thread 0... [ 521.565543][T32151] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.572650][T32151] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.584416][T32151] bridge_slave_0: entered allmulticast mode [ 521.590970][T32151] bridge_slave_0: entered promiscuous mode [ 521.598302][T32151] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.605531][T32151] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.612779][T32151] bridge_slave_1: entered allmulticast mode [ 521.619423][T32151] bridge_slave_1: entered promiscuous mode [ 521.645796][ T108] bridge_slave_1: left allmulticast mode [ 521.651566][ T108] bridge_slave_1: left promiscuous mode [ 521.694530][ T108] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.725037][ T108] bridge_slave_0: left allmulticast mode [ 521.730716][ T108] bridge_slave_0: left promiscuous mode [ 521.760332][ T108] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.945580][ T108] bond1 (unregistering): Released all slaves [ 521.954866][ T108] bond0 (unregistering): (slave lo): Releasing backup interface [ 521.963022][ T108] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 521.976010][ T108] bond0 (unregistering): Released all slaves [ 522.012537][T32151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.027355][T32151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.076597][ T108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.087464][ T108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.097637][ T108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.105366][ T108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.118495][ T108] veth1_macvtap: left promiscuous mode [ 522.128801][ T108] veth0_macvtap: left promiscuous mode [ 522.243416][ T108] team0 (unregistering): Port device team_slave_1 removed [ 522.277284][ T108] team0 (unregistering): Port device team_slave_0 removed [ 522.370316][T32151] team0: Port device team_slave_0 added [ 522.387067][T32151] team0: Port device team_slave_1 added [ 522.419968][ T28] audit: type=1400 audit(2000000107.890:3711): avc: denied { write } for pid=32238 comm="syz.9.9446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 522.447137][T32151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.454344][T32151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.502615][T32151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.530508][T32239] ip6tnl1: entered promiscuous mode [ 522.562505][T32151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.593766][T32151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.640996][T32151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.747891][T32151] hsr_slave_0: entered promiscuous mode [ 522.775098][T32151] hsr_slave_1: entered promiscuous mode [ 522.812057][T32151] debugfs: 'hsr0' already exists in 'hsr' [ 522.833975][T32151] Cannot create hsr debugfs directory [ 522.854178][ T108] IPVS: stop unused estimator thread 0... [ 523.098648][T32299] loop6: detected capacity change from 0 to 256 [ 523.114391][T32299] msdos: Bad value for 'dmask' [ 523.396088][T32151] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 523.431399][T32327] netlink: 'syz.3.9471': attribute type 6 has an invalid length. [ 523.440975][T32151] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 523.467910][T32151] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 523.496755][T32151] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 523.615491][T32151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.632415][T32151] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.697349][ T6883] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.704541][ T6883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.753245][ T6883] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.760468][ T6883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.930196][T32151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.326116][T32403] loop9: detected capacity change from 0 to 1024 [ 524.343154][T32403] EXT4-fs: Ignoring removed bh option [ 524.372995][T32151] veth0_vlan: entered promiscuous mode [ 524.398530][T32403] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.416142][T32151] veth1_vlan: entered promiscuous mode [ 524.440407][T32151] veth0_macvtap: entered promiscuous mode [ 524.456544][T32403] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4222: comm syz.9.9476: Allocating blocks 497-513 which overlap fs metadata [ 524.479599][T32151] veth1_macvtap: entered promiscuous mode [ 524.499592][T32403] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4222: comm syz.9.9476: Allocating blocks 497-513 which overlap fs metadata [ 524.533482][T32151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.543607][T32403] EXT4-fs warning (device loop9): ext4_convert_unwritten_extents:5037: inode #15: block 64: len 64: ext4_ext_map_blocks returned -117 [ 524.572634][T32151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.599267][ T6883] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.623654][ T6883] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.647963][T32421] loop3: detected capacity change from 0 to 128 [ 524.693008][T32421] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 524.710860][T32421] ext4 filesystem being mounted at /553/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.738298][T31471] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.740718][ T6883] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.756571][ T6883] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.785849][T32429] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9479'. [ 524.831915][T23103] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 525.059689][T32441] loop9: detected capacity change from 0 to 8192 [ 525.194238][T31471] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 525.216135][T31471] FAT-fs (loop9): Filesystem has been set read-only [ 525.223340][ T28] audit: type=1400 audit(2000000110.690:3712): avc: denied { ioctl } for pid=32452 comm="syz.3.9484" path="/dev/rtc0" dev="devtmpfs" ino=245 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 525.636120][T32499] loop5: detected capacity change from 0 to 512 [ 525.655866][T32499] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.760967][T32151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.854926][ T3366] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 525.885116][ T3366] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 525.931222][T32514] loop5: detected capacity change from 0 to 4096 [ 525.949870][T32514] EXT4-fs: Ignoring removed mblk_io_submit option [ 525.972228][T32514] EXT4-fs: test_dummy_encryption option not supported [ 526.091999][T32397] Set syz1 is full, maxelem 65536 reached [ 526.288719][T32551] loop6: detected capacity change from 0 to 512 [ 526.336033][T32551] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 526.387362][T32551] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.9498: invalid indirect mapped block 2683928664 (level 1) [ 526.402164][T32551] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 526.402659][T32551] EXT4-fs (loop6): Remounting filesystem read-only [ 526.412016][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 526.412037][ C0] EXT4-fs (loop6): initial error at time 2000000111: ext4_free_branches:1023: inode 13 [ 526.412065][ C0] EXT4-fs (loop6): last error at time 2000000111: ext4_free_branches:1023: inode 13 [ 526.454617][T32551] EXT4-fs (loop6): 1 truncate cleaned up [ 526.462097][T32551] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.563117][T31359] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.781659][T32580] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 527.163362][ T6883] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.175725][ T6883] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.192755][ T6883] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.213891][ T6883] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.308632][ T6883] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.319199][ T6883] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.345283][ T6883] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.363729][ T6883] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.559373][T32648] loop9: detected capacity change from 0 to 512 [ 527.646595][T32638] netlink: 'syz.6.9518': attribute type 16 has an invalid length. [ 527.672449][T32638] netlink: 'syz.6.9518': attribute type 17 has an invalid length. [ 527.730356][T32638] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 527.985604][T32690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9530'. [ 528.026098][T32690] 8021q: adding VLAN 0 to HW filter on device team1 [ 528.321016][T32730] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9541'. [ 528.490619][T32750] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 528.520831][T32750] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 528.540313][T32756] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9547'. [ 528.572488][T32756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.629539][T32756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.675285][T32756] bond0 (unregistering): Released all slaves [ 528.754450][T32758] loop3: detected capacity change from 0 to 8192 [ 529.181747][T32762] netlink: 'syz.9.9548': attribute type 16 has an invalid length. [ 529.190886][T32762] netlink: 'syz.9.9548': attribute type 17 has an invalid length. [ 529.210860][T32762] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 529.343234][ T332] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9558'. [ 529.366337][ T336] loop6: detected capacity change from 0 to 764 [ 529.374187][ T332] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9558'. [ 529.406438][ T332] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9558'. [ 529.431950][ T332] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9558'. [ 529.469900][ T336] rock: directory entry would overflow storage [ 529.480024][ T336] rock: sig=0x4654, size=5, remaining=4 [ 529.520580][ T28] audit: type=1400 audit(2000000114.990:3713): avc: denied { mount } for pid=334 comm="syz.6.9559" name="/" dev="loop6" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 529.637686][ T28] audit: type=1400 audit(2000000115.070:3714): avc: denied { unmount } for pid=31359 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 529.714182][ T364] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 530.032654][ T408] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9578'. [ 530.508314][ T479] syzkaller0: entered promiscuous mode [ 530.530310][ T479] syzkaller0: entered allmulticast mode [ 530.680196][ T501] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9590'. [ 530.706171][ T503] loop3: detected capacity change from 0 to 512 [ 530.742367][ T503] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 530.767210][ T503] EXT4-fs (loop3): 1 truncate cleaned up [ 530.773306][ T503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.903375][ T472] loop5: detected capacity change from 0 to 1024 [ 530.930236][ T472] EXT4-fs: inline encryption not supported [ 530.944710][ T472] EXT4-fs: Ignoring removed nobh option [ 530.956353][ T472] EXT4-fs: Ignoring removed bh option [ 531.022943][ T472] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.039740][T23103] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.234507][T32151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.478836][ T28] audit: type=1326 audit(2000000116.950:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=524 comm="syz.8.9599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9e9dc799 code=0x7ffc0000 [ 531.534494][ T28] audit: type=1326 audit(2000000116.950:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=524 comm="syz.8.9599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9e9dc799 code=0x7ffc0000 [ 531.592867][ T528] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 531.596646][ T28] audit: type=1326 audit(2000000116.950:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=524 comm="syz.8.9599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9e9dc799 code=0x7ffc0000 [ 531.654714][ T28] audit: type=1326 audit(2000000116.950:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=524 comm="syz.8.9599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9e9dc799 code=0x7ffc0000 [ 531.699820][ T28] audit: type=1326 audit(2000000116.950:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=524 comm="syz.8.9599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9e9dc799 code=0x7ffc0000 [ 531.703786][ T530] ip6gre1: entered promiscuous mode [ 531.725725][ T28] audit: type=1326 audit(2000000116.950:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=524 comm="syz.8.9599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fcc9e9dc799 code=0x7ffc0000 [ 531.756736][ T28] audit: type=1326 audit(2000000116.950:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=524 comm="syz.8.9599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9e9dc799 code=0x7ffc0000 [ 531.774797][ T530] ip6gre1: entered allmulticast mode [ 531.795337][ T28] audit: type=1326 audit(2000000116.950:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=524 comm="syz.8.9599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9e9dc799 code=0x7ffc0000 [ 531.982970][ T536] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9603'. [ 532.059120][ T517] loop9: detected capacity change from 0 to 32768 [ 532.277723][ T544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9607'. [ 532.426713][ T547] loop3: detected capacity change from 0 to 1024 [ 532.466526][ T547] EXT4-fs: inline encryption not supported [ 532.504436][ T547] EXT4-fs: Ignoring removed nobh option [ 532.527431][ T547] EXT4-fs: Ignoring removed bh option [ 532.619482][ T547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.740287][T23103] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.867898][ T605] loop9: detected capacity change from 0 to 1024 [ 533.940618][ T605] EXT4-fs: inline encryption not supported [ 533.989684][ T621] netlink: 'syz.3.9639': attribute type 4 has an invalid length. [ 534.067575][ T605] EXT4-fs: Ignoring removed nobh option [ 534.075086][ T630] loop3: detected capacity change from 0 to 128 [ 534.082716][ T605] EXT4-fs: Ignoring removed bh option [ 534.115428][ T630] EXT4-fs: Ignoring removed nobh option [ 534.130523][ T630] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 534.156475][ T630] ext4 filesystem being mounted at /583/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 534.272778][T23103] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 534.412817][ T605] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.430205][ T644] loop3: detected capacity change from 0 to 256 [ 534.519785][ T644] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 534.670848][ T650] FAT-fs (loop3): error, corrupted file size (i_pos 196, 60330) [ 534.734579][ T650] FAT-fs (loop3): Filesystem has been set read-only [ 534.773603][ T650] FAT-fs (loop3): error, corrupted file size (i_pos 196, 60330) [ 534.804565][T31471] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.903793][ T642] FAT-fs (loop3): error, corrupted file size (i_pos 196, 60330) [ 534.942427][ T642] FAT-fs (loop3): error, corrupted file size (i_pos 196, 60330) [ 534.964522][ T642] FAT-fs (loop3): error, corrupted file size (i_pos 196, 60330) [ 535.775380][ T699] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9668'. [ 535.832355][ T701] netlink: 'syz.5.9669': attribute type 6 has an invalid length. [ 535.860584][ T701] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9669'. [ 536.273371][ T717] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 536.648536][ T730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9679'. [ 536.801937][ T740] loop9: detected capacity change from 0 to 512 [ 536.836705][ T740] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.855675][ T740] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.888756][T31471] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.088584][ T753] loop9: detected capacity change from 0 to 764 [ 537.144420][ T756] netlink: 'syz.3.9692': attribute type 3 has an invalid length. [ 537.177901][ T756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9692'. [ 537.229695][ T760] rock: directory entry would overflow storage [ 537.250405][ T760] rock: sig=0x4f50, size=4, remaining=3 [ 537.267232][ T760] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 537.400484][ T767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9694'. [ 538.166661][ T785] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.174193][ T785] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.371748][ T785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.397708][ T785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.510692][ T6883] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.530736][ T6883] netdevsim netdevsim9 netdevsim0: unset [1, 1] type 2 family 0 port 40852 - 0 [ 538.550854][ T6883] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.573348][ T6883] netdevsim netdevsim9 netdevsim1: unset [1, 1] type 2 family 0 port 40852 - 0 [ 538.593626][ T6883] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.630946][ T6883] netdevsim netdevsim9 netdevsim2: unset [1, 1] type 2 family 0 port 40852 - 0 [ 538.640907][ T6883] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.651634][ T6883] netdevsim netdevsim9 netdevsim3: unset [1, 1] type 2 family 0 port 40852 - 0 [ 538.995380][ T811] ipip0: entered promiscuous mode [ 539.005429][ T815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9712'. [ 539.071333][ T817] loop9: detected capacity change from 0 to 8192 [ 539.153858][T31471] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 539.161807][T31471] FAT-fs (loop9): Filesystem has been set read-only [ 539.212069][ T821] loop5: detected capacity change from 0 to 128 [ 539.242218][ T821] EXT4-fs: Ignoring removed nobh option [ 539.285009][ T821] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 539.297873][ T821] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 539.337449][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 539.337470][ T28] audit: type=1400 audit(2000000124.810:3726): avc: denied { rename } for pid=818 comm="syz.5.9727" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 539.340790][ T810] loop6: detected capacity change from 0 to 1024 [ 539.383020][ T28] audit: type=1400 audit(2000000124.810:3727): avc: denied { reparent } for pid=818 comm="syz.5.9727" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 539.383139][ T28] audit: type=1400 audit(2000000124.810:3728): avc: denied { remove_name } for pid=818 comm="syz.5.9727" name="file2" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 539.512885][ T821] EXT4-fs error (device loop5): __ext4_remount:6804: comm syz.5.9727: Abort forced by user [ 539.549329][ T821] EXT4-fs (loop5): Remounting filesystem read-only [ 539.576265][ T810] EXT4-fs: inline encryption not supported [ 539.592192][ T821] EXT4-fs (loop5): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 539.598695][ T810] EXT4-fs: Ignoring removed nobh option [ 539.645829][ T810] EXT4-fs: Ignoring removed bh option [ 539.669131][T32151] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 539.811351][ T810] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.024467][T31359] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.174949][ T893] loop5: detected capacity change from 0 to 1024 [ 540.217062][ T893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 540.266216][ T893] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 540.279335][ T893] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.9736: lblock 0 mapped to illegal pblock 0 (length 6) [ 540.313326][ T893] EXT4-fs error (device loop5): ext4_ext_remove_space:2954: inode #15: comm syz.5.9736: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 540.314195][ T904] only policy match revision 0 supported [ 540.357672][ T908] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.9736: lblock 0 mapped to illegal pblock 0 (length 1) [ 540.365089][ T911] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9742'. [ 540.404863][ T904] unable to load match [ 540.425116][ T908] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 540.438582][ T916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=916 comm=syz.3.9743 [ 540.451224][ T908] EXT4-fs (loop5): This should not happen!! Data will be lost [ 540.451224][ T908] [ 540.461308][ T893] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #15: comm syz.5.9736: lblock 0 mapped to illegal pblock 0 (length 1) [ 540.484170][ T911] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9742'. [ 540.517070][ T893] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.9736: bg 0: block 112: padding at end of block bitmap is not set [ 540.556516][ T893] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 540.569113][ T893] EXT4-fs (loop5): This should not happen!! Data will be lost [ 540.569113][ T893] [ 540.580299][ T893] EXT4-fs (loop5): Total free blocks count 0 [ 540.586626][ T893] EXT4-fs (loop5): Free/Dirty block details [ 540.592864][ T893] EXT4-fs (loop5): free_blocks=0 [ 540.598245][ T893] EXT4-fs (loop5): dirty_blocks=0 [ 540.609726][ T893] EXT4-fs (loop5): Block reservation details [ 541.454134][ T1006] loop3: detected capacity change from 0 to 512 [ 541.557811][ T1006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.580379][ T1006] ext4 filesystem being mounted at /604/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.632621][ T1018] xt_hashlimit: size too large, truncated to 1048576 [ 541.797521][ T1023] loop5: detected capacity change from 0 to 8192 [ 541.875850][T32151] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 541.889254][T32151] FAT-fs (loop5): Filesystem has been set read-only [ 541.977269][ T1026] team0 (unregistering): Port device team_slave_0 removed [ 541.988956][ T1026] team0 (unregistering): Port device team_slave_1 removed [ 542.117728][ T1032] loop6: detected capacity change from 0 to 1024 [ 542.125707][ T1032] EXT4-fs: Ignoring removed nomblk_io_submit option [ 542.154788][ T1032] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.339288][T23103] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.351535][T31359] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.370237][ T1047] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9773'. [ 542.435254][ T1051] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 542.586518][ T1073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.598344][ T1073] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.618525][ T1073] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 542.888080][ T1120] ipvlan0: entered promiscuous mode [ 542.893467][ T1120] ipvlan0: entered allmulticast mode [ 543.308880][ T1192] xt_hashlimit: size too large, truncated to 1048576 [ 543.573235][ T1209] loop6: detected capacity change from 0 to 128 [ 543.586940][ T28] audit: type=1400 audit(2000000129.060:3729): avc: denied { listen } for pid=1210 comm="syz.8.9809" lport=40703 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 543.907107][ T1229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9815'. [ 543.942030][ T1226] pimreg: entered allmulticast mode [ 543.957027][ T1226] pimreg: left allmulticast mode [ 544.077542][ T1231] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9816'. [ 544.097528][ T1231] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9816'. [ 544.245531][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 544.603964][ T3723] Bluetooth: hci0: command 0x1003 tx timeout [ 544.604413][ T5878] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 544.674676][ T1250] netlink: 'syz.5.9825': attribute type 1 has an invalid length. [ 544.695055][ T1250] 8021q: adding VLAN 0 to HW filter on device bond1 [ 544.708104][ T1250] macvlan0: entered promiscuous mode [ 544.732333][ T1250] bond1: (slave macvlan0): making interface the new active one [ 544.752996][ T1250] bond1: (slave macvlan0): Enslaving as an active interface with an up link [ 544.839044][ T1260] loop9: detected capacity change from 0 to 512 [ 544.849034][ T1260] EXT4-fs: Ignoring removed nobh option [ 544.902996][ T1260] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.939468][ T1260] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 545.009034][T31471] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.284313][ T43] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 546.832184][ T1281] netlink: 80 bytes leftover after parsing attributes in process `syz.8.9832'. [ 546.851872][ T1281] netlink: 80 bytes leftover after parsing attributes in process `syz.8.9832'. [ 546.873275][ T1286] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9830'. [ 546.956031][ T28] audit: type=1400 audit(2000000132.430:3730): avc: denied { setopt } for pid=1295 comm="syz.5.9839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 547.048024][ T1298] netlink: 'syz.3.9840': attribute type 1 has an invalid length. [ 547.074854][T15803] IPVS: starting estimator thread 0... [ 547.194339][ T1304] IPVS: using max 2592 ests per chain, 129600 per kthread [ 547.427247][ T1321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 547.835463][ T1333] loop9: detected capacity change from 0 to 512 [ 547.881030][ T1333] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.915063][ T1333] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.980232][T31471] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.172046][ T1349] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9859'. [ 548.428746][ T1364] netlink: 152 bytes leftover after parsing attributes in process `syz.9.9865'. [ 548.542203][ T28] audit: type=1326 audit(2000000134.010:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1369 comm="syz.9.9868" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7e255c799 code=0x0 [ 548.664033][ T1376] netlink: 76 bytes leftover after parsing attributes in process `syz.8.9871'. [ 548.759496][ T1389] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9876'. [ 548.864187][ T1387] pim6reg1: entered promiscuous mode [ 548.869656][ T1387] pim6reg1: entered allmulticast mode [ 548.928874][ T28] audit: type=1326 audit(2000000134.400:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1398 comm="syz.8.9879" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc9e9dc799 code=0x0 [ 550.129193][ T1439] syz_tun: entered allmulticast mode [ 550.330562][ T1438] syz_tun: left allmulticast mode [ 550.568575][ T3366] IPVS: starting estimator thread 0... [ 550.606216][ T1448] loop9: detected capacity change from 0 to 128 [ 550.647164][ T1446] loop3: detected capacity change from 0 to 4096 [ 550.674220][ T1444] IPVS: using max 2496 ests per chain, 124800 per kthread [ 550.703932][ T1446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.937127][T23103] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.004011][ T28] audit: type=1326 audit(2000000136.470:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1472 comm="syz.3.9908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10cadc799 code=0x7ffc0000 [ 551.097905][ T1477] tipc: Enabling of bearer rejected, failed to enable media [ 551.102226][ T28] audit: type=1326 audit(2000000136.470:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1472 comm="syz.3.9908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10cadc799 code=0x7ffc0000 [ 551.179796][ T28] audit: type=1326 audit(2000000136.470:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1472 comm="syz.3.9908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc10cadc799 code=0x7ffc0000 [ 551.282784][ T28] audit: type=1326 audit(2000000136.480:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1472 comm="syz.3.9908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10cadc799 code=0x7ffc0000 [ 551.360323][ T28] audit: type=1326 audit(2000000136.480:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1472 comm="syz.3.9908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10cadc799 code=0x7ffc0000 [ 551.435065][ T28] audit: type=1326 audit(2000000136.500:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1472 comm="syz.3.9908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10cadc799 code=0x7ffc0000 [ 551.519326][ T28] audit: type=1326 audit(2000000136.500:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1472 comm="syz.3.9908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10cadc799 code=0x7ffc0000 [ 552.222490][ T1495] netlink: 'syz.3.9917': attribute type 1 has an invalid length. [ 552.319849][ T1499] bond0: (slave geneve3): making interface the new active one [ 552.358856][ T1499] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 552.397465][ T36] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 552.419867][ T36] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 552.458594][ T36] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 552.467809][ T36] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 552.597368][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 552.597409][ T28] audit: type=1400 audit(2000000138.070:3748): avc: denied { read } for pid=1515 comm="syz.9.9926" path="socket:[128999]" dev="sockfs" ino=128999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 552.647136][ T1519] netlink: 'syz.3.9927': attribute type 83 has an invalid length. [ 552.715216][ T1528] loop6: detected capacity change from 0 to 128 [ 552.774091][ T1531] xt_limit: Overflow, try lower: 65536/2147483648 [ 553.729310][ T1582] loop6: detected capacity change from 0 to 2048 [ 553.755616][ T1582] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.792218][ T1587] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9949'. [ 553.814616][ T1582] EXT4-fs error (device loop6): ext4_ext_precache:631: inode #2: comm syz.6.9948: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 553.910366][T31359] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.969828][ T28] audit: type=1400 audit(2000000139.440:3749): avc: denied { read } for pid=15804 comm="kworker/1:13" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=130078 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 554.433076][ T1663] netlink: 'syz.3.9982': attribute type 1 has an invalid length. [ 554.441167][ T1663] netlink: 'syz.3.9982': attribute type 4 has an invalid length. [ 554.449548][ T1663] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.9982'. [ 554.465720][ T1665] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9983'. [ 554.480354][T28481] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.484351][ T1665] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9983'. [ 554.489619][T28481] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.508175][T28481] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.517151][T28481] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.176076][ T1714] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10003'. [ 555.927972][ T28] audit: type=1326 audit(2000000141.400:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1750 comm="syz.6.10020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cd3ec799 code=0x7ffc0000 [ 556.019123][ T28] audit: type=1326 audit(2000000141.400:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1750 comm="syz.6.10020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cd3ec799 code=0x7ffc0000 [ 556.075849][ T28] audit: type=1326 audit(2000000141.400:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1750 comm="syz.6.10020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f37cd3ec799 code=0x7ffc0000 [ 556.128896][ T28] audit: type=1326 audit(2000000141.400:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1750 comm="syz.6.10020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cd3ec799 code=0x7ffc0000 [ 556.185212][ T28] audit: type=1326 audit(2000000141.400:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1750 comm="syz.6.10020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cd3ec799 code=0x7ffc0000 [ 556.626419][ T1791] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10034'. [ 556.654041][ T1791] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10034'. [ 556.715791][ T28] audit: type=1326 audit(2000000142.190:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1784 comm="syz.9.10031" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7e255c799 code=0x0 [ 556.882287][ T1801] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10040'. [ 556.900546][ T1801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10040'. [ 557.335646][ T1842] loop6: detected capacity change from 0 to 1024 [ 557.404391][ T1842] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 557.433650][ T1842] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 557.457591][ T1851] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10060'. [ 557.517428][ T1853] loop9: detected capacity change from 0 to 512 [ 557.533690][ T1857] EXT4-fs error (device loop6): ext4_free_blocks:6724: comm syz.6.10056: Freeing blocks not in datazone - block = 0, count = 16 [ 557.562140][ T1853] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 557.624833][T31359] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 557.659363][ T1853] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.812576][T31471] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.792116][ T1883] geneve2: entered promiscuous mode [ 558.801210][ T28] audit: type=1400 audit(2000000144.270:3756): avc: denied { module_load } for pid=1884 comm="syz.5.10072" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=130509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 558.808793][ T1883] geneve2: entered allmulticast mode [ 558.990993][ T1885] Invalid ELF header magic: != ELF [ 559.554843][ T1942] __nla_validate_parse: 2 callbacks suppressed [ 559.554870][ T1942] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10094'. [ 559.826381][ T1959] netlink: 'syz.9.10101': attribute type 2 has an invalid length. [ 559.849398][ T1959] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10101'. [ 559.984849][ T28] audit: type=1326 audit(2000000145.460:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1970 comm="syz.9.10106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e255c799 code=0x7ffc0000 [ 560.055745][ T28] audit: type=1326 audit(2000000145.460:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1970 comm="syz.9.10106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e255c799 code=0x7ffc0000 [ 560.115423][ T28] audit: type=1326 audit(2000000145.460:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1970 comm="syz.9.10106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe7e255c799 code=0x7ffc0000 [ 560.234166][ T28] audit: type=1326 audit(2000000145.460:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1970 comm="syz.9.10106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e255c799 code=0x7ffc0000 [ 560.287782][ T28] audit: type=1326 audit(2000000145.460:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1970 comm="syz.9.10106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe7e255c799 code=0x7ffc0000 [ 560.335950][ T28] audit: type=1326 audit(2000000145.460:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1970 comm="syz.9.10106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e255c799 code=0x7ffc0000 [ 560.367418][ T28] audit: type=1326 audit(2000000145.460:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1970 comm="syz.9.10106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fe7e255c799 code=0x7ffc0000 [ 560.392844][ T1985] netem: incorrect gi model size [ 560.408405][ T1985] netem: change failed [ 560.457262][ T1989] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10114'. [ 560.468398][ T28] audit: type=1326 audit(2000000145.460:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1970 comm="syz.9.10106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e255c799 code=0x7ffc0000 [ 560.474745][ T1989] netlink: 'syz.9.10114': attribute type 5 has an invalid length. [ 560.537924][ T28] audit: type=1326 audit(2000000145.460:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1970 comm="syz.9.10106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e255c799 code=0x7ffc0000 [ 560.561808][ T1989] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10114'. [ 560.650668][ T1999] loop9: detected capacity change from 0 to 128 [ 560.678126][ T1999] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 560.703665][ T1999] ext4 filesystem being mounted at /163/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 560.744027][ T1999] EXT4-fs error (device loop9): dx_make_map:1296: inode #2: block 20: comm syz.9.10116: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 560.763408][ T1999] EXT4-fs error (device loop9) in do_split:2027: Corrupt filesystem [ 560.816032][ T2006] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10118'. [ 560.827895][T31471] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 560.851688][ T2006] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10118'. [ 560.851672][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.851743][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.887328][T28481] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.914990][T28481] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.456752][ T2045] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10135'. [ 561.488150][ T2045] geneve2: entered promiscuous mode [ 562.435365][ T2095] loop9: detected capacity change from 0 to 128 [ 562.552233][ T2102] loop9: detected capacity change from 0 to 128 [ 562.586674][ T2102] syz.9.10156: attempt to access beyond end of device [ 562.586674][ T2102] loop9: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 562.639980][ T2102] syz.9.10156: attempt to access beyond end of device [ 562.639980][ T2102] loop9: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 562.712634][ T2107] syz.9.10156: attempt to access beyond end of device [ 562.712634][ T2107] loop9: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 562.751444][ T2107] Buffer I/O error on dev loop9, logical block 77, lost async page write [ 562.777052][ T2115] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10161'. [ 563.627142][ T2148] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10172'. [ 563.833989][ T28] audit: type=1400 audit(2000000149.300:3766): avc: denied { setopt } for pid=2153 comm="syz.9.10174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 564.601354][ T2220] loop6: detected capacity change from 0 to 256 [ 565.346813][ T2231] 8021q: adding VLAN 0 to HW filter on device bond2 [ 565.422505][ T2236] loop9: detected capacity change from 0 to 1024 [ 565.430100][ T2236] EXT4-fs: inline encryption not supported [ 565.436342][ T2236] EXT4-fs: Ignoring removed i_version option [ 565.468838][ T2236] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.527752][ T2236] EXT4-fs error (device loop9): mb_free_blocks:2047: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 565.687074][T31471] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.767067][ T2261] loop6: detected capacity change from 0 to 512 [ 565.774923][ T2261] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 565.786883][ T2261] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 565.796220][ T2261] System zones: 1-12 [ 565.800979][ T2261] EXT4-fs (loop6): 1 truncate cleaned up [ 565.808217][ T2261] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.877758][T31359] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.066892][ T2283] loop6: detected capacity change from 0 to 4096 [ 566.081702][ T2283] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.256418][T31359] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.405602][ T2291] atomic_op ffff88810b02c528 conn xmit_atomic 0000000000000000 [ 566.520922][ T2293] loop6: detected capacity change from 0 to 2048 [ 566.542387][ T2295] loop5: detected capacity change from 0 to 128 [ 566.584680][ T2295] FAT-fs (loop5): Directory bread(block 32) failed [ 566.587203][T26035] loop6: p1 p2 p3 [ 566.594941][ T2295] FAT-fs (loop5): Directory bread(block 33) failed [ 566.605603][ T2297] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10236'. [ 566.611902][ T2295] FAT-fs (loop5): Directory bread(block 34) failed [ 566.621316][ T2297] bond1: entered promiscuous mode [ 566.626814][T26035] loop6: p3 start 8388352 is beyond EOD, truncated [ 566.633715][ T2295] FAT-fs (loop5): Directory bread(block 35) failed [ 566.642800][ T2293] loop6: p1 p2 p3 [ 566.646839][ T2295] FAT-fs (loop5): Directory bread(block 36) failed [ 566.648088][ T2297] 8021q: adding VLAN 0 to HW filter on device bond1 [ 566.656302][ T2299] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10236'. [ 566.670676][ T2293] loop6: p3 start 8388352 is beyond EOD, truncated [ 566.682296][ T2295] FAT-fs (loop5): Directory bread(block 37) failed [ 566.715278][ T2295] FAT-fs (loop5): Directory bread(block 38) failed [ 566.728604][ T2299] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10236'. [ 566.765057][ T2295] FAT-fs (loop5): Directory bread(block 39) failed [ 566.793910][ T2295] FAT-fs (loop5): Directory bread(block 40) failed [ 566.832583][ T2295] FAT-fs (loop5): Directory bread(block 41) failed [ 567.139037][ T2316] syzkaller0: entered promiscuous mode [ 567.151771][ T2316] syzkaller0: entered allmulticast mode [ 567.166546][ T2316] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 567.420541][ T2325] netlink: 64 bytes leftover after parsing attributes in process `syz.9.10247'. [ 567.553509][ T2331] loop9: detected capacity change from 0 to 1024 [ 567.609432][ T2331] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.647399][ T2331] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #2: comm syz.9.10250: missing EA_INODE flag [ 567.704519][ T2331] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.10250: error while reading EA inode 2 err=-117 [ 567.837443][ T2346] loop6: detected capacity change from 0 to 512 [ 567.868725][ T2346] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.892671][ T2346] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 567.907453][T31471] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.009998][T31359] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.587731][ T2381] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10270'. [ 568.682169][ T2386] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10273'. [ 569.236561][ T2393] loop6: detected capacity change from 0 to 164 [ 569.248360][ T2393] iso9660: Unknown parameter 'mapkšť' [ 570.551461][ T2415] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.558855][ T2415] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.286879][ T2415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.336381][ T2415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.436899][T15804] Process accounting resumed [ 571.836560][ T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.867039][ T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.935281][ T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.968664][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.196651][ T28] audit: type=1400 audit(2000000157.670:3767): avc: denied { unmount } for pid=2479 comm="syz.3.10313" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 572.655679][ T2504] loop9: detected capacity change from 0 to 512 [ 572.711218][ T2504] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.753406][ T2504] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 572.829743][ T2509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10324'. [ 572.877240][T31471] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.606290][ T2542] loop9: detected capacity change from 0 to 1024 [ 573.614908][ T2542] ext4: Unknown parameter 'fsuuid' [ 573.745488][ T2557] loop5: detected capacity change from 0 to 1024 [ 573.765875][ T2557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 573.778956][ T2557] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 573.796370][ T28] audit: type=1400 audit(2000000159.270:3768): avc: denied { shutdown } for pid=2558 comm="syz.3.10345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 573.826525][ T2557] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 4: comm syz.5.10344: lblock 4 mapped to illegal pblock 4 (length 2) [ 573.841616][ T2557] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 573.854589][ T2557] EXT4-fs (loop5): This should not happen!! Data will be lost [ 573.854589][ T2557] [ 573.881097][ T2557] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.10344: lblock 0 mapped to illegal pblock 0 (length 4) [ 573.916748][ T2557] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 573.929942][ T2557] EXT4-fs (loop5): This should not happen!! Data will be lost [ 573.929942][ T2557] [ 573.956620][ T3442] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 573.984475][ T3442] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 573.998911][ T3442] EXT4-fs (loop5): This should not happen!! Data will be lost [ 573.998911][ T3442] [ 574.010890][ T28] audit: type=1400 audit(2000000159.480:3769): avc: denied { mounton } for pid=2572 comm="syz.9.10350" path="/file0" dev="autofs" ino=132555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 574.036765][T32151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 574.181522][ T2582] xt_hashlimit: size too large, truncated to 1048576 [ 574.348199][ T3442] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.363964][ T3442] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 574.375292][ T3442] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 574.392477][ T3442] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.411161][ T3442] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 574.426264][ T3442] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 574.435677][ T3442] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.445604][ T3442] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 574.481134][ T3442] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 574.513582][ T3442] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.533979][ T3442] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 574.543550][ T3442] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 574.957943][ T2651] loop9: detected capacity change from 0 to 1024 [ 574.977245][ T2651] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.362868][T31471] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.655634][ T2721] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.806581][ T28] audit: type=1400 audit(2000000161.270:3770): avc: denied { connect } for pid=2729 comm="syz.5.10380" lport=42145 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 575.863557][ T2732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.884751][ T2732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.892333][ T28] audit: type=1400 audit(2000000161.270:3771): avc: denied { name_connect } for pid=2729 comm="syz.5.10380" dest=20001 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 575.922156][ T2730] infiniband syz1: set down [ 575.922830][ T2734] IPv6: NLM_F_CREATE should be specified when creating new route [ 575.936143][ T2730] infiniband syz1: added syz_tun [ 575.975177][ T2730] RDS/IB: syz1: added [ 575.983455][ T2734] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 575.985124][ T2730] smc: adding ib device syz1 with port count 1 [ 575.991322][ T2734] IPv6: NLM_F_CREATE should be set when creating new route [ 576.014164][ T2730] smc: ib device syz1 port 1 has no pnetid [ 577.068878][ T2777] netlink: 'syz.5.10393': attribute type 4 has an invalid length. [ 577.086114][ T2777] netlink: 'syz.5.10393': attribute type 4 has an invalid length. [ 577.150720][ T2777] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.215366][ T2777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.227000][ T2777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.305651][ T117] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.324137][ T117] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.344574][ T117] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.362963][ T117] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.389619][ T117] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.402367][ T117] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.420525][ T117] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.430351][ T117] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.450298][ T28] audit: type=1400 audit(2000000162.920:3772): avc: denied { connect } for pid=2789 comm="syz.6.10396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 578.198098][ T2809] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10403'. [ 578.311780][ T2817] loop9: detected capacity change from 0 to 128 [ 578.342321][ T2817] FAT-fs (loop9): Directory bread(block 32) failed [ 578.352307][ T2817] FAT-fs (loop9): Directory bread(block 33) failed [ 578.361303][ T2817] FAT-fs (loop9): Directory bread(block 34) failed [ 578.384473][ T2817] FAT-fs (loop9): Directory bread(block 35) failed [ 578.400286][ T2817] FAT-fs (loop9): Directory bread(block 36) failed [ 578.415555][ T2817] FAT-fs (loop9): Directory bread(block 37) failed [ 578.445023][ T2817] FAT-fs (loop9): Directory bread(block 38) failed [ 578.481800][ T2817] FAT-fs (loop9): Directory bread(block 39) failed [ 578.500297][ T2817] FAT-fs (loop9): Directory bread(block 40) failed [ 578.507309][ T2817] FAT-fs (loop9): Directory bread(block 41) failed [ 578.544184][ T2829] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10413'. [ 579.131102][ T2858] loop5: detected capacity change from 0 to 256 [ 580.084652][ T2891] loop9: detected capacity change from 0 to 1024 [ 580.116233][ T2891] EXT4-fs: Ignoring removed orlov option [ 580.144351][ T2891] EXT4-fs (loop9): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 580.170010][ T2891] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.680943][ T2904] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10441'. [ 581.288149][ T2917] IPv6: NLM_F_CREATE should be specified when creating new route [ 581.319294][ T2917] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 581.327640][ T2917] IPv6: NLM_F_CREATE should be set when creating new route [ 581.599967][T31471] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.683753][ T28] audit: type=1400 audit(2000000167.150:3773): avc: denied { listen } for pid=2924 comm="syz.9.10450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 582.518491][ T2932] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10454'. [ 582.525864][ T2933] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 582.771928][ T2942] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10458'. [ 582.782878][ T2942] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10458'. [ 584.209842][ T28] audit: type=1400 audit(2000000169.680:3774): avc: denied { remount } for pid=2992 comm="syz.8.10473" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 584.487287][ T3004] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10477'. [ 585.000436][ T3010] loop5: detected capacity change from 0 to 512 [ 585.064762][ T3010] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 585.104129][ T3010] EXT4-fs error (device loop5): __ext4_fill_super:5563: inode #2: comm syz.5.10479: iget: special inode unallocated [ 585.147221][ T3010] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 585.147394][ T3010] EXT4-fs (loop5): get root inode failed [ 585.156510][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 585.156547][ C0] EXT4-fs (loop5): last error at time 2000000170: __ext4_fill_super:5563: inode 2 [ 585.191227][ T3010] EXT4-fs (loop5): mount failed [ 585.298800][ T3029] netlink: 'syz.6.10486': attribute type 16 has an invalid length. [ 585.316078][ T28] audit: type=1326 audit(2000000170.790:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3032 comm="syz.5.10488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174b3ac799 code=0x7ffc0000 [ 585.324606][ T3029] netlink: 'syz.6.10486': attribute type 17 has an invalid length. [ 585.390730][ T3042] ip6gre1: left promiscuous mode [ 585.396352][ T28] audit: type=1326 audit(2000000170.790:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3032 comm="syz.5.10488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174b3ac799 code=0x7ffc0000 [ 585.421773][ T3042] ip6gre1: left allmulticast mode [ 585.427061][ T3042] geneve2: left promiscuous mode [ 585.433549][ T3042] geneve2: left allmulticast mode [ 585.455640][ T28] audit: type=1326 audit(2000000170.820:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3032 comm="syz.5.10488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f174b3ac799 code=0x7ffc0000 [ 585.492799][ T28] audit: type=1326 audit(2000000170.820:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3032 comm="syz.5.10488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174b3ac799 code=0x7ffc0000 [ 585.564975][ T3029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.570635][ T28] audit: type=1326 audit(2000000170.820:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3032 comm="syz.5.10488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174b3ac799 code=0x7ffc0000 [ 585.584117][ T3029] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.642185][ T3029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 585.669269][ T8073] syz1: Port: 1 Link ACTIVE [ 585.773443][ T3062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.782238][ T3062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.963834][ T3071] loop9: detected capacity change from 0 to 1024 [ 586.006235][ T3071] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.072118][T31471] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.812651][ T3112] netlink: 'syz.3.10510': attribute type 1 has an invalid length. [ 586.865610][ T3112] 8021q: adding VLAN 0 to HW filter on device bond2 [ 586.913188][ T3117] bond2: (slave veth5): Enslaving as an active interface with a down link [ 586.935878][ T3112] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 586.943569][ T3112] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 587.059947][ T3132] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10517'. [ 587.741119][ T3162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10527'. [ 587.808928][ T28] audit: type=1400 audit(2000000173.280:3780): avc: denied { watch watch_reads } for pid=3165 comm="syz.3.10529" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 588.047129][ T3184] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10536'. [ 589.188306][ T3224] netlink: 63503 bytes leftover after parsing attributes in process `syz.9.10550'. [ 589.315318][ T3228] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 589.686062][ T3254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.701716][ T3254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.032447][ T3247] loop9: detected capacity change from 0 to 512 [ 590.432945][ T3247] EXT4-fs (loop9): 1 orphan inode deleted [ 590.536695][ T3247] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.628803][ T3275] netlink: 'syz.8.10568': attribute type 16 has an invalid length. [ 590.636856][ T3275] netlink: 'syz.8.10568': attribute type 17 has an invalid length. [ 590.691001][T31471] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.733305][ T3280] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10579'. [ 590.805191][ T3275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 591.327178][ T3276] bond0: left promiscuous mode [ 591.343951][ T3276] bridge2: left promiscuous mode [ 591.355696][ T3276] sit4: left promiscuous mode [ 591.368368][ T3276] geneve2: left promiscuous mode [ 591.379726][ T3276] geneve3: left promiscuous mode [ 591.401160][ T3276] geneve3: left allmulticast mode [ 591.412839][ T3276] gretap3: left allmulticast mode [ 591.430232][ T3276] batadv0: left promiscuous mode [ 591.447358][ T3276] gretap4: left promiscuous mode [ 591.483360][ T3276] bond5: left promiscuous mode [ 591.497941][ T3276] vcan0: left promiscuous mode [ 591.529697][ T3276] ipvlan0: left promiscuous mode [ 591.559693][ T3276] ipvlan0: left allmulticast mode [ 592.332768][ T3356] loop6: detected capacity change from 0 to 512 [ 592.355109][ T3356] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 592.380945][ T3355] netlink: 'syz.9.10596': attribute type 8 has an invalid length. [ 592.401348][ T3355] sch_fq: defrate 0 ignored. [ 592.423889][ T3356] EXT4-fs (loop6): 1 truncate cleaned up [ 592.434271][ T3356] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.543182][T31359] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.065550][ T3370] batadv_slave_1: entered promiscuous mode [ 593.106352][ T3369] batadv_slave_1: left promiscuous mode [ 593.424153][ T3388] netlink: 'syz.9.10608': attribute type 1 has an invalid length. [ 593.478882][ T3388] 8021q: adding VLAN 0 to HW filter on device bond2 [ 593.586013][ T3395] bond2: (slave veth5): Enslaving as an active interface with a down link [ 593.648596][ T3388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.708582][ T3388] bond2: (slave batadv0): making interface the new active one [ 593.751561][ T3388] batadv0: entered promiscuous mode [ 593.781701][ T3388] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 593.899159][ T3411] loop9: detected capacity change from 0 to 512 [ 593.920442][ T3411] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 593.959859][ T3411] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 593.996224][ T3411] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.10614: bad orphan inode 4 [ 594.006929][ T3411] loop9: lost filesystem error report for type 5 error -117 [ 594.013862][ T3411] EXT4-fs (loop9): 1 orphan inode deleted [ 594.027160][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 594.027181][ C0] EXT4-fs (loop9): initial error at time 2000000179: ext4_orphan_get:1417 [ 594.027205][ C0] EXT4-fs (loop9): last error at time 2000000179: ext4_orphan_get:1417 [ 594.067033][ T3411] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.407661][ T3438] netlink: 'syz.6.10626': attribute type 1 has an invalid length. [ 594.448992][ T3438] 8021q: adding VLAN 0 to HW filter on device bond1 [ 594.612576][ T3438] bond1: (slave veth5): Enslaving as an active interface with a down link [ 594.689161][ T3444] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 594.712616][ T3444] bond1: (slave batadv1): making interface the new active one [ 594.714774][ T3446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10627'. [ 594.730374][T31471] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.739599][ T3444] batadv1: entered promiscuous mode [ 594.755989][ T3444] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 595.184925][ T3471] loop5: detected capacity change from 0 to 256 [ 595.222890][ T3471] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 595.874358][ T3500] netlink: 52 bytes leftover after parsing attributes in process `syz.9.10646'. [ 595.934723][ T3500] netlink: 52 bytes leftover after parsing attributes in process `syz.9.10646'. [ 596.067749][ T28] audit: type=1400 audit(2000000181.540:3781): avc: denied { map } for pid=3501 comm="syz.9.10647" path="socket:[135574]" dev="sockfs" ino=135574 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 596.146326][ T28] audit: type=1400 audit(2000000181.540:3782): avc: denied { accept } for pid=3501 comm="syz.9.10647" path="socket:[135574]" dev="sockfs" ino=135574 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 596.209804][ T3509] team0: Device gtp0 is of different type [ 596.472091][ T3527] loop5: detected capacity change from 0 to 512 [ 596.499757][ T3527] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 596.535417][ T3531] loop2: detected capacity change from 0 to 7 [ 596.541746][ T3527] System zones: 1-12 [ 596.552006][ T3527] EXT4-fs (loop5): orphan cleanup on readonly fs [ 596.598770][ T3527] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.10656: invalid indirect mapped block 8 (level 2) [ 596.654547][ T3527] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 596.655272][ T3527] EXT4-fs (loop5): 1 truncate cleaned up [ 596.664584][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 596.664623][ C1] EXT4-fs (loop5): initial error at time 2000000182: ext4_free_branches:1023: inode 11 [ 596.664656][ C1] EXT4-fs (loop5): last error at time 2000000182: ext4_free_branches:1023: inode 11 [ 596.763957][ T3538] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10660'. [ 596.814272][ T3527] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 596.931699][T32151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.298721][ T3556] loop9: detected capacity change from 0 to 1024 [ 597.339711][ T3556] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 597.365385][ T3556] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 597.407603][ T3556] EXT4-fs error (device loop9): ext4_map_blocks:818: inode #15: comm syz.9.10666: lblock 0 mapped to illegal pblock 0 (length 1) [ 597.457104][ T3556] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 597.520945][ T3556] EXT4-fs (loop9): This should not happen!! Data will be lost [ 597.520945][ T3556] [ 597.567485][ T3560] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #15: comm syz.9.10666: lblock 0 mapped to illegal pblock 0 (length 1) [ 597.622760][ T3560] EXT4-fs error (device loop9): ext4_ext_remove_space:2954: inode #15: comm syz.9.10666: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 597.672577][ T3560] EXT4-fs error (device loop9) in ext4_setattr:5983: Corrupt filesystem [ 597.716561][T31471] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 598.147552][ T3564] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10668'. [ 598.157921][ T3564] netlink: 196 bytes leftover after parsing attributes in process `syz.9.10668'. [ 598.168840][ T3564] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10668'. [ 598.178573][ T3564] netlink: 196 bytes leftover after parsing attributes in process `syz.9.10668'. [ 598.306653][ T28] audit: type=1326 audit(2000000183.780:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3573 comm="syz.8.10671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9e9dc799 code=0x7ffc0000 [ 598.353560][ T28] audit: type=1326 audit(2000000183.780:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3573 comm="syz.8.10671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9e9dc799 code=0x7ffc0000 [ 598.402382][ T28] audit: type=1326 audit(2000000183.820:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3573 comm="syz.8.10671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcc9e9dc799 code=0x7ffc0000 [ 598.454346][ T28] audit: type=1326 audit(2000000183.820:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3573 comm="syz.8.10671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9e9dc799 code=0x7ffc0000 [ 598.563862][ T28] audit: type=1326 audit(2000000183.820:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3573 comm="syz.8.10671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9e9dc799 code=0x7ffc0000 [ 598.624068][ T28] audit: type=1326 audit(2000000183.820:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3573 comm="syz.8.10671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcc9e9dc799 code=0x7ffc0000 [ 598.691830][ T28] audit: type=1326 audit(2000000183.820:3789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3573 comm="syz.8.10671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9e9dc799 code=0x7ffc0000 [ 598.761184][ T28] audit: type=1326 audit(2000000183.820:3790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3573 comm="syz.8.10671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9e9dc799 code=0x7ffc0000 [ 598.892036][ T3605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10683'. [ 599.345835][ T3640] loop6: detected capacity change from 0 to 512 [ 599.385038][ T3640] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.414605][ T3640] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 599.551763][T31359] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.808034][ T3662] loop5: detected capacity change from 0 to 512 [ 599.836736][ T3662] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.854143][ T3662] ext4 filesystem being mounted at /233/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 599.913282][T32151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.974618][ T3675] loop5: detected capacity change from 0 to 1024 [ 599.992314][ T3675] EXT4-fs: inline encryption not supported [ 600.030088][ T3675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.289066][T32151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.338918][ T3684] syzkaller1: entered promiscuous mode [ 600.350487][ T3684] syzkaller1: entered allmulticast mode [ 602.176474][ T3730] loop5: detected capacity change from 0 to 4096 [ 602.204712][T28477] smc: removing ib device syz1 [ 602.217830][ T3366] syz1: Port: 1 Link DOWN [ 602.232298][ T3730] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.402419][T32151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.464161][ T3757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10743'. [ 602.767774][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 602.767792][ T28] audit: type=1400 audit(2000000188.240:3808): avc: denied { watch watch_reads } for pid=3775 comm="syz.3.10749" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 602.948297][ T3790] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10754'. [ 603.141325][ T3810] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=3810 comm=syz.9.10760 [ 603.224016][ T3820] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10763'. [ 603.331080][ T3799] chnl_net:caif_netlink_parms(): no params data found [ 603.388251][ T3799] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.396113][ T3799] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.403478][ T3799] bridge_slave_0: entered allmulticast mode [ 603.411210][ T3799] bridge_slave_0: entered promiscuous mode [ 603.419145][ T3799] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.433903][ T3799] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.441436][ T3799] bridge_slave_1: entered allmulticast mode [ 603.456781][ T3799] bridge_slave_1: entered promiscuous mode [ 603.479203][ T3799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.490759][ T3799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.512062][ T3799] team0: Port device team_slave_0 added [ 603.513131][ T3799] team0: Port device team_slave_1 added [ 603.530858][ T3799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.530874][ T3799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.530946][ T3799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.531663][ T3799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.531742][ T3799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.531826][ T3799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.539170][ T3846] loop5: detected capacity change from 0 to 512 [ 603.571414][ T3846] EXT4-fs (loop5): 1 orphan inode deleted [ 603.571816][ T3846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.590809][ T3799] hsr_slave_0: entered promiscuous mode [ 603.591405][ T3799] hsr_slave_1: entered promiscuous mode [ 603.592826][ T3799] debugfs: 'hsr0' already exists in 'hsr' [ 603.592843][ T3799] Cannot create hsr debugfs directory [ 603.767873][ T3851] tipc: Started in network mode [ 603.822867][ T3442] tipc: Subscription rejected, illegal request [ 603.827484][ T3851] tipc: Node identity 4, cluster identity 4711 [ 603.839215][ T3851] tipc: Node number set to 4 [ 603.872943][T32151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.892669][ T28] audit: type=1326 audit(2000000189.360:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.5.10773" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f174b3ac799 code=0x0 [ 604.034960][ T28] audit: type=1326 audit(2000000189.510:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.8.10775" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc9e9dc799 code=0x0 [ 604.045518][ T3799] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 604.067357][ T3799] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 604.078187][ T3799] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 604.087146][ T3799] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 604.104090][ T3799] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.111220][ T3799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.118588][ T3799] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.125780][ T3799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.170343][ T3799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.177142][ T3869] loop9: detected capacity change from 0 to 4096 [ 604.182774][ T3799] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.191844][ T3869] EXT4-fs: Ignoring removed bh option [ 604.197994][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.206500][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.217490][ T3869] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.244589][T28485] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.252127][T28485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.265917][T28485] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.273345][T28485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.289540][ T3869] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #15: comm syz.9.10776: corrupted inode contents [ 604.302732][ T3869] EXT4-fs (loop9): Remounting filesystem read-only [ 604.315026][ T28] audit: type=1400 audit(2000000189.780:3811): avc: denied { link } for pid=3868 comm="syz.9.10776" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 604.340285][T31471] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.358187][T28477] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 604.368960][T28477] Quota error (device loop9): write_blk: dquota write failed [ 604.377395][T28477] Quota error (device loop9): free_dqentry: Can't write quota data block 5 [ 604.414948][ T3799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.528267][ T3799] veth0_vlan: entered promiscuous mode [ 604.536409][ T3799] veth1_vlan: entered promiscuous mode [ 604.556151][ T3799] veth0_macvtap: entered promiscuous mode [ 604.564845][ T3799] veth1_macvtap: entered promiscuous mode [ 604.577455][ T3799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.588802][ T3799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.600410][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.610090][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.622358][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.636931][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.830431][ T3911] netlink: 'syz.3.10785': attribute type 1 has an invalid length. [ 604.859237][ T3911] netlink: 'syz.3.10785': attribute type 4 has an invalid length. [ 604.869079][ T3915] loop5: detected capacity change from 0 to 512 [ 604.885913][ T3915] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.886913][ T3911] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.10785'. [ 604.902129][ T3915] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 604.916625][ T3919] netlink: 'syz.3.10785': attribute type 1 has an invalid length. [ 604.948665][ T3919] netlink: 'syz.3.10785': attribute type 4 has an invalid length. [ 604.982787][ T3919] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.10785'. [ 605.013943][ T36] batadv0: left promiscuous mode [ 605.163765][T32151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.449650][ T3939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10795'. [ 605.466456][ T3939] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10795'. [ 606.024054][T28485] batadv1: left promiscuous mode [ 607.105254][ T4036] wireguard0: entered promiscuous mode [ 607.112061][ T4036] wireguard0: entered allmulticast mode [ 607.218355][ T4049] netlink: 'syz.9.10820': attribute type 27 has an invalid length. [ 607.246762][ T4049] geneve2: left promiscuous mode [ 607.251955][ T4049] geneve2: left allmulticast mode [ 607.257675][ T4049] ipip0: left promiscuous mode [ 607.267248][ T4049] bond1: left promiscuous mode [ 607.276291][ T3442] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.299216][ T4050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.306947][ T4050] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.316484][ T4050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 607.333097][ T3442] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.343473][ T3442] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.359481][ T3442] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.531755][ T28] audit: type=1400 audit(2000000193.000:3812): avc: denied { getopt } for pid=4066 comm="syz.5.10827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 607.623530][ T4075] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10831'. [ 607.994733][ T4098] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10840'. [ 608.005426][ T4098] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10840'. [ 608.112631][ T4109] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10845'. [ 608.226221][ T4137] loop6: detected capacity change from 0 to 512 [ 608.243179][ T4137] EXT4-fs: Ignoring removed nobh option [ 608.261784][ T4137] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 608.305755][ T4137] EXT4-fs (loop6): 1 truncate cleaned up [ 608.319718][ T4137] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.806059][ T4159] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10859'. [ 608.854929][ T28] audit: type=1326 audit(2000000194.330:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4156 comm="syz.5.10858" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f174b3ac799 code=0x0 [ 609.089457][ T3799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.143356][ T4175] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=4175 comm=syz.8.10864 [ 609.238275][ T28] audit: type=1326 audit(2000000194.710:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.9.10852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e255c799 code=0x7fc00000 [ 609.650453][ T4207] loop5: detected capacity change from 0 to 1024 [ 609.668432][ T4207] EXT4-fs: Ignoring removed nomblk_io_submit option [ 609.685762][ T4207] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 609.712065][ T4207] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 609.734854][ T4207] System zones: 0-1, 3-36 [ 609.752176][ T4207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.786278][ T28] audit: type=1326 audit(2000000195.260:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4206 comm="syz.5.10878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174b3ac799 code=0x7ffc0000 [ 609.811729][ T28] audit: type=1326 audit(2000000195.260:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4206 comm="syz.5.10878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174b3ac799 code=0x7ffc0000 [ 609.836302][ T28] audit: type=1326 audit(2000000195.260:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4206 comm="syz.5.10878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174b3ac799 code=0x7ffc0000 [ 609.838591][ T4219] tipc: Started in network mode [ 609.860371][ T28] audit: type=1326 audit(2000000195.260:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4206 comm="syz.5.10878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174b3ac799 code=0x7ffc0000 [ 609.889710][ T28] audit: type=1326 audit(2000000195.280:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4206 comm="syz.5.10878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f174b3ac799 code=0x7ffc0000 [ 609.889790][ T4207] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 609.894955][ T117] tipc: Subscription rejected, illegal request [ 609.914452][ T28] audit: type=1326 audit(2000000195.280:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4206 comm="syz.5.10878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174b3ac799 code=0x7ffc0000 [ 609.965024][ T4219] tipc: Node identity 4, cluster identity 4711 [ 609.980770][ T28] audit: type=1326 audit(2000000195.280:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4206 comm="syz.5.10878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174b3ac799 code=0x7ffc0000 [ 610.004539][ T4219] tipc: Node number set to 4 [ 610.058184][ T28] audit: type=1326 audit(2000000195.280:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4206 comm="syz.5.10878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174b3ac799 code=0x7ffc0000 [ 610.084259][T32151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.166926][ T4232] loop5: detected capacity change from 0 to 512 [ 610.210622][ T4232] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.223499][ T4232] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.286807][T32151] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.932508][ T4312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10918'. [ 611.978869][ T4317] tipc: Failed to remove unknown binding: 66,1,1/0:2671546959/2671546961 [ 611.978889][ T4312] netem: incorrect gi model size [ 611.978902][ T4312] netem: change failed [ 612.026092][ T4319] loop5: detected capacity change from 0 to 164 [ 612.375589][ T4328] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10926'. [ 612.546935][ T4333] loop6: detected capacity change from 0 to 128 [ 612.777551][ T117] tipc: Subscription rejected, illegal request [ 613.211810][ T4365] netlink: 'syz.9.10937': attribute type 1 has an invalid length. [ 613.232107][T28485] bridge_slave_1: left allmulticast mode [ 613.266925][T28485] bridge_slave_1: left promiscuous mode [ 613.294982][T28485] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.327268][T28485] bridge_slave_0: left allmulticast mode [ 613.345428][T28485] bridge_slave_0: left promiscuous mode [ 613.367532][T28485] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.506591][ T4384] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10940'. [ 613.548063][ T4387] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10941'. [ 613.602388][ T4389] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10941'. [ 613.755893][T28485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.770376][T28485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.796841][T28485] bond0 (unregistering): Released all slaves [ 613.823348][T28485] bond1 (unregistering): (slave macvlan0): Releasing active interface [ 613.854528][T28485] bond1 (unregistering): Released all slaves [ 613.884057][T28485] bond2 (unregistering): Released all slaves [ 613.967587][T28485] hsr_slave_0: left promiscuous mode [ 613.973349][T28485] hsr_slave_1: left promiscuous mode [ 613.997718][T28485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.024597][T28485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.342361][ T4348] chnl_net:caif_netlink_parms(): no params data found [ 614.430199][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.448663][ T4348] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.464169][ T4348] bridge_slave_0: entered allmulticast mode [ 614.479816][ T4348] bridge_slave_0: entered promiscuous mode [ 614.495002][ T4431] geneve2: entered promiscuous mode [ 614.523636][T28485] IPVS: stop unused estimator thread 0... [ 614.533096][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.565233][ T4348] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.572519][ T4348] bridge_slave_1: entered allmulticast mode [ 614.627205][ T4348] bridge_slave_1: entered promiscuous mode [ 614.667003][ T36] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 47386 - 0 [ 614.681969][ T36] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 47386 - 0 [ 614.730650][ T4348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.772894][ T36] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 47386 - 0 [ 614.820239][ T36] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 47386 - 0 [ 614.892102][ T4348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.969231][ T4348] team0: Port device team_slave_0 added [ 614.982449][ T4348] team0: Port device team_slave_1 added [ 615.035093][ T4348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.058288][ T4348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.160839][ T4348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.201119][ T4348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.228057][ T4348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.281936][ T4348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.428752][ T4348] hsr_slave_0: entered promiscuous mode [ 615.464362][ T4348] hsr_slave_1: entered promiscuous mode [ 615.503354][ T4348] debugfs: 'hsr0' already exists in 'hsr' [ 615.515356][ T4348] Cannot create hsr debugfs directory [ 615.725999][ T4348] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.751712][ T4348] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.818682][ T4348] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.849776][ T4348] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.863003][ T4497] netlink: 400 bytes leftover after parsing attributes in process `syz.6.10962'. [ 615.949633][ T4348] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.973168][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10966'. [ 615.991716][ T4348] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.029846][ T4506] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10966'. [ 616.067205][ T4512] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10968'. [ 616.082717][ T4512] netlink: 1 bytes leftover after parsing attributes in process `syz.9.10968'. [ 616.103093][ T4512] netlink: 1 bytes leftover after parsing attributes in process `syz.9.10968'. [ 616.144323][ T4348] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.169184][ T4348] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.027803][ T4348] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 617.222808][ T4348] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 617.263164][ T4550] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10981'. [ 617.302908][ T4348] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 617.345601][ T4348] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 617.444623][ T4348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.470675][ T4348] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.492691][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.500094][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.542418][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.549700][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.624370][ T4348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 617.807715][ T4545] loop9: detected capacity change from 0 to 1024 [ 617.842413][ T4348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.885058][ T4545] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 617.908163][ T4545] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 618.031659][ T4545] JBD2: no valid journal superblock found [ 618.049227][ T4545] EXT4-fs (loop9): Could not load journal inode [ 618.066799][ T4348] veth0_vlan: entered promiscuous mode [ 618.080603][ T4348] veth1_vlan: entered promiscuous mode [ 618.110650][ T4348] veth0_macvtap: entered promiscuous mode [ 618.178318][ T4348] veth1_macvtap: entered promiscuous mode [ 618.217543][ T4348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.241734][ T4348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.278477][T28481] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.288593][T28481] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.310665][T28481] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.346895][T28481] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.490986][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 618.491078][ T28] audit: type=1400 audit(2000000203.960:3886): avc: denied { read } for pid=4600 comm="syz.0.10933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 618.550767][ T4607] __nla_validate_parse: 6 callbacks suppressed [ 618.550787][ T4607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10933'. [ 619.827533][ T4686] netlink: 'syz.8.11032': attribute type 27 has an invalid length. [ 619.872996][ T4686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 619.942717][ T4690] ================================================================== [ 619.950953][ T4690] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 619.958015][ T4690] [ 619.960361][ T4690] read-write to 0xffff8881467ffbac of 4 bytes by task 4688 on cpu 1: [ 619.968448][ T4690] fifo_open+0x86/0x5d0 [ 619.972728][ T4690] do_dentry_open+0x4ca/0xa90 [ 619.977614][ T4690] vfs_open+0x37/0x1e0 [ 619.981726][ T4690] path_openat+0x1b70/0x2050 [ 619.986598][ T4690] do_file_open+0x16c/0x290 [ 619.991204][ T4690] do_sys_openat2+0x94/0x130 [ 619.995809][ T4690] __x64_sys_open+0xe6/0x110 [ 620.000502][ T4690] x64_sys_call+0x14b9/0x3020 [ 620.005192][ T4690] do_syscall_64+0x12c/0x370 [ 620.009789][ T4690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.015694][ T4690] [ 620.018033][ T4690] read to 0xffff8881467ffbac of 4 bytes by task 4690 on cpu 0: [ 620.025589][ T4690] wait_for_partner+0x117/0x1e0 [ 620.030552][ T4690] fifo_open+0x462/0x5d0 [ 620.034996][ T4690] do_dentry_open+0x4ca/0xa90 [ 620.039794][ T4690] vfs_open+0x37/0x1e0 [ 620.043897][ T4690] path_openat+0x1b70/0x2050 [ 620.048525][ T4690] do_file_open+0x16c/0x290 [ 620.053046][ T4690] do_sys_openat2+0x94/0x130 [ 620.057733][ T4690] __x64_sys_openat+0xf2/0x120 [ 620.062524][ T4690] x64_sys_call+0x1e39/0x3020 [ 620.067309][ T4690] do_syscall_64+0x12c/0x370 [ 620.071903][ T4690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.078029][ T4690] [ 620.080364][ T4690] value changed: 0x00000001 -> 0x00000002 [ 620.086167][ T4690] [ 620.088671][ T4690] Reported by Kernel Concurrency Sanitizer on: [ 620.094825][ T4690] CPU: 0 UID: 0 PID: 4690 Comm: syz.6.11023 Tainted: G W syzkaller #0 PREEMPT(full) [ 620.105861][ T4690] Tainted: [W]=WARN [ 620.109666][ T4690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 620.119756][ T4690] ==================================================================