last executing test programs: 4m6.28161435s ago: executing program 32 (id=469): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x81ff) 4m6.207471275s ago: executing program 33 (id=784): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x4f, 0x5}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x0, 0x1, 0x3, 0x6, 0x8}]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@deltaction={0x14, 0x31, 0x10, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000340)={@dev}, &(0x7f0000000380)=0x14) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 3m41.948225255s ago: executing program 34 (id=1323): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 3m40.543703967s ago: executing program 35 (id=1361): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x267, &(0x7f0000000e40)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 3m3.695153056s ago: executing program 36 (id=2196): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000012ea2a400a09001287240000000109021200010000000009040000000f01"], 0x0) ftruncate(r0, 0x8800000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0, 0xfff, 0x4, 0x6, 0x1, 0x9}}, 0x118) sendfile(r1, r0, 0x0, 0x558410e8) 2m56.277851494s ago: executing program 37 (id=2361): timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80540, 0x188) read$hiddev(r0, 0x0, 0x0) time(&(0x7f0000000000)) 2m42.14836546s ago: executing program 8 (id=2638): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 2m42.076809504s ago: executing program 8 (id=2644): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc002}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m41.985374349s ago: executing program 8 (id=2647): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000140)={[{@usrquota}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x23) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x1, 0x8a5, 0x1001f0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r2, 0x20, 0x2000, 0x8000) 2m41.609938801s ago: executing program 7 (id=2656): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 2m41.606526221s ago: executing program 8 (id=2657): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 2m41.589690712s ago: executing program 7 (id=2658): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) r0 = syz_io_uring_setup(0x116c, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2m41.335458957s ago: executing program 7 (id=2662): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000440)="$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") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0) 2m41.305099118s ago: executing program 8 (id=2663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 2m41.198900695s ago: executing program 7 (id=2664): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x100000000, 0xfffffffffffffffd}) 2m40.810753397s ago: executing program 7 (id=2667): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd2d, 0x25dfdbfd, {0x2, 0x20, 0x2d, 0xcb, r3}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_RT_PRIORITY={0x8, 0x9, 0x102}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x80d0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2m40.40349738s ago: executing program 8 (id=2672): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) 2m40.40326599s ago: executing program 38 (id=2672): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) 2m40.260467969s ago: executing program 7 (id=2675): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file1\x00', 0x8000, 0x30) open(&(0x7f0000000240)='./file1\x00', 0xe142, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x51) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/123, 0x7b, 0x841) 2m40.096885558s ago: executing program 39 (id=2675): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file1\x00', 0x8000, 0x30) open(&(0x7f0000000240)='./file1\x00', 0xe142, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x51) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001440)=""/123, 0x7b, 0x841) 2m39.331409962s ago: executing program 6 (id=2687): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000000c0)={[{@grpid}, {@sb={'sb', 0x3d, 0x7ff}}, {@prjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@grpid}]}, 0x0, 0x236, &(0x7f0000000300)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x42c0, 0x0, 0x400000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x840000000002, 0x3, 0xff) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfd}, 0x206c}}, 0x40010) 2m39.279772575s ago: executing program 6 (id=2688): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_genetlink_get_family_id$batadv(0x0, r1) setreuid(0xee01, 0x0) setresgid(r2, 0xffffffffffffffff, 0x0) sendmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000380)="9a", 0x1}], 0x1, &(0x7f0000002cc0)=[@cred={{0x1c}}], 0x20, 0x4005}}], 0x1, 0x4000050) 2m39.252388617s ago: executing program 6 (id=2689): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) dup3(r0, r1, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m38.367646528s ago: executing program 6 (id=2701): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000340), 0x0, 0x2b1, &(0x7f0000001640)="$eJzs3UFr02Acx/Ff223tOrb2MAQF8UEveglbfQVFNhALylxFPQiZS7U0tqOplQ5xu3n1dQyPnhTUN7CLN+/iZQiClx3EytJmy7ai29yWuX4/UPL0eZ5/8qRPUv4JNF27++pJpeRZJbuheMooLi1rXcpulLpi3WXcLw8pbFlXRn58Pn/73v0b+UJhasaY6fzs1ZwxZuzC+2fPX1/82Bi582bsXVKr2Qdr33NfVs+snl37NRusvSbZZq5Wa9hzrmPmy17FMuaW69ieY8pVz6k3TKi95NYWFlrGrs6PphfqjucZu9oyFadlGjXTqLeM/cguV41lWWY0rX6T2HdEcWVmxs4fyWAQheFelfV63k70bCyuHMegAADAyeLn/ylJx5z/Py57puyZam1bfr87/49rH/m/1Nf5//6R//eDjfw/3T1/Q2Ix8n8AAAAAAAAAAAAAAAAAAAAAAP4L6+12pt1uZ4Jl8EpKSkkK3kc9ThwN5r+/hX64l5Lcl81is9hZdtrzJZXlytHEoPTTPx66OuXp64WpCePL6oO71I1fahYTSgbxgWzv+MlOvAnHL2lQ6fD2c8povHd8rkd8sziky5faye6WHVnK6NND1eRq3j+ut+JfTBpz7WZhR/yw3w8AAAAAgNPAMpt2Xb/77ZYJHhuyo71TuXV/QJm/3B/YvL4OLsrPDUSzzwAAAAAA9BuvtRizXdepe63FyikvBP9/cCgr9D+6SHcnFa5Z/kPnAUndmrd+TUqRz8VeCnFJBw1P/Nssf5O0rWY88uk+jMLXp50zYC+do/xWAgAAAHAUgqQ/FvVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoY3t9eFjQ/yDPHgttLhHNXgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnw+8AAAD//+lsE1U=") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) pread64(r0, &(0x7f0000000600)=""/4099, 0xfdef, 0x110) 2m38.271311283s ago: executing program 6 (id=2703): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$setperm(0x5, r0, 0x30925) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x0) 2m37.710578886s ago: executing program 6 (id=2708): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x2000410, &(0x7f00000006c0)={[{@bsdgroups}, {@nombcache}, {@errors_remount}, {@quota}, {@jqfmt_vfsold}]}, 0xc1, 0x808, &(0x7f0000001380)="$eJzs3c1rHG8dAPDvbF42SauJIOivp4CggdKNqbFV8BDxIIKFgp5tw2YbajbZkt2UJgSaHgpeCioeBL307Es9CF59ueo/IR6kRTQN6klXZnY3r/uS6O7G/vr5wGSeZ+aZeeaZ55lnn8kMuwG8t2bTP7mIDyLiu0nEdHN5EhFjWWg0YqmR7h/7u8V0SqJe/8ZfkyzNL68c7Stpzq80I5+MiN8+j7ieO53rZHNeLm02Q/O19Ufz1e2dGw/Xl1dLq6WNWwuLizdvf/72rbNbtVdPepX173/Yufrme1/9zM+XRuMTr178LomluNpcd7C/W+y1/UXNxmzznIylp/CEr/Q7s0vW8+Tzfym9NEcaV3l8ENMxkoU66H4BAgDviKfpyBkAeM8kvT7/RwwRAODDpfV/gIP93WJrutz/SAzXX74cERON8reebzbWjDaf2U1kz0GnDpITT0aSiJjpQ/6zEfHjX33rp+kUA3oOCdDO3rPG/GA/f6r/T9L+b7z3HvId13y222b1xnazpxaf7P+ye09gQH6djn++cHb8d+3whZ6J7O+p8c9Evs21+9/ofv2ncq87bHqOvqm3dPz3pWPvth2N/w5fWpsZacY+ko35xpIHD8ultG/7aETMxVg+jS9kSdu/BTX39l9vO+V/fPz3t+9/+ydp/un8KEXu9Wg+6o338v6djddXlmvL/Sh7Vv5nEddG25U/ORz/Jifqf+mwpHc77vVk1Xzti9/5UaeUafnT8rams+UfrPrLiE+3rf+juky6vp84nzWH+VajaOMXf/rh1NmljXN0VP/5bJ7m37oXGIa0/qe6l38mDVW3d9aWy+XSZvXiefz+5fRvOq073v7blz9r/yek7X88+WYWbrW0J8u12uZCxHjy9bPLbx5t24q30qfln/tU++u/fftv9AXpPeH9w1h3o2/Gf5bO2zSCo/5vr1P5Byst/8qF6r9LoPUK7qlVryY653+++l/MQnPNJefp/3oc6f/QmgEAAAAAAAAAAAAAAAAAAAAAAADg4nIRcTWSXOEwnMsVCo3f8P54TOXKlWrt+oPK1sZKZL+VPRNjudZXXU4f+z7Uheb34bfiN0/FPxcRH4uIH+Qns3ihWCmvXHbhAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDpysnf/3+azgqFxro/5y/76ACAgZm47AMAAIbO5z8AvH8u9vk/ObDjAACG58L3//VkMAcCAAzNuT//7w/2OACA4fH8HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAG7e+dOOtX/ub9bTOMrj7e31iqPb6yUqmuF9a1ioVjZfFRYrVRWy6VCsbLecUd7jVm5Unm0GBtbT+ZrpWptvrq9c2+9srVRu/dwfXm1dK80NrSSAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD5Vbd31pbL5dJm/wP1er0+4CyGFZgsTXZOk0TEoHKPXERfdphWRD8PbHRgRe4QeP6i0WB7JN7741iWrPtZnRl44+9XYLxLmqSfeU2eXnK8l5gcdrcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8M74TwAAAP//Wt4Pjg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './bus/file0'}, 0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, 0x0, &(0x7f00000008c0)) syz_io_uring_setup(0x1914, &(0x7f0000000700)={0x0, 0xa76a, 0x4000, 0x7fffffe, 0x175}, 0x0, 0x0) 2m37.662497669s ago: executing program 40 (id=2708): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x2000410, &(0x7f00000006c0)={[{@bsdgroups}, {@nombcache}, {@errors_remount}, {@quota}, {@jqfmt_vfsold}]}, 0xc1, 0x808, &(0x7f0000001380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './bus/file0'}, 0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, 0x0, &(0x7f00000008c0)) syz_io_uring_setup(0x1914, &(0x7f0000000700)={0x0, 0xa76a, 0x4000, 0x7fffffe, 0x175}, 0x0, 0x0) 2m18.681330135s ago: executing program 1 (id=3115): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000280)={0x84, @private=0xa010101, 0x15, 0x3, 'lblc\x00', 0x1, 0x0, 0x7b}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) 2m18.433709248s ago: executing program 1 (id=3121): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10) bind$tipc(r1, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) 2m18.40008221s ago: executing program 1 (id=3123): r0 = socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6}, 0x10) 2m18.307716266s ago: executing program 1 (id=3125): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@uni_xlate}, {@shortname_winnt}, {@rodir}, {@fat=@nfs_nostale_ro}, {@shortname_mixed}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x588}}, {@fat=@dmask={'dmask', 0x3d, 0xe4}}, {@fat=@showexec}, {@shortname_mixed}, {@utf8}, {@numtail}]}, 0x0, 0x2ad, &(0x7f0000000840)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) pread64(r0, &(0x7f0000000600)=""/4099, 0x1003, 0x110) 2m18.25113692s ago: executing program 1 (id=3127): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m17.759529548s ago: executing program 1 (id=3131): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x98}, 0x1, 0x7}, 0x8890) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="814c8d8e"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 2m17.759165508s ago: executing program 41 (id=3131): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x98}, 0x1, 0x7}, 0x8890) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="814c8d8e"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 2m3.710479718s ago: executing program 0 (id=3460): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x3fe, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) shutdown(r0, 0x1) 2m3.394733267s ago: executing program 0 (id=3467): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) 2m3.250111175s ago: executing program 0 (id=3473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x1}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x5, 0x10}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x60, 0x1, 0x18c49}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) 2m3.091204314s ago: executing program 0 (id=3480): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$9p_virtio(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x48000, 0x0) 2m3.051075017s ago: executing program 0 (id=3482): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) 2m2.439668002s ago: executing program 0 (id=3492): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2004000, &(0x7f00000022c0), 0x1, 0x563, &(0x7f00000007c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1) unlinkat(r1, &(0x7f0000000000)='./file1\x00', 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 2m2.431861052s ago: executing program 42 (id=3492): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2004000, &(0x7f00000022c0), 0x1, 0x563, &(0x7f00000007c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1) unlinkat(r1, &(0x7f0000000000)='./file1\x00', 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 2.296002448s ago: executing program 3 (id=5689): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)="ecde", 0x2}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="b0"], 0xb0}, 0x0, 0x8400, 0x1}) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe15, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 2.24936249s ago: executing program 4 (id=5692): socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 2.193388083s ago: executing program 4 (id=5696): setfsgid(0xee00) r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000300)='map_files\x00') fchdir(r2) rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 2.063236171s ago: executing program 9 (id=5699): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.006086244s ago: executing program 3 (id=5701): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f00006fb000/0x2000)=nil, 0x2000, &(0x7f0000000280)=""/150) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) 1.90933453s ago: executing program 9 (id=5702): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x20, 0x3, 0x2, 0xfffff034}]}, 0x10) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x44, r4, 0xf03, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0xfffffffffffffff6}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG, @TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0x44}}, 0x0) 1.786444737s ago: executing program 9 (id=5703): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={r2, 0x2}, 0x8) 1.744966059s ago: executing program 9 (id=5704): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0xb00, 0x2000000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x4, 0x100000000000003, 0x3}) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 1.275344566s ago: executing program 4 (id=5706): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 987.615753ms ago: executing program 4 (id=5709): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getneigh={0x14, 0x1e, 0x4, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}}, 0x0) 968.235924ms ago: executing program 5 (id=5710): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x98) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 838.664122ms ago: executing program 5 (id=5713): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESOCT=r1], 0x15) 778.910465ms ago: executing program 9 (id=5715): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 756.361676ms ago: executing program 9 (id=5717): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x8}, 0x100010, 0x32, 0x43a1bd76, 0x7, 0x9, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 725.829758ms ago: executing program 5 (id=5718): r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20002) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0xa0000007}) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x400aee2, 0x2, 0x1, 0x317}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x3}) 643.577472ms ago: executing program 5 (id=5719): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x12, r0, 0x100000000) 612.785534ms ago: executing program 5 (id=5721): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20) r0 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0xa377, 0x0, 0x3, 0x310}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 500.687611ms ago: executing program 2 (id=5723): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={r2, 0x2}, 0x8) 486.669541ms ago: executing program 2 (id=5724): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) close(r0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r3) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r4, 0x325, 0x400, 0x25dfdbfe, {0x8}}, 0x14}}, 0x4800) 379.855448ms ago: executing program 3 (id=5725): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x101, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001780)={0x14, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) 379.184368ms ago: executing program 2 (id=5735): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount$tmpfs(0x0, 0x0, 0x0, 0x800400, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 334.0679ms ago: executing program 2 (id=5726): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = syz_io_uring_setup(0x10d4, &(0x7f0000000480)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r1, 0x47bc, 0x0, 0x200000000000000, 0x0, 0x0) 330.578091ms ago: executing program 3 (id=5727): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 171.50917ms ago: executing program 3 (id=5728): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 136.587722ms ago: executing program 4 (id=5729): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESOCT=r1], 0x15) 136.166702ms ago: executing program 3 (id=5730): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0xb00, 0x2000000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x4, 0x100000000000003, 0x3}) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 82.096765ms ago: executing program 5 (id=5731): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)="ecde", 0x2}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="b0"], 0xb0}, 0x0, 0x8400, 0x1}) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe15, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 81.435195ms ago: executing program 2 (id=5742): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.79334ms ago: executing program 2 (id=5732): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x3, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) 0s ago: executing program 4 (id=5733): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0xe2d}}]}, 0xff, 0x50f, &(0x7f0000000140)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r0, 0x0, 0x100000000) kernel console output (not intermixed with test programs): .9.4018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 212.135542][T16260] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4018'. [ 212.181516][T16260] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4018'. [ 212.542795][ T29] audit: type=1326 audit(2000000362.988:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16237 comm="syz.2.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ef18acb9 code=0x7fc00000 [ 212.764322][T16277] geneve0 speed is unknown, defaulting to 1000 [ 213.793740][T16290] loop3: detected capacity change from 0 to 128 [ 213.889762][T16294] bio_check_eod: 252 callbacks suppressed [ 213.889782][T16294] syz.3.4029: attempt to access beyond end of device [ 213.889782][T16294] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 213.929620][T16296] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4031'. [ 213.938814][T16294] syz.3.4029: attempt to access beyond end of device [ 213.938814][T16294] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 213.982344][T16294] syz.3.4029: attempt to access beyond end of device [ 213.982344][T16294] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 214.010925][T16294] syz.3.4029: attempt to access beyond end of device [ 214.010925][T16294] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 214.048073][T16294] syz.3.4029: attempt to access beyond end of device [ 214.048073][T16294] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 214.091967][T16294] syz.3.4029: attempt to access beyond end of device [ 214.091967][T16294] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 214.128709][T16294] syz.3.4029: attempt to access beyond end of device [ 214.128709][T16294] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 214.155046][T16294] syz.3.4029: attempt to access beyond end of device [ 214.155046][T16294] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 214.622567][T16312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4036'. [ 214.631546][T16312] netlink: 'syz.2.4036': attribute type 5 has an invalid length. [ 214.639563][T16312] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4036'. [ 214.655562][T16312] geneve3: entered promiscuous mode [ 214.661663][T16312] geneve3: entered allmulticast mode [ 214.682299][ T9904] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 214.691234][ T9904] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 214.711410][ T9904] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 214.723546][ T9904] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 214.843295][T16320] netlink: 'syz.2.4040': attribute type 1 has an invalid length. [ 214.870296][T16320] 8021q: adding VLAN 0 to HW filter on device bond3 [ 215.004680][T16320] bond3: (slave veth13): Enslaving as an active interface with a down link [ 215.017461][T16324] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 215.029486][T16324] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 215.085548][T16329] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4042'. [ 215.124438][T16329] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.150137][T16329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.164872][T16329] bond2: (slave bond0): Enslaving as an active interface with an up link [ 215.185809][T16329] bond2 (unregistering): (slave bond0): Releasing backup interface [ 215.195662][T16329] bond2 (unregistering): Released all slaves [ 215.236547][T16337] geneve0 speed is unknown, defaulting to 1000 [ 215.335661][T16341] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4048'. [ 215.398549][T16346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4050'. [ 215.438281][T16350] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.4052'. [ 215.471975][T16355] lo: entered allmulticast mode [ 215.478701][T16355] lo: left allmulticast mode [ 215.561183][ T29] audit: type=1326 audit(2000000366.008:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16360 comm="syz.5.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 215.585008][ T29] audit: type=1326 audit(2000000366.008:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16360 comm="syz.5.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 215.658222][ T29] audit: type=1326 audit(2000000366.018:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16360 comm="syz.5.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 215.682149][ T29] audit: type=1326 audit(2000000366.048:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16365 comm="syz.5.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fda3fc3b58e code=0x7ffc0000 [ 215.706630][ T29] audit: type=1326 audit(2000000366.048:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16360 comm="syz.5.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 215.733919][ T29] audit: type=1326 audit(2000000366.048:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16360 comm="syz.5.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 215.773186][ T29] audit: type=1326 audit(2000000366.108:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16360 comm="syz.5.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 215.820964][T16379] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 2, id = 0 [ 215.911314][T16388] all: renamed from bridge_slave_0 (while UP) [ 216.173350][T16420] loop2: detected capacity change from 0 to 128 [ 216.237148][T16420] syz.2.4081: attempt to access beyond end of device [ 216.237148][T16420] loop2: rw=2049, sector=153, nr_sectors = 120 limit=128 [ 216.251520][T16420] syz.2.4081: attempt to access beyond end of device [ 216.251520][T16420] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 216.691140][T16460] __nla_validate_parse: 7 callbacks suppressed [ 216.691158][T16460] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4098'. [ 216.751307][T16464] loop3: detected capacity change from 0 to 2048 [ 216.758428][T16464] EXT4-fs: Ignoring removed mblk_io_submit option [ 216.827422][T16464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.871198][T13906] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.102787][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 217.109211][ T3772] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 217.316164][T16487] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4107'. [ 217.325338][T16487] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 217.505381][T16498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4112'. [ 217.541601][T16498] hsr_slave_0: left promiscuous mode [ 217.570015][T16498] hsr_slave_1: left promiscuous mode [ 217.615883][T16508] loop4: detected capacity change from 0 to 128 [ 217.666021][T16512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4117'. [ 217.713074][T16519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4130'. [ 217.790057][T16524] netlink: 'syz.3.4122': attribute type 7 has an invalid length. [ 217.798151][T16524] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4122'. [ 217.842864][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 217.842880][ T29] audit: type=1400 audit(2000000368.288:3018): avc: denied { unmount } for pid=16527 comm="syz.9.4124" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 217.959044][T16543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4129'. [ 217.977628][T16547] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16547 comm=syz.9.4131 [ 217.996732][T16543] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4129'. [ 218.013266][ T29] audit: type=1400 audit(2000000368.468:3019): avc: denied { listen } for pid=16550 comm="syz.9.4133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 218.033481][ T29] audit: type=1400 audit(2000000368.468:3020): avc: denied { accept } for pid=16550 comm="syz.9.4133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 218.108808][ T29] audit: type=1400 audit(2000000368.558:3021): avc: denied { accept } for pid=16550 comm="syz.9.4133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 218.358556][T16580] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4143'. [ 218.369083][T16580] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4143'. [ 218.737661][T16611] sctp: [Deprecated]: syz.3.4157 (pid 16611) Use of int in max_burst socket option. [ 218.737661][T16611] Use struct sctp_assoc_value instead [ 218.816394][ T9923] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.825709][ T9923] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.835465][ T9923] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.845110][ T9923] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.011216][ T29] audit: type=1326 audit(2000000369.458:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16637 comm="syz.5.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 219.035375][ T29] audit: type=1326 audit(2000000369.458:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16637 comm="syz.5.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 219.067135][ T29] audit: type=1326 audit(2000000369.518:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16637 comm="syz.5.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 219.090981][ T29] audit: type=1326 audit(2000000369.518:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16637 comm="syz.5.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 219.114581][ T29] audit: type=1326 audit(2000000369.518:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16637 comm="syz.5.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 219.138518][ T29] audit: type=1326 audit(2000000369.518:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16637 comm="syz.5.4167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 219.930739][T16697] loop2: detected capacity change from 0 to 512 [ 219.953353][T16697] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 219.969298][T16697] EXT4-fs (loop2): 1 truncate cleaned up [ 219.976622][T16697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.121230][T10115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.331598][T16723] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 220.988385][T16759] loop3: detected capacity change from 0 to 764 [ 221.423191][T16759] iso9660: Unknown parameter 'overridéžCœÌÛAm' [ 221.493616][T16769] xt_hashlimit: max too large, truncated to 1048576 [ 221.594180][T16774] netlink: 'syz.5.4221': attribute type 4 has an invalid length. [ 221.647564][T16774] netlink: 'syz.5.4221': attribute type 4 has an invalid length. [ 222.210024][T16806] geneve0 speed is unknown, defaulting to 1000 [ 222.692757][T16853] lo: Caught tx_queue_len zero misconfig [ 223.049774][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 223.049821][ T29] audit: type=1326 audit(2000000373.498:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16869 comm="syz.9.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e13adacb9 code=0x7ffc0000 [ 223.081317][ T29] audit: type=1326 audit(2000000373.528:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16869 comm="syz.9.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e13adacb9 code=0x7ffc0000 [ 223.104971][ T29] audit: type=1326 audit(2000000373.528:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16869 comm="syz.9.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e13adacb9 code=0x7ffc0000 [ 223.128596][ T29] audit: type=1326 audit(2000000373.528:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16869 comm="syz.9.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f7e13adacb9 code=0x7ffc0000 [ 223.152438][ T29] audit: type=1326 audit(2000000373.528:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16869 comm="syz.9.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e13adacb9 code=0x7ffc0000 [ 223.176040][ T29] audit: type=1326 audit(2000000373.528:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16869 comm="syz.9.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e13adacb9 code=0x7ffc0000 [ 223.306969][T16878] __nla_validate_parse: 8 callbacks suppressed [ 223.306986][T16878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4261'. [ 223.383597][T16880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4262'. [ 223.409349][T16887] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4264'. [ 223.461370][T16889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4265'. [ 223.499705][T16892] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4276'. [ 224.321128][T16940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4283'. [ 224.795721][T16976] geneve0 speed is unknown, defaulting to 1000 [ 225.000212][T16989] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.010307][T16989] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 65535 - 0 [ 225.020441][T16989] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 225.105818][T16989] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.115858][T16989] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 65535 - 0 [ 225.125780][T16989] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 225.230098][T16989] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.240162][T16989] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 65535 - 0 [ 225.250477][T16989] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 225.324993][T16989] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.335293][T16989] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 65535 - 0 [ 225.345416][T16989] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 225.400203][ T9906] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.408553][ T9906] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 65535 - 0 [ 225.416993][ T9906] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 225.428667][ T9906] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.437138][ T9906] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 65535 - 0 [ 225.445519][ T9906] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 225.457196][ T9906] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.465477][ T9906] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 65535 - 0 [ 225.474010][ T9906] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 225.486234][ T9906] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.494600][ T9906] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 65535 - 0 [ 225.502957][ T9906] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 225.536386][T17003] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4309'. [ 225.640858][ T29] audit: type=1400 audit(2000000376.088:3077): avc: denied { watch watch_reads } for pid=17014 comm="syz.9.4314" path="/bus" dev="sysfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 226.053538][T17053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4329'. [ 226.063459][T17053] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4329'. [ 226.079283][T17053] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4329'. [ 226.181153][T17067] sctp: [Deprecated]: syz.3.4335 (pid 17067) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.181153][T17067] Use struct sctp_sack_info instead [ 226.198160][T17067] sctp: [Deprecated]: syz.3.4335 (pid 17067) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.198160][T17067] Use struct sctp_sack_info instead [ 226.286143][T17074] netlink: 'syz.5.4338': attribute type 29 has an invalid length. [ 226.295540][T17074] netlink: 'syz.5.4338': attribute type 29 has an invalid length. [ 226.320009][T17078] netlink: 'syz.5.4340': attribute type 1 has an invalid length. [ 226.334448][T17078] bond2: entered promiscuous mode [ 226.339634][T17078] 8021q: adding VLAN 0 to HW filter on device bond2 [ 226.359288][T17078] bond2: (slave bridge5): making interface the new active one [ 226.367461][T17078] bridge5: entered promiscuous mode [ 226.376108][T17078] bridge5: left promiscuous mode [ 226.419274][T17088] loop3: detected capacity change from 0 to 512 [ 226.430029][T17088] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 226.444347][T17088] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 226.458369][T17088] System zones: 1-12 [ 226.467333][T17088] EXT4-fs (loop3): 1 truncate cleaned up [ 226.474604][T17088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.504979][T13906] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.568031][ T29] audit: type=1326 audit(2000000377.018:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17103 comm="syz.2.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ef18acb9 code=0x7ffc0000 [ 226.592196][ T29] audit: type=1326 audit(2000000377.018:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17103 comm="syz.2.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ef18acb9 code=0x7ffc0000 [ 226.615962][ T29] audit: type=1326 audit(2000000377.018:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17103 comm="syz.2.4349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ef18acb9 code=0x7ffc0000 [ 228.419891][T17171] geneve0 speed is unknown, defaulting to 1000 [ 228.854244][ T29] kauditd_printk_skb: 573 callbacks suppressed [ 228.854269][ T29] audit: type=1326 audit(2000000379.308:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17184 comm="syz.9.4378" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e13adacb9 code=0x0 [ 229.004754][T17190] netlink: 'syz.2.4380': attribute type 1 has an invalid length. [ 229.021691][T17190] 8021q: adding VLAN 0 to HW filter on device bond4 [ 229.033577][T17190] __nla_validate_parse: 4 callbacks suppressed [ 229.033614][T17190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4380'. [ 229.049243][T17190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4380'. [ 229.062137][T17190] macsec1: entered promiscuous mode [ 229.067977][T17190] bond4: entered promiscuous mode [ 229.073387][T17190] macsec1: entered allmulticast mode [ 229.078961][T17190] bond4: entered allmulticast mode [ 229.225973][T17199] netlink: 'syz.3.4384': attribute type 1 has an invalid length. [ 229.241100][T17200] loop2: detected capacity change from 0 to 128 [ 230.172841][T17231] netlink: 'syz.3.4396': attribute type 1 has an invalid length. [ 230.187447][T17231] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.211489][T17231] bond3: (slave veth13): Enslaving as an active interface with a down link [ 230.233322][T17231] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 230.240619][T17231] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 230.317413][T17234] loop2: detected capacity change from 0 to 1024 [ 230.327140][T17234] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.353077][T17234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.457080][T10115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.556694][ T29] audit: type=1326 audit(2000000380.998:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17262 comm="syz.9.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e13adacb9 code=0x7ffc0000 [ 230.563787][T17266] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4402'. [ 230.580318][ T29] audit: type=1326 audit(2000000380.998:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17262 comm="syz.9.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f7e13adacb9 code=0x7ffc0000 [ 230.613010][ T29] audit: type=1326 audit(2000000381.008:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17262 comm="syz.9.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e13adacb9 code=0x7ffc0000 [ 230.694235][T17274] netlink: 'syz.9.4404': attribute type 10 has an invalid length. [ 230.726833][T17266] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.726866][ T29] audit: type=1326 audit(2000000381.088:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17265 comm="syz.9.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7e13a9b58e code=0x7ffc0000 [ 230.757236][ T29] audit: type=1326 audit(2000000381.098:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17262 comm="syz.9.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f7e13adacb9 code=0x7ffc0000 [ 230.780844][ T29] audit: type=1326 audit(2000000381.098:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17262 comm="syz.9.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e13adacb9 code=0x7ffc0000 [ 230.804603][ T29] audit: type=1326 audit(2000000381.098:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17262 comm="syz.9.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e13adacb9 code=0x7ffc0000 [ 230.828403][ T29] audit: type=1326 audit(2000000381.098:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17262 comm="syz.9.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f7e13adacb9 code=0x7ffc0000 [ 230.852400][ T29] audit: type=1326 audit(2000000381.098:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17262 comm="syz.9.4412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e13adacb9 code=0x7ffc0000 [ 230.890556][T17274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.904263][T17274] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 230.908475][T17282] netlink: 'syz.9.4404': attribute type 10 has an invalid length. [ 230.921061][T17282] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4404'. [ 230.943903][T17280] bond3 (unregistering): Released all slaves [ 231.062762][T17282] batadv0: entered promiscuous mode [ 231.068332][T17282] batadv0: entered allmulticast mode [ 231.089461][T17282] bond0: (slave batadv0): Releasing backup interface [ 231.125254][T17282] bridge0: port 3(batadv0) entered blocking state [ 231.131868][T17282] bridge0: port 3(batadv0) entered disabled state [ 231.213454][ T9924] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 231.222931][ T9924] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 231.414691][T17355] loop3: detected capacity change from 0 to 512 [ 231.470639][T17355] EXT4-fs: Ignoring removed bh option [ 231.504958][T17355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.523156][T17355] ext4 filesystem being mounted at /205/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 231.591927][T13906] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.709594][ T3420] kernel read not supported for file bpf-prog (pid: 3420 comm: kworker/0:5) [ 231.772371][T17373] SELinux: failed to load policy [ 231.987333][T17371] loop4: detected capacity change from 0 to 32768 [ 232.052963][ T3731] loop4: p1 p2 p3 < p5 p6 > [ 232.058257][ T3731] loop4: p2 size 16775168 extends beyond EOD, truncated [ 232.067065][ T3731] loop4: p5 start 4294970168 is beyond EOD, truncated [ 232.082976][T17371] loop4: p1 p2 p3 < p5 p6 > [ 232.089012][T17371] loop4: p2 size 16775168 extends beyond EOD, truncated [ 232.097473][T17371] loop4: p5 start 4294970168 is beyond EOD, truncated [ 232.252298][T17402] all: renamed from bridge_slave_0 (while UP) [ 232.264472][T17404] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4432'. [ 232.302906][T17404] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4432'. [ 232.325586][ T4212] udevd[4212]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 232.325761][ T4215] udevd[4215]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 232.347042][ T4196] udevd[4196]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 232.361164][ T3731] udevd[3731]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 232.401973][T17412] ref_ctr_offset mismatch. inode: 0x422 offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 232.500538][T17418] loop3: detected capacity change from 0 to 128 [ 232.559832][T17418] bio_check_eod: 151 callbacks suppressed [ 232.559852][T17418] syz.3.4438: attempt to access beyond end of device [ 232.559852][T17418] loop3: rw=2049, sector=153, nr_sectors = 120 limit=128 [ 232.579961][T17418] syz.3.4438: attempt to access beyond end of device [ 232.579961][T17418] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 232.598089][T17418] syz.3.4438: attempt to access beyond end of device [ 232.598089][T17418] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 232.628144][T17418] syz.3.4438: attempt to access beyond end of device [ 232.628144][T17418] loop3: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 232.641808][T17418] syz.3.4438: attempt to access beyond end of device [ 232.641808][T17418] loop3: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 232.643857][T17414] loop4: detected capacity change from 0 to 2048 [ 232.656122][T17418] syz.3.4438: attempt to access beyond end of device [ 232.656122][T17418] loop3: rw=2049, sector=345, nr_sectors = 8 limit=128 [ 232.678108][T17418] syz.3.4438: attempt to access beyond end of device [ 232.678108][T17418] loop3: rw=2049, sector=361, nr_sectors = 8 limit=128 [ 232.692291][T17418] syz.3.4438: attempt to access beyond end of device [ 232.692291][T17418] loop3: rw=2049, sector=377, nr_sectors = 8 limit=128 [ 232.706085][T17418] syz.3.4438: attempt to access beyond end of device [ 232.706085][T17418] loop3: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 232.719855][T17418] syz.3.4438: attempt to access beyond end of device [ 232.719855][T17418] loop3: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 232.727406][T17414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.768135][T11947] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.803840][T17425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4439'. [ 232.813955][T17425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4439'. [ 232.882355][T17433] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 232.888897][T17433] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 232.896600][T17433] vhci_hcd vhci_hcd.0: Device attached [ 232.904671][T17433] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 232.911365][T17433] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 232.919156][T17433] vhci_hcd vhci_hcd.0: Device attached [ 232.926687][T17433] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 232.933217][T17433] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 232.940979][T17433] vhci_hcd vhci_hcd.0: Device attached [ 232.941607][T17440] geneve0 speed is unknown, defaulting to 1000 [ 232.976236][T17433] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 232.982871][T17433] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 232.990588][T17433] vhci_hcd vhci_hcd.0: Device attached [ 233.072713][ T5848] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 233.079339][T17433] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(11) [ 233.086043][T17433] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 233.093729][T17433] vhci_hcd vhci_hcd.0: Device attached [ 233.121860][T17433] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 233.142525][T17433] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 233.160880][ T5848] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 233.194678][T17433] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(17) [ 233.201292][T17433] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 233.208827][T17433] vhci_hcd vhci_hcd.0: Device attached [ 233.231309][T17458] vhci_hcd: connection closed [ 233.231407][T17441] vhci_hcd: connection closed [ 233.231460][T17444] vhci_hcd: connection closed [ 233.241164][T17434] vhci_hcd: connection reset by peer [ 233.243046][ T9948] vhci_hcd vhci_hcd.4: stop threads [ 233.246493][T17452] vhci_hcd: connection closed [ 233.251300][ T9948] vhci_hcd vhci_hcd.4: release socket [ 233.257552][T17437] vhci_hcd: connection closed [ 233.261285][ T9948] vhci_hcd vhci_hcd.4: disconnect device [ 233.286184][ T9948] vhci_hcd vhci_hcd.4: stop threads [ 233.291483][ T9948] vhci_hcd vhci_hcd.4: release socket [ 233.296913][ T9948] vhci_hcd vhci_hcd.4: disconnect device [ 233.302959][ T9948] vhci_hcd vhci_hcd.4: stop threads [ 233.308196][ T9948] vhci_hcd vhci_hcd.4: release socket [ 233.313642][ T9948] vhci_hcd vhci_hcd.4: disconnect device [ 233.336231][ T9948] vhci_hcd vhci_hcd.4: stop threads [ 233.341643][ T9948] vhci_hcd vhci_hcd.4: release socket [ 233.347081][ T9948] vhci_hcd vhci_hcd.4: disconnect device [ 233.367742][ T9948] vhci_hcd vhci_hcd.4: stop threads [ 233.373043][ T9948] vhci_hcd vhci_hcd.4: release socket [ 233.378461][ T9948] vhci_hcd vhci_hcd.4: disconnect device [ 233.384426][ T9948] vhci_hcd vhci_hcd.4: stop threads [ 233.389619][ T9948] vhci_hcd vhci_hcd.4: release socket [ 233.395070][ T9948] vhci_hcd vhci_hcd.4: disconnect device [ 233.502301][T17471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4451'. [ 233.838056][T17490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4460'. [ 234.598875][T17529] geneve0 speed is unknown, defaulting to 1000 [ 234.725361][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 234.725377][ T29] audit: type=1400 audit(2000000385.178:3686): avc: denied { bind } for pid=17537 comm="syz.2.4480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 234.777891][T17541] __nla_validate_parse: 1 callbacks suppressed [ 234.777908][T17541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4479'. [ 234.843982][T17542] syzkaller0: entered promiscuous mode [ 234.849679][T17542] syzkaller0: entered allmulticast mode [ 234.882944][T17544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4479'. [ 234.974740][T17551] batadv_slave_1: entered promiscuous mode [ 234.991953][T17551] team0: entered promiscuous mode [ 234.997140][T17551] team_slave_0: entered promiscuous mode [ 235.002939][T17551] team_slave_1: entered promiscuous mode [ 235.022026][T17551] ip6gretap0: entered promiscuous mode [ 235.028167][T17549] ip6gretap0: left promiscuous mode [ 235.033856][T17549] team0: left promiscuous mode [ 235.038727][T17549] team_slave_0: left promiscuous mode [ 235.045293][T17549] team_slave_1: left promiscuous mode [ 235.051592][T17549] batadv_slave_1: left promiscuous mode [ 235.097063][T17556] loop4: detected capacity change from 0 to 512 [ 235.126709][T17556] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 235.139517][T17556] EXT4-fs (loop4): orphan cleanup on readonly fs [ 235.146839][T17556] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 235.156129][T17556] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 235.166062][T17556] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.4486: Failed to acquire dquot type 1 [ 235.178257][T17556] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4486: bg 0: block 40: padding at end of block bitmap is not set [ 235.230400][T17556] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 235.271532][T17556] EXT4-fs (loop4): 1 truncate cleaned up [ 235.291508][T17556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 235.316055][T17569] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4492'. [ 235.353154][T11947] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.485785][ T29] audit: type=1326 audit(2000000385.938:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17584 comm="syz.4.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6fb4acb9 code=0x7ffc0000 [ 235.542698][ T29] audit: type=1326 audit(2000000385.958:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17584 comm="syz.4.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6fb4acb9 code=0x7ffc0000 [ 235.566305][ T29] audit: type=1326 audit(2000000385.958:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17584 comm="syz.4.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f0d6fb4acb9 code=0x7ffc0000 [ 235.589932][ T29] audit: type=1326 audit(2000000385.958:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17584 comm="syz.4.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6fb4acb9 code=0x7ffc0000 [ 235.613437][ T29] audit: type=1326 audit(2000000385.958:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17584 comm="syz.4.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6fb4acb9 code=0x7ffc0000 [ 235.636928][ T29] audit: type=1326 audit(2000000385.958:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17584 comm="syz.4.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d6fb4acb9 code=0x7ffc0000 [ 235.660549][ T29] audit: type=1326 audit(2000000385.958:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17584 comm="syz.4.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6fb4acb9 code=0x7ffc0000 [ 235.881568][T17604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4506'. [ 235.912452][T17604] netlink: 'syz.3.4506': attribute type 1 has an invalid length. [ 236.591507][T17638] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4521'. [ 236.600684][T17638] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 236.712591][T17644] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4525'. [ 236.807187][T17647] tipc: Enabling of bearer rejected, failed to enable media [ 237.210347][T17656] loop3: detected capacity change from 0 to 512 [ 237.217694][T17656] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 4294967295)! [ 237.229222][T17656] EXT4-fs (loop3): group descriptors corrupted! [ 237.240260][T17656] program syz.3.4529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.304017][T17663] netlink: 'syz.4.4532': attribute type 7 has an invalid length. [ 237.311961][T17663] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4532'. [ 237.540728][T17668] loop4: detected capacity change from 0 to 1024 [ 237.594819][T17668] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 237.624265][T17668] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.4534: Invalid block bitmap block 0 in block_group 0 [ 237.656817][T17668] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.4534: Failed to acquire dquot type 0 [ 237.678646][T17668] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.4534: Freeing blocks not in datazone - block = 0, count = 4096 [ 237.703122][T17668] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.4534: Invalid inode bitmap blk 0 in block_group 0 [ 237.731907][T17668] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 237.751352][ T9911] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:24: Failed to release dquot type 0 [ 237.764247][T17668] EXT4-fs (loop4): 1 orphan inode deleted [ 237.810144][T17668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.861440][T17668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.879104][T17700] loop2: detected capacity change from 0 to 512 [ 237.943521][T17700] EXT4-fs (loop2): 1 orphan inode deleted [ 237.950828][T17700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.964857][ T9911] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:24: Failed to release dquot type 1 [ 237.964916][T17700] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.115733][T10115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.136633][T17710] netlink: 'syz.4.4561': attribute type 13 has an invalid length. [ 238.168271][T17713] loop3: detected capacity change from 0 to 128 [ 238.222704][ T5848] usb 9-1: enqueue for inactive port 0 [ 238.228612][ T5848] usb 9-1: enqueue for inactive port 0 [ 238.302822][ T5848] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 238.376227][T17725] loop3: detected capacity change from 0 to 512 [ 238.397598][T17725] EXT4-fs: Ignoring removed bh option [ 238.440788][T17725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.464347][T17725] ext4 filesystem being mounted at /245/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 238.491848][T17747] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4564'. [ 238.502595][T13906] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.516499][T17747] netlink: 100 bytes leftover after parsing attributes in process `syz.9.4564'. [ 238.590044][T17754] geneve0 speed is unknown, defaulting to 1000 [ 238.616134][T17756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4567'. [ 238.740107][T17780] raw_sendmsg: syz.4.4575 forgot to set AF_INET. Fix it! [ 238.909015][T17787] bridge0: port 3(batadv0) entered disabled state [ 238.923755][T17787] bridge_slave_0: left allmulticast mode [ 238.929432][T17787] bridge_slave_0: left promiscuous mode [ 238.935522][T17787] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.945194][T17787] bridge_slave_1: left allmulticast mode [ 238.950862][T17787] bridge_slave_1: left promiscuous mode [ 238.956750][T17787] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.966632][T17787] bond0: (slave bond_slave_0): Releasing backup interface [ 238.975413][T17787] bond0: (slave bond_slave_1): Releasing backup interface [ 238.984808][T17787] team0: Port device team_slave_0 removed [ 238.991399][T17787] team0: Port device team_slave_1 removed [ 238.999148][T17787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.014761][T17787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.023344][T17787] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 239.053677][T17790] team0: Mode changed to "loadbalance" [ 239.151551][T17800] openvswitch: netlink: Missing key (keys=40, expected=100) [ 239.590840][T17828] ipip1: left promiscuous mode [ 239.723915][T17828] bond2: left promiscuous mode [ 239.739437][ T9948] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.755269][T17834] dvmrp0: entered allmulticast mode [ 239.792833][ T9948] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.795260][T17844] __nla_validate_parse: 4 callbacks suppressed [ 239.795276][T17844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4604'. [ 239.801914][ T9948] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.808253][T17844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4604'. [ 239.876631][ T9948] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.018889][T17870] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4616'. [ 240.128553][T17875] dvmrp0: entered allmulticast mode [ 240.515259][T17878] vxcan1: left allmulticast mode [ 240.630197][T17878] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 240.916562][T17878] geneve3: left promiscuous mode [ 240.921945][T17878] geneve3: left allmulticast mode [ 241.055873][T17906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4631'. [ 241.123945][T17878] bond4: left allmulticast mode [ 241.128877][T17878] bond4: left promiscuous mode [ 241.136729][T17878] macsec1: left promiscuous mode [ 241.141877][T17878] macsec1: left allmulticast mode [ 241.183846][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 241.183875][ T29] audit: type=1326 audit(2000000391.638:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17910 comm="syz.4.4633" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d6fb4acb9 code=0x0 [ 241.265134][T17891] veth14: entered promiscuous mode [ 241.267406][ T29] audit: type=1400 audit(2000000391.718:3749): avc: denied { read } for pid=17910 comm="syz.4.4633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 241.270360][T17891] veth14: entered allmulticast mode [ 241.322743][T10561] geneve0 speed is unknown, defaulting to 1000 [ 241.324008][ T9948] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.328924][T10561] syz0: Port: 1 Link DOWN [ 241.342896][ T9948] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 241.366074][ T9948] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.375010][ T9948] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 241.386197][ T9948] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.395774][ T9948] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 241.405543][ T9948] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.414600][ T9948] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 241.575040][T17944] loop3: detected capacity change from 0 to 512 [ 241.596126][T17944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.610259][T17944] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.684390][T13906] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.087341][T17958] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.094770][T17958] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.154216][T17958] veth0_to_team: left promiscuous mode [ 242.168799][T17958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.182100][T17958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.245293][T17958] team1: left promiscuous mode [ 242.250341][T17958] team1: left allmulticast mode [ 242.266997][T17958] geneve2: left promiscuous mode [ 242.272076][T17958] geneve2: left allmulticast mode [ 242.279833][T17958] bridge2: left allmulticast mode [ 242.296183][ T9900] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.304832][ T9900] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 65535 - 0 [ 242.313520][ T9900] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 242.322085][ T9900] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.330585][ T9900] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 65535 - 0 [ 242.339245][ T9900] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 242.363555][ T9900] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.372085][ T9900] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 65535 - 0 [ 242.380873][ T9900] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 242.428509][ T9900] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.437114][ T9900] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 65535 - 0 [ 242.445710][ T9900] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 242.638311][T17983] loop4: detected capacity change from 0 to 764 [ 242.726364][T17983] iso9660: Unknown parameter 'overridéžCœÌÛAm' [ 242.821142][T17992] geneve0 speed is unknown, defaulting to 1000 [ 242.927993][T18001] xt_hashlimit: max too large, truncated to 1048576 [ 242.970549][T18010] sctp: [Deprecated]: syz.2.4668 (pid 18010) Use of int in max_burst socket option. [ 242.970549][T18010] Use struct sctp_assoc_value instead [ 243.055208][T18019] loop2: detected capacity change from 0 to 1024 [ 243.076906][T18019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.101814][T18019] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: comm syz.2.4672: inode #2932010370: comm syz.2.4672: iget: illegal inode # [ 243.116017][T18019] EXT4-fs (loop2): Remounting filesystem read-only [ 243.122608][T18019] EXT4-fs warning (device loop2): ext4_xattr_inode_inc_ref_all:1135: inode #19: comm syz.2.4672: cleanup dec ref error -30 [ 243.136221][T18019] EXT4-fs warning (device loop2): ext4_xattr_block_set:2200: inode #19: comm syz.2.4672: dec ref error=-30 [ 243.162399][T10115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.186846][T18023] loop2: detected capacity change from 0 to 128 [ 243.274144][T18023] bio_check_eod: 143 callbacks suppressed [ 243.274161][T18023] syz.2.4673: attempt to access beyond end of device [ 243.274161][T18023] loop2: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 243.295289][T18023] syz.2.4673: attempt to access beyond end of device [ 243.295289][T18023] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 243.309454][T18024] syz.2.4673: attempt to access beyond end of device [ 243.309454][T18024] loop2: rw=2049, sector=1017, nr_sectors = 8 limit=128 [ 243.323312][T18023] syz.2.4673: attempt to access beyond end of device [ 243.323312][T18023] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 243.336833][T18024] syz.2.4673: attempt to access beyond end of device [ 243.336833][T18024] loop2: rw=2049, sector=1033, nr_sectors = 8 limit=128 [ 243.351726][T18023] syz.2.4673: attempt to access beyond end of device [ 243.351726][T18023] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 243.365336][T18024] syz.2.4673: attempt to access beyond end of device [ 243.365336][T18024] loop2: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 243.379665][T18023] syz.2.4673: attempt to access beyond end of device [ 243.379665][T18023] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 243.393358][T18024] syz.2.4673: attempt to access beyond end of device [ 243.393358][T18024] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 243.407299][T18023] syz.2.4673: attempt to access beyond end of device [ 243.407299][T18023] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 243.668991][T18037] geneve0 speed is unknown, defaulting to 1000 [ 245.250439][T18057] netlink: 'syz.5.4684': attribute type 1 has an invalid length. [ 245.278100][T18057] 8021q: adding VLAN 0 to HW filter on device bond3 [ 245.615808][T18057] bond3: (slave veth21): Enslaving as an active interface with a down link [ 245.714026][T18062] loop4: detected capacity change from 0 to 128 [ 246.016167][T18073] loop3: detected capacity change from 0 to 512 [ 246.023159][T18073] EXT4-fs: Ignoring removed oldalloc option [ 246.044181][T18073] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.4687: Parent and EA inode have the same ino 15 [ 246.139194][T18073] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.4687: Parent and EA inode have the same ino 15 [ 246.207839][T18073] EXT4-fs (loop3): 1 orphan inode deleted [ 246.295255][T18073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.336234][T18073] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.4687: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 246.396786][T13906] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.489578][T18087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4692'. [ 246.532927][T18087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4692'. [ 246.662079][ T29] audit: type=1400 audit(2000000397.098:3750): avc: denied { create } for pid=18082 comm="syz.4.4690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 247.071597][T18126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4707'. [ 247.467408][T18129] loop3: detected capacity change from 0 to 128 [ 247.474961][T18130] netlink: 'syz.2.4720': attribute type 6 has an invalid length. [ 247.475027][T18132] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4709'. [ 247.501750][T18132] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4709'. [ 247.510771][T18129] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 247.530791][T18129] ext4 filesystem being mounted at /288/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 247.591031][T13906] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 247.626556][T18135] loop2: detected capacity change from 0 to 764 [ 247.648779][T18141] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4716'. [ 247.671159][ T29] audit: type=1400 audit(2000000398.118:3751): avc: denied { watch } for pid=18142 comm="syz.9.4714" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 247.702781][T18141] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4716'. [ 247.719030][T18135] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 247.817300][T18154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4721'. [ 247.961413][T18167] xt_hashlimit: max too large, truncated to 1048576 [ 247.974753][T18167] No such timeout policy "syz1" [ 248.204595][T18177] geneve0 speed is unknown, defaulting to 1000 [ 249.256820][ T9900] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.270210][ T9900] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.278812][ T9900] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.288383][ T9900] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.377429][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4751'. [ 249.547122][T18258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4762'. [ 249.573116][ T29] audit: type=1400 audit(2000000400.028:3752): avc: denied { create } for pid=18260 comm="syz.3.4763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 249.594425][ T29] audit: type=1400 audit(2000000400.038:3753): avc: denied { read } for pid=18260 comm="syz.3.4763" path="socket:[55991]" dev="sockfs" ino=55991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 249.618649][ T29] audit: type=1400 audit(2000000400.038:3754): avc: denied { setopt } for pid=18260 comm="syz.3.4763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 249.919725][ T29] audit: type=1400 audit(2000000400.368:3755): avc: denied { watch_reads } for pid=18270 comm="syz.4.4766" path="/" dev="configfs" ino=575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 250.077368][ T29] audit: type=1326 audit(2000000400.528:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18277 comm="syz.4.4768" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d6fb4acb9 code=0x0 [ 250.339004][T18292] netlink: 'syz.3.4773': attribute type 4 has an invalid length. [ 250.354390][T18292] netlink: 'syz.3.4773': attribute type 4 has an invalid length. [ 250.425393][T18300] geneve0 speed is unknown, defaulting to 1000 [ 250.458409][T18300] netlink: 'syz.2.4778': attribute type 5 has an invalid length. [ 250.466200][T18300] netlink: 'syz.2.4778': attribute type 6 has an invalid length. [ 250.725602][ T29] audit: type=1400 audit(2000000401.178:3757): avc: denied { ioctl } for pid=18313 comm="syz.5.4783" path="socket:[56077]" dev="sockfs" ino=56077 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 251.104171][ T29] audit: type=1326 audit(2000000401.548:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18348 comm="syz.3.4796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d090aacb9 code=0x7ffc0000 [ 251.128073][ T29] audit: type=1326 audit(2000000401.548:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18348 comm="syz.3.4796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d090aacb9 code=0x7ffc0000 [ 251.383174][T18358] sch_tbf: burst 1821 is lower than device lo mtu (11337746) ! [ 251.987344][T18403] tipc: Enabling of bearer rejected, failed to enable media [ 252.069995][T18408] __nla_validate_parse: 9 callbacks suppressed [ 252.070014][T18408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4829'. [ 252.103633][T18408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4829'. [ 252.103827][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 252.103840][ T29] audit: type=1326 audit(2000000402.558:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.5.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 252.142664][ T29] audit: type=1326 audit(2000000402.558:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.5.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 252.167466][ T29] audit: type=1326 audit(2000000402.618:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.5.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 252.191004][ T29] audit: type=1326 audit(2000000402.618:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.5.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 252.214602][ T29] audit: type=1326 audit(2000000402.618:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.5.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 252.238098][ T29] audit: type=1326 audit(2000000402.618:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.5.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 252.261989][ T29] audit: type=1326 audit(2000000402.618:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.5.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 252.285554][ T29] audit: type=1326 audit(2000000402.618:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.5.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 252.309338][ T29] audit: type=1326 audit(2000000402.618:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.5.4819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 252.332987][ T29] audit: type=1400 audit(2000000402.618:3811): avc: denied { sys_nice } for pid=18410 comm="syz.5.4819" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 252.462046][T18424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4823'. [ 252.554546][T18427] loop3: detected capacity change from 0 to 512 [ 252.603595][T18427] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 252.615180][T18427] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 252.625503][T18427] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4824: Corrupt directory, running e2fsck is recommended [ 252.833652][T18427] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 252.841942][T18427] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.4824: corrupted in-inode xattr: e_name out of bounds [ 252.906450][T18427] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4824: couldn't read orphan inode 15 (err -117) [ 252.953372][T18427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.072838][T18427] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 253.084460][T18427] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 253.094633][T18427] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4824: Corrupt directory, running e2fsck is recommended [ 253.346010][T18450] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 253.403509][T18448] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 253.411184][T18426] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 253.422826][T18426] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 253.433073][T18426] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4824: Corrupt directory, running e2fsck is recommended [ 253.448524][T18455] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4837'. [ 253.448994][T18426] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 253.469151][T18426] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 253.479369][T18426] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4824: Corrupt directory, running e2fsck is recommended [ 253.524933][T18426] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 253.602548][T13906] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.740430][T18471] loop4: detected capacity change from 0 to 512 [ 253.785221][T18471] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 253.874475][T18471] EXT4-fs (loop4): orphan cleanup on readonly fs [ 253.905695][T18471] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.4845: Allocating blocks 41-42 which overlap fs metadata [ 253.932543][T18471] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.4845: Allocating blocks 41-42 which overlap fs metadata [ 253.952664][T18471] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.4845: Failed to acquire dquot type 1 [ 253.968242][T18471] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 253.984497][T18471] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.4845: corrupted inode contents [ 254.002826][T18471] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.4845: mark_inode_dirty error [ 254.016151][T18471] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.4845: corrupted inode contents [ 254.053071][T18471] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.4845: mark_inode_dirty error [ 254.081596][T18471] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.4845: corrupted inode contents [ 254.111479][T18471] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 254.136741][T18471] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.4845: corrupted inode contents [ 254.149945][T18471] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.4845: mark_inode_dirty error [ 254.162431][T18471] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 254.176211][T18471] EXT4-fs (loop4): 1 truncate cleaned up [ 254.194157][T18471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 254.221145][T11947] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.250000][T18491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4851'. [ 255.171130][T18519] geneve0 speed is unknown, defaulting to 1000 [ 255.309576][T18529] netlink: 'syz.9.4865': attribute type 1 has an invalid length. [ 255.328914][T18529] bond2: entered promiscuous mode [ 255.431093][T18529] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.509203][T18533] 8021q: adding VLAN 0 to HW filter on device bond3 [ 255.547914][T18533] bond2: (slave bond3): making interface the new active one [ 255.555391][T18533] bond3: entered promiscuous mode [ 255.623774][T18533] bond2: (slave bond3): Enslaving as an active interface with an up link [ 256.283841][T18526] syz.2.4864 (18526) used greatest stack depth: 6160 bytes left [ 256.500361][T18604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4877'. [ 256.510988][T18604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4877'. [ 256.582738][T10568] kernel read not supported for file bpf-prog (pid: 10568 comm: kworker/1:11) [ 256.667316][T18632] loop3: detected capacity change from 0 to 2048 [ 256.849369][T18632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.906942][T13906] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.951325][ T3425] IPVS: starting estimator thread 0... [ 257.015856][T18685] loop2: detected capacity change from 0 to 1024 [ 257.049907][T18685] EXT4-fs: Ignoring removed orlov option [ 257.059652][T18683] IPVS: using max 2208 ests per chain, 110400 per kthread [ 257.093383][T18685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.289211][T18696] lo: entered allmulticast mode [ 257.303646][T10115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.313861][T18696] lo: left allmulticast mode [ 257.536800][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 257.536816][ T29] audit: type=1326 audit(2000000407.988:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18711 comm="syz.5.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 257.591545][ T29] audit: type=1326 audit(2000000407.988:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18711 comm="syz.5.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 257.615343][ T29] audit: type=1326 audit(2000000408.018:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18711 comm="syz.5.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 257.638847][ T29] audit: type=1326 audit(2000000408.018:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18711 comm="syz.5.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 257.662416][ T29] audit: type=1326 audit(2000000408.018:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18711 comm="syz.5.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 257.686047][ T29] audit: type=1326 audit(2000000408.018:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18711 comm="syz.5.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 257.709607][ T29] audit: type=1326 audit(2000000408.018:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18711 comm="syz.5.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 257.733069][ T29] audit: type=1326 audit(2000000408.018:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18711 comm="syz.5.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 257.756731][ T29] audit: type=1326 audit(2000000408.018:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18711 comm="syz.5.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 257.780262][ T29] audit: type=1326 audit(2000000408.018:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18711 comm="syz.5.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3fc7acb9 code=0x7ffc0000 [ 258.092338][T18730] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4919'. [ 258.095148][T18732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.111700][T18732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.132201][T18732] ref_ctr_offset mismatch. inode: 0x6d1 offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 258.194729][T18700] loop2: detected capacity change from 0 to 2048 [ 258.215376][T18700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.249460][T10115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.708989][T18757] geneve0 speed is unknown, defaulting to 1000 [ 258.764691][T18761] loop3: detected capacity change from 0 to 1024 [ 258.776126][T18761] EXT4-fs: Ignoring removed bh option [ 258.782170][T18761] ext4: Unknown parameter 'smackfsroot' [ 259.142307][T18776] geneve0 speed is unknown, defaulting to 1000 [ 259.152541][T18774] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4925'. [ 259.161761][T18774] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4925'. [ 259.172268][T18774] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4925'. [ 259.181265][T18774] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4925'. [ 259.422568][T18799] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4936'. [ 259.491840][T18803] loop3: detected capacity change from 0 to 128 [ 259.719529][T18797] bio_check_eod: 194 callbacks suppressed [ 259.719548][T18797] syz.3.4935: attempt to access beyond end of device [ 259.719548][T18797] loop3: rw=2049, sector=145, nr_sectors = 624 limit=128 [ 260.020802][T18810] geneve0 speed is unknown, defaulting to 1000 [ 260.432373][T18839] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4952'. [ 260.442985][T18839] hsr_slave_0: left promiscuous mode [ 260.457894][T18839] hsr_slave_1: left promiscuous mode [ 260.478534][T18844] loop4: detected capacity change from 0 to 512 [ 260.501118][T18845] loop2: detected capacity change from 0 to 512 [ 260.505516][T18844] EXT4-fs: inline encryption not supported [ 260.513399][T18844] EXT4-fs: Ignoring removed nomblk_io_submit option [ 260.562161][T18844] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 260.570729][T18844] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 260.581635][T18845] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 260.592016][T18845] EXT4-fs (loop2): orphan cleanup on readonly fs [ 260.599293][T18845] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.4954: Failed to acquire dquot type 1 [ 260.611960][T18845] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4954: bg 0: block 40: padding at end of block bitmap is not set [ 260.626729][T18845] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 260.636016][T18845] EXT4-fs (loop2): 1 truncate cleaned up [ 260.642602][T18845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 260.671779][T18844] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.4955: Failed to acquire dquot type 1 [ 260.693451][T18844] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 260.712731][T18844] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.4955: corrupted inode contents [ 260.734655][T18844] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.4955: mark_inode_dirty error [ 260.761355][T18844] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.4955: corrupted inode contents [ 260.783416][T18844] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.4955: mark_inode_dirty error [ 260.795425][T10115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.814949][T18844] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.4955: corrupted inode contents [ 260.828170][T18844] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 260.880605][T18879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4969'. [ 260.890308][T18879] hsr_slave_0: left promiscuous mode [ 260.896912][T18844] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.4955: corrupted inode contents [ 260.919657][T18879] hsr_slave_1: left promiscuous mode [ 260.925602][T18844] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.4955: mark_inode_dirty error [ 260.952470][T18844] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 260.962228][T18844] EXT4-fs (loop4): 1 truncate cleaned up [ 260.968553][T18844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.023566][T11947] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.093170][T18898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4977'. [ 261.633331][T18927] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4989'. [ 262.000614][T18932] loop3: detected capacity change from 0 to 512 [ 262.039726][T18932] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 262.080879][T18932] EXT4-fs (loop3): 1 truncate cleaned up [ 262.094321][T18932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.235080][T13906] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.615519][T18947] macvlan2: entered promiscuous mode [ 262.626605][T18949] loop4: detected capacity change from 0 to 512 [ 262.634580][T18947] batman_adv: batadv0: Adding interface: macvlan2 [ 262.641016][T18947] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.666460][T18947] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 262.679146][T18949] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 4294967295)! [ 262.690130][T18949] EXT4-fs (loop4): group descriptors corrupted! [ 262.745110][T18949] program syz.4.4997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.798957][T18956] netlink: 'syz.5.5000': attribute type 2 has an invalid length. [ 263.354568][T19017] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.5010'. [ 263.418678][T19027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5012'. [ 263.450792][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 263.450847][ T29] audit: type=1400 audit(2000000413.898:3900): avc: denied { getopt } for pid=19034 comm="syz.9.5015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 264.147379][ T29] audit: type=1326 audit(2000000414.598:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19144 comm="syz.3.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d090aacb9 code=0x7ffc0000 [ 264.171405][ T29] audit: type=1326 audit(2000000414.598:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19144 comm="syz.3.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d090aacb9 code=0x7ffc0000 [ 264.295252][ T29] audit: type=1326 audit(2000000414.648:3903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19144 comm="syz.3.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d090aacb9 code=0x7ffc0000 [ 264.319324][ T29] audit: type=1326 audit(2000000414.648:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19144 comm="syz.3.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d090aacb9 code=0x7ffc0000 [ 264.342882][ T29] audit: type=1326 audit(2000000414.648:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19144 comm="syz.3.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d090aacb9 code=0x7ffc0000 [ 264.366817][ T29] audit: type=1326 audit(2000000414.648:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19144 comm="syz.3.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8d090aacb9 code=0x7ffc0000 [ 264.390291][ T29] audit: type=1326 audit(2000000414.648:3907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19144 comm="syz.3.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d090aacb9 code=0x7ffc0000 [ 264.414103][ T29] audit: type=1326 audit(2000000414.648:3908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19144 comm="syz.3.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8d090aacb9 code=0x7ffc0000 [ 264.437610][ T29] audit: type=1326 audit(2000000414.648:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19144 comm="syz.3.5025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d090aacb9 code=0x7ffc0000 [ 264.510319][T19167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5031'. [ 264.550567][T19167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5031'. [ 264.615145][T19172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5033'. [ 264.713632][T19177] geneve0 speed is unknown, defaulting to 1000 [ 264.867040][T19187] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5039'. [ 265.239072][T19207] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 265.265022][T19207] team0: Mode changed to "loadbalance" [ 266.750273][T19298] sit0: Caught tx_queue_len zero misconfig [ 266.909355][T19305] xt_hashlimit: max too large, truncated to 1048576 [ 267.547249][T19329] netlink: 65039 bytes leftover after parsing attributes in process `syz.9.5107'. [ 267.898808][T19348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5102'. [ 268.497278][T19370] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.534039][T19370] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.584497][T19370] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.634574][T19370] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.692321][ T9904] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.705830][ T9922] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.718695][ T9922] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.731985][ T9922] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.135998][T19392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5119'. [ 269.145089][T19392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5119'. [ 269.261818][T19403] geneve0 speed is unknown, defaulting to 1000 [ 269.535445][T19430] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5134'. [ 269.544359][T19430] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5134'. [ 269.691761][T19444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5138'. [ 269.824837][ T9953] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 269.892976][ T9953] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 269.944617][ T9953] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 269.993895][ T9953] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 270.149178][ T9953] bond1 (unregistering): (slave geneve3): Releasing active interface [ 270.294655][ T9953] bond1 (unregistering): Released all slaves [ 270.363422][ T9953] hsr_slave_0: left promiscuous mode [ 270.373558][ T9953] hsr_slave_1: left promiscuous mode [ 270.626988][T19486] geneve0 speed is unknown, defaulting to 1000 [ 270.758597][T19507] netlink: 'syz.4.5151': attribute type 6 has an invalid length. [ 270.861626][T19512] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.5156'. [ 271.035915][ T9953] IPVS: stop unused estimator thread 0... [ 271.097049][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 271.097110][ T29] audit: type=1326 audit(2000000421.538:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19522 comm="syz.3.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d090aacb9 code=0x7ffc0000 [ 271.126743][ T29] audit: type=1326 audit(2000000421.538:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19522 comm="syz.3.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d090aacb9 code=0x7ffc0000 [ 271.150453][ T29] audit: type=1326 audit(2000000421.548:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19522 comm="syz.3.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d090aacb9 code=0x7ffc0000 [ 271.173959][ T29] audit: type=1326 audit(2000000421.548:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19522 comm="syz.3.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d090aacb9 code=0x7ffc0000 [ 271.197691][ T29] audit: type=1326 audit(2000000421.548:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19522 comm="syz.3.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f8d090aacb9 code=0x7ffc0000 [ 271.221228][ T29] audit: type=1326 audit(2000000421.548:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19522 comm="syz.3.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d090aacb9 code=0x7ffc0000 [ 271.244812][ T29] audit: type=1326 audit(2000000421.548:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19522 comm="syz.3.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d090aacb9 code=0x7ffc0000 [ 271.380665][ T29] audit: type=1326 audit(2000000421.728:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19524 comm="syz.9.5170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e13adacb9 code=0x0 [ 271.939487][T19579] macvtap1: entered promiscuous mode [ 271.945707][T19579] team0: entered promiscuous mode [ 271.951508][T19579] team_slave_0: entered promiscuous mode [ 271.958990][T19579] team_slave_1: entered promiscuous mode [ 271.973436][T19579] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 272.011708][T19579] team0: Device macvtap1 is already an upper device of the team interface [ 272.056773][T19579] team0: left promiscuous mode [ 272.062133][T19579] team_slave_0: left promiscuous mode [ 272.068965][T19579] team_slave_1: left promiscuous mode [ 272.275897][T19588] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5167'. [ 272.466336][T19597] xt_hashlimit: max too large, truncated to 1048576 [ 272.479462][T19597] No such timeout policy "syz1" [ 272.622047][T19604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5188'. [ 272.901566][T19609] loop4: detected capacity change from 0 to 764 [ 272.980753][T19609] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 273.147530][T19617] geneve0 speed is unknown, defaulting to 1000 [ 273.789434][T19642] macvtap1: entered promiscuous mode [ 273.797345][T19642] team0: entered promiscuous mode [ 273.807088][T19642] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 273.820559][T19642] team0: Device macvtap1 is already an upper device of the team interface [ 273.840075][T19642] team0: left promiscuous mode [ 274.516641][T19657] geneve0 speed is unknown, defaulting to 1000 [ 274.622240][T19667] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5208'. [ 274.745774][T19674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5214'. [ 274.773604][T19674] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5214'. [ 274.894734][ T3452] Bluetooth: hci0: Frame reassembly failed (-84) [ 275.314698][T19704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5215'. [ 275.726532][T19719] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5218'. [ 275.726934][T19720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5230'. [ 275.746317][T19719] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5218'. [ 275.756588][T19720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5230'. [ 275.770666][T19719] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5218'. [ 275.981685][T19739] netlink: 'syz.2.5229': attribute type 4 has an invalid length. [ 275.990866][T19739] netlink: 'syz.2.5229': attribute type 4 has an invalid length. [ 276.023595][T19741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5232'. [ 276.067993][T19747] geneve0 speed is unknown, defaulting to 1000 [ 276.101741][T19747] netlink: 'syz.5.5234': attribute type 5 has an invalid length. [ 276.109553][T19747] netlink: 'syz.5.5234': attribute type 6 has an invalid length. [ 276.132181][T19753] sch_tbf: burst 1821 is lower than device lo mtu (11337746) ! [ 276.176869][T19759] loop3: detected capacity change from 0 to 128 [ 276.663031][ T29] audit: type=1326 audit(2000000427.118:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19768 comm="syz.9.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e13adacb9 code=0x7ffc0000 [ 276.692816][ T29] audit: type=1326 audit(2000000427.138:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19768 comm="syz.9.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e13adacb9 code=0x7ffc0000 [ 276.716696][ T29] audit: type=1326 audit(2000000427.138:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19768 comm="syz.9.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e13adacb9 code=0x7ffc0000 [ 276.740225][ T29] audit: type=1326 audit(2000000427.138:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19768 comm="syz.9.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e13adacb9 code=0x7ffc0000 [ 276.763848][ T29] audit: type=1326 audit(2000000427.138:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19768 comm="syz.9.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e13adacb9 code=0x7ffc0000 [ 276.787409][ T29] audit: type=1326 audit(2000000427.138:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19768 comm="syz.9.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e13adacb9 code=0x7ffc0000 [ 276.810934][ T29] audit: type=1326 audit(2000000427.138:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19768 comm="syz.9.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e13adacb9 code=0x7ffc0000 [ 276.834419][ T29] audit: type=1326 audit(2000000427.138:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19768 comm="syz.9.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e13adacb9 code=0x7ffc0000 [ 276.858097][ T29] audit: type=1326 audit(2000000427.138:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19768 comm="syz.9.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e13adacb9 code=0x7ffc0000 [ 276.881640][ T29] audit: type=1326 audit(2000000427.138:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19768 comm="syz.9.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f7e13adacb9 code=0x7ffc0000 [ 276.942779][ T3772] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 276.942785][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 277.120799][T19797] geneve0 speed is unknown, defaulting to 1000 [ 277.555306][T19842] netlink: 'syz.9.5279': attribute type 27 has an invalid length. [ 277.564594][T19842] batadv0: left promiscuous mode [ 277.569793][T19842] batadv0: left allmulticast mode [ 277.600063][T19842] bond2: left promiscuous mode [ 277.605078][T19842] bond3: left promiscuous mode [ 277.630935][T19852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.718174][T19852] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.749620][T19852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.380097][ T3425] IPVS: starting estimator thread 0... [ 278.522684][T19871] IPVS: using max 2304 ests per chain, 115200 per kthread [ 278.705571][T19891] bridge0: entered promiscuous mode [ 278.711308][T19891] bridge0: left promiscuous mode [ 279.145799][T19904] lo: Caught tx_queue_len zero misconfig [ 279.288726][T19912] netlink: 'syz.3.5293': attribute type 10 has an invalid length. [ 279.331437][T19912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.340032][T19915] netlink: 'syz.3.5293': attribute type 10 has an invalid length. [ 279.369603][T19915] batadv0: entered promiscuous mode [ 279.374950][T19915] batadv0: entered allmulticast mode [ 279.395431][T19915] bridge0: port 3(batadv0) entered blocking state [ 279.401962][T19915] bridge0: port 3(batadv0) entered disabled state [ 279.531040][T19920] netlink: 'syz.5.5308': attribute type 27 has an invalid length. [ 279.569668][ T9922] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.596761][T19920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.612960][ T9904] batman_adv: batadv0: IGMP Querier appeared [ 279.618995][ T9904] batman_adv: batadv0: MLD Querier appeared [ 279.650164][T19920] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.675045][T19920] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 279.719547][ T9922] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.773391][T19933] __nla_validate_parse: 6 callbacks suppressed [ 279.773408][T19933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5303'. [ 279.836997][T19933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5303'. [ 279.866274][ T9922] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.925754][ T9922] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.021096][ T9922] bridge_slave_1: left allmulticast mode [ 280.026839][ T9922] bridge_slave_1: left promiscuous mode [ 280.032587][ T9922] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.060691][ T9922] bridge_slave_0: left allmulticast mode [ 280.066504][ T9922] bridge_slave_0: left promiscuous mode [ 280.072224][ T9922] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.135471][T19952] netlink: 'syz.5.5309': attribute type 10 has an invalid length. [ 280.191620][T19955] netlink: 'syz.5.5309': attribute type 10 has an invalid length. [ 280.199533][T19955] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5309'. [ 280.253011][ T9922] bond1 (unregistering): (slave bridge1): Releasing active interface [ 280.422946][ T9922] bond0 (unregistering): (slave 30): Releasing backup interface [ 280.439969][ T9922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.458606][ T9922] bond0 (unregistering): Released all slaves [ 280.467306][ T9922] bond1 (unregistering): Released all slaves [ 280.538584][T19952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.554045][T19952] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 280.569662][ T9922] hsr_slave_0: left promiscuous mode [ 280.583147][ T9922] hsr_slave_1: left promiscuous mode [ 280.591872][ T9922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.599506][ T9922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.620255][ T9922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.627864][ T9922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.646802][ T9922] batman_adv: batadv0: Removing interface: ipvlan2 [ 280.661462][ T9922] veth1_macvtap: left promiscuous mode [ 280.673793][ T9922] veth0_macvtap: left promiscuous mode [ 280.690004][ T9922] veth1_vlan: left promiscuous mode [ 280.707593][ T9922] veth0_vlan: left promiscuous mode [ 280.812303][ T9922] team0 (unregistering): Port device team_slave_1 removed [ 280.844277][ T9922] team0 (unregistering): Port device team_slave_0 removed [ 280.907440][T19955] batadv0: entered promiscuous mode [ 280.912842][T19955] batadv0: entered allmulticast mode [ 280.987566][T19955] bond0: (slave batadv0): Releasing backup interface [ 281.004246][T19955] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 281.345147][T19992] netlink: 'syz.3.5316': attribute type 27 has an invalid length. [ 281.359518][T19992] bond2: left promiscuous mode [ 281.378171][T19992] veth14: left promiscuous mode [ 281.383190][T19992] veth14: left allmulticast mode [ 281.391890][T19992] macvlan2: left promiscuous mode [ 281.413579][T19997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.421726][T19997] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.431455][T19997] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.801527][T20006] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.940100][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 281.940116][ T29] audit: type=1326 audit(2000000432.388:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20015 comm="syz.5.5319" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda3fc7acb9 code=0x0 [ 281.974423][T20006] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.075413][T20006] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.155311][T20006] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.251079][ T9922] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.269722][ T9922] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.299610][ T9922] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.320926][ T9922] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.646033][T20073] SELinux: failed to load policy [ 282.849399][T20080] loop2: detected capacity change from 0 to 512 [ 282.914888][T20080] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 283.034322][T20080] EXT4-fs (loop2): orphan cleanup on readonly fs [ 283.089636][T20080] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.5325: Allocating blocks 41-42 which overlap fs metadata [ 283.174903][T20080] Quota error (device loop2): write_blk: dquota write failed [ 283.188371][T20080] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 283.223240][T20080] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.5325: Allocating blocks 41-42 which overlap fs metadata [ 283.264265][T20080] Quota error (device loop2): write_blk: dquota write failed [ 283.272891][T20080] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 283.317940][T20080] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.5325: Failed to acquire dquot type 1 [ 283.380651][T20080] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 283.423242][T20080] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.5325: corrupted inode contents [ 283.491750][T20080] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.5325: mark_inode_dirty error [ 283.524588][T20080] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.5325: corrupted inode contents [ 283.673364][T20080] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.5325: mark_inode_dirty error [ 283.720254][T20080] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.5325: corrupted inode contents [ 283.824351][T20080] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 283.858109][T20080] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.5325: corrupted inode contents [ 283.905374][T20080] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.5325: mark_inode_dirty error [ 283.942887][T20080] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 283.964700][T20080] EXT4-fs (loop2): 1 truncate cleaned up [ 283.998585][T20080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 284.083331][T10115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.100865][T20236] netlink: 'syz.4.5348': attribute type 1 has an invalid length. [ 284.149764][T20236] bond2: entered promiscuous mode [ 284.182794][T20236] 8021q: adding VLAN 0 to HW filter on device bond2 [ 284.235310][T20245] 8021q: adding VLAN 0 to HW filter on device bond3 [ 284.277703][T20245] bond2: (slave bond3): making interface the new active one [ 284.285195][T20245] bond3: entered promiscuous mode [ 284.335981][T20245] bond2: (slave bond3): Enslaving as an active interface with an up link [ 284.480310][T20122] syz.9.5335 (20122) used greatest stack depth: 6056 bytes left [ 284.556053][T20254] SELinux: failed to load policy [ 284.580385][T20261] loop4: detected capacity change from 0 to 2048 [ 284.680296][T20261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.791965][T11947] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.887117][T20276] loop2: detected capacity change from 0 to 512 [ 284.936911][T20276] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 284.992977][T20276] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 285.012274][T20235] loop3: detected capacity change from 0 to 2048 [ 285.072462][T20276] EXT4-fs (loop2): mount failed [ 285.078103][T20235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.213330][T13906] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.251133][T20297] loop2: detected capacity change from 0 to 1024 [ 285.280430][T20297] EXT4-fs: Ignoring removed bh option [ 285.296072][T20297] ext4: Unknown parameter 'smackfsroot' [ 285.336313][T20299] geneve0 speed is unknown, defaulting to 1000 [ 285.421985][ T29] audit: type=1326 audit(2000000435.868:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20302 comm="syz.4.5362" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d6fb4acb9 code=0x0 [ 285.707935][ T29] audit: type=1326 audit(2000000436.158:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20310 comm="syz.3.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d090aacb9 code=0x7ffc0000 [ 285.765032][ T29] audit: type=1326 audit(2000000436.158:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20310 comm="syz.3.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d090aacb9 code=0x7ffc0000 [ 285.788652][ T29] audit: type=1326 audit(2000000436.158:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20310 comm="syz.3.5365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d090aacb9 code=0x7ffc0000 [ 286.566397][T20343] geneve0 speed is unknown, defaulting to 1000 [ 286.711095][T20351] geneve0 speed is unknown, defaulting to 1000 [ 286.773041][T20353] loop4: detected capacity change from 0 to 1024 [ 286.780233][T20353] EXT4-fs: Ignoring removed bh option [ 286.786323][T20353] ext4: Unknown parameter 'smackfsroot' [ 286.887801][T20357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5382'. [ 286.896904][T20357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5382'. [ 286.940542][T20362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5382'. [ 286.949560][T20362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5382'. [ 287.214607][T20390] geneve0 speed is unknown, defaulting to 1000 [ 287.582518][T20398] geneve0 speed is unknown, defaulting to 1000 [ 287.702570][T20411] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5400'. [ 287.711632][T20411] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5400'. [ 287.721543][T20411] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5400'. [ 287.730524][T20411] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5400'. [ 287.893387][T20419] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 287.978482][T20427] geneve0 speed is unknown, defaulting to 1000 [ 288.209190][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 288.209205][ T29] audit: type=1326 audit(2000000438.658:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.2.5420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ef18acb9 code=0x7ffc0000 [ 288.244300][ T29] audit: type=1326 audit(2000000438.658:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.2.5420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ef18acb9 code=0x7ffc0000 [ 288.268641][ T29] audit: type=1326 audit(2000000438.658:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.2.5420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f36ef18acb9 code=0x7ffc0000 [ 288.292054][ T29] audit: type=1326 audit(2000000438.658:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.2.5420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ef18acb9 code=0x7ffc0000 [ 288.315564][ T29] audit: type=1326 audit(2000000438.658:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.2.5420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ef18acb9 code=0x7ffc0000 [ 288.339209][ T29] audit: type=1326 audit(2000000438.658:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.2.5420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f36ef18acb9 code=0x7ffc0000 [ 288.362927][ T29] audit: type=1326 audit(2000000438.658:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.2.5420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ef18acb9 code=0x7ffc0000 [ 288.386617][ T29] audit: type=1326 audit(2000000438.658:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.2.5420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f36ef18acb9 code=0x7ffc0000 [ 288.410219][ T29] audit: type=1326 audit(2000000438.658:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20430 comm="syz.2.5420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ef18acb9 code=0x7ffc0000 [ 288.570020][T20442] geneve0 speed is unknown, defaulting to 1000 [ 288.624643][T20454] loop2: detected capacity change from 0 to 256 [ 288.836909][T20466] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 288.959090][T20474] loop2: detected capacity change from 0 to 128 [ 289.036520][T20474] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 289.066635][T20474] ext4 filesystem being mounted at /573/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 289.231598][T20482] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5429'. [ 289.261689][T10115] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 289.329906][T20497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5436'. [ 289.351449][T20500] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 289.458991][T20505] geneve0 speed is unknown, defaulting to 1000 [ 289.759710][T20515] loop3: detected capacity change from 0 to 1024 [ 289.778192][T20515] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 289.810256][T20515] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.5444: Invalid block bitmap block 0 in block_group 0 [ 289.836493][T20515] Quota error (device loop3): write_blk: dquota write failed [ 289.863471][T20515] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.5444: Failed to acquire dquot type 0 [ 289.880937][T20515] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.5444: Freeing blocks not in datazone - block = 0, count = 4096 [ 289.897585][T20515] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.5444: Invalid inode bitmap blk 0 in block_group 0 [ 289.912469][T20515] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 289.921974][ T9925] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:37: Failed to release dquot type 0 [ 289.934651][T20515] EXT4-fs (loop3): 1 orphan inode deleted [ 289.947667][T20515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.981491][T20538] macvlan4: entered promiscuous mode [ 289.982105][T20515] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.987823][T20538] batman_adv: batadv0: Adding interface: macvlan4 [ 290.003127][T20538] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.028598][T20538] batman_adv: batadv0: Not using interface macvlan4 (retrying later): interface not active [ 290.119203][T20547] netlink: 'syz.3.5467': attribute type 2 has an invalid length. [ 291.532653][T20582] loop2: detected capacity change from 0 to 1024 [ 291.563252][T20582] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 291.581474][T20575] loop4: detected capacity change from 0 to 512 [ 291.608312][T20575] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 291.623898][T20582] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.5469: Invalid block bitmap block 0 in block_group 0 [ 291.641554][T20575] EXT4-fs (loop4): 1 truncate cleaned up [ 291.647841][T20575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.654942][T20582] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.5469: Failed to acquire dquot type 0 [ 291.677741][T20582] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.5469: Freeing blocks not in datazone - block = 0, count = 4096 [ 291.733847][T20582] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.5469: Invalid inode bitmap blk 0 in block_group 0 [ 291.753876][ T9948] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:59: Failed to release dquot type 0 [ 291.771486][T20582] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 291.782299][T20582] EXT4-fs (loop2): 1 orphan inode deleted [ 291.789979][T11947] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.803297][T20582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.830443][T20582] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.059342][T20602] team0 (unregistering): Port device team_slave_0 removed [ 292.068926][T20602] team0 (unregistering): Port device team_slave_1 removed [ 292.159962][T20611] macvlan2: entered promiscuous mode [ 292.166198][T20611] batman_adv: batadv0: Adding interface: macvlan2 [ 292.172850][T20611] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 292.192798][T20611] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 292.264562][T20619] __nla_validate_parse: 2 callbacks suppressed [ 292.264581][T20619] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5482'. [ 292.438540][T20629] netlink: 'syz.3.5490': attribute type 1 has an invalid length. [ 292.456838][T20629] 8021q: adding VLAN 0 to HW filter on device bond4 [ 292.471004][T20629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5490'. [ 292.480062][T20629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5490'. [ 292.492511][T20629] macsec1: entered promiscuous mode [ 292.497939][T20629] bond4: entered promiscuous mode [ 292.503272][T20629] macsec1: entered allmulticast mode [ 292.508715][T20629] bond4: entered allmulticast mode [ 292.554578][T20636] team0 (unregistering): Port device team_slave_0 removed [ 292.564919][T20636] team0 (unregistering): Port device team_slave_1 removed [ 292.754582][T20642] loop3: detected capacity change from 0 to 512 [ 292.892292][T20642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.916209][T20642] ext4 filesystem being mounted at /459/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.230639][T20659] netlink: 'syz.9.5501': attribute type 2 has an invalid length. [ 293.245776][T20658] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.5500'. [ 293.486378][T20676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5508'. [ 293.901607][T20702] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5512'. [ 294.026687][T13906] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.079785][T20711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5528'. [ 294.444185][T20724] macvlan2: entered promiscuous mode [ 294.450120][T20724] batman_adv: batadv0: Adding interface: macvlan2 [ 294.456704][T20724] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.482236][T20724] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 294.574339][T20732] loop4: detected capacity change from 0 to 512 [ 294.626574][T20732] EXT4-fs (loop4): 1 orphan inode deleted [ 294.639131][T20732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.652294][ T9925] __quota_error: 5 callbacks suppressed [ 294.652310][ T9925] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 294.667754][ T9925] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:37: Failed to release dquot type 1 [ 294.691754][T20742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5529'. [ 294.708623][T20742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5529'. [ 294.744325][T20732] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.974851][T11947] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.987178][T20759] openvswitch: netlink: Missing key (keys=40, expected=100) [ 295.031075][T20768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5533'. [ 295.055201][T20768] bridge_slave_1: left allmulticast mode [ 295.060880][T20768] bridge_slave_1: left promiscuous mode [ 295.066722][T20768] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.085037][T20768] bridge_slave_0: left allmulticast mode [ 295.090716][T20768] bridge_slave_0: left promiscuous mode [ 295.096640][T20768] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.502327][ T29] audit: type=1326 audit(2000000445.948:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.4.5537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6fb4acb9 code=0x7ffc0000 [ 295.525977][ T29] audit: type=1326 audit(2000000445.948:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.4.5537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6fb4acb9 code=0x7ffc0000 [ 295.566526][ T29] audit: type=1326 audit(2000000445.948:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.4.5537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d6fb4acb9 code=0x7ffc0000 [ 295.590123][ T29] audit: type=1326 audit(2000000445.948:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.4.5537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6fb4acb9 code=0x7ffc0000 [ 295.613742][ T29] audit: type=1326 audit(2000000445.948:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.4.5537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6fb4acb9 code=0x7ffc0000 [ 295.637283][ T29] audit: type=1326 audit(2000000445.948:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.4.5537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0d6fb4acb9 code=0x7ffc0000 [ 295.660699][ T29] audit: type=1326 audit(2000000445.948:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.4.5537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6fb4acb9 code=0x7ffc0000 [ 295.684255][ T29] audit: type=1326 audit(2000000445.948:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.4.5537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6fb4acb9 code=0x7ffc0000 [ 295.707847][ T29] audit: type=1326 audit(2000000445.948:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.4.5537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0d6fb4acb9 code=0x7ffc0000 [ 296.040866][T20819] geneve0 speed is unknown, defaulting to 1000 [ 296.131085][T20839] loop2: detected capacity change from 0 to 512 [ 296.144477][T20839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.164749][T20839] ext4 filesystem being mounted at /599/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.254697][T20849] geneve0 speed is unknown, defaulting to 1000 [ 296.733930][T20916] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 297.183526][T20959] geneve0 speed is unknown, defaulting to 1000 [ 297.201517][T10115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.592137][T21008] geneve0 speed is unknown, defaulting to 1000 [ 297.607399][T21012] __nla_validate_parse: 4 callbacks suppressed [ 297.607413][T21012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5567'. [ 297.622832][T21012] batadv0: left allmulticast mode [ 297.628373][T21012] batadv0: left promiscuous mode [ 297.633649][T21012] bridge0: port 3(batadv0) entered disabled state [ 297.641211][T21012] bridge_slave_1: left allmulticast mode [ 297.646922][T21012] bridge_slave_1: left promiscuous mode [ 297.652656][T21012] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.660537][T21012] bridge_slave_0: left allmulticast mode [ 297.666240][T21012] bridge_slave_0: left promiscuous mode [ 297.671881][T21012] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.698995][T21022] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5572'. [ 297.760166][T21022] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5572'. [ 297.775649][T21024] netlink: 'syz.5.5573': attribute type 10 has an invalid length. [ 297.783632][T21024] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5573'. [ 297.839317][T21024] dummy0: entered promiscuous mode [ 297.844600][T21024] dummy0: entered allmulticast mode [ 297.850331][T21024] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 297.928387][T21036] loop3: detected capacity change from 0 to 512 [ 297.954039][T21036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback. [ 298.003181][T21036] ext4 filesystem being mounted at /468/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.023949][T21036] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.5579: Failed to acquire dquot type 0 [ 298.035594][T21043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5587'. [ 298.122241][T13906] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 298.138470][T21063] loop2: detected capacity change from 0 to 764 [ 298.321557][T21082] loop3: detected capacity change from 0 to 128 [ 298.410216][T21082] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 298.453756][T21082] ext4 filesystem being mounted at /471/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 298.504634][T21100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5588'. [ 298.542451][T21100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5588'. [ 298.681493][T13906] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 298.733950][T21121] netlink: 'syz.2.5590': attribute type 10 has an invalid length. [ 298.741807][T21121] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5590'. [ 298.782796][T21121] dummy0: entered promiscuous mode [ 298.787962][T21121] dummy0: entered allmulticast mode [ 298.811232][T21121] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 299.002143][T21144] loop3: detected capacity change from 0 to 256 [ 300.837266][T21027] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 300.868010][T21223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5607'. [ 300.892415][T21223] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5607'. [ 300.931005][T21223] vlan0: entered promiscuous mode [ 300.936238][T21223] bridge0: entered promiscuous mode [ 300.941554][T21223] vlan0: entered allmulticast mode [ 300.946832][T21223] bridge0: entered allmulticast mode [ 301.020363][T21243] netlink: 'syz.3.5605': attribute type 10 has an invalid length. [ 301.049016][T21243] dummy0: entered promiscuous mode [ 301.054230][T21243] dummy0: entered allmulticast mode [ 301.066227][T21243] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 301.143952][T21255] netlink: 'syz.3.5611': attribute type 1 has an invalid length. [ 301.170944][T21259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.283878][T21261] bond4: left allmulticast mode [ 301.288755][T21261] bond4: left promiscuous mode [ 301.408297][T21281] vlan3: entered promiscuous mode [ 301.413491][T21281] bridge0: entered promiscuous mode [ 301.418809][T21281] vlan3: entered allmulticast mode [ 301.424132][T21281] bridge0: entered allmulticast mode [ 301.684659][T21304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.019876][T21345] loop4: detected capacity change from 0 to 128 [ 302.069893][T21345] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 302.183932][T21345] ext4 filesystem being mounted at /478/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 302.414289][T11947] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 302.425652][T21363] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.619678][T21376] netlink: 'syz.2.5658': attribute type 32 has an invalid length. [ 302.944248][T21394] bond2: left promiscuous mode [ 302.949108][T21394] bond3: left promiscuous mode [ 303.018175][T21394] macvlan2: left promiscuous mode [ 303.042643][ T9900] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.061928][ T9972] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.071883][ T9972] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.085584][ T9972] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.202009][T21417] netlink: 'syz.5.5680': attribute type 32 has an invalid length. [ 303.260924][T21422] __nla_validate_parse: 13 callbacks suppressed [ 303.260940][T21422] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5666'. [ 303.276383][T21422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.444491][T21430] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5669'. [ 304.178221][T21454] netlink: 'syz.4.5682': attribute type 32 has an invalid length. [ 304.390736][T21469] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5684'. [ 304.399672][T21469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 304.591892][T21475] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5685'. [ 304.601494][T21471] 9pnet: p9_errstr2errno: server reported unknown error 000000000 [ 305.122880][T21509] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5702'. [ 306.107297][T21540] bridge0: entered allmulticast mode [ 306.174603][T21541] 9pnet: p9_errstr2errno: server reported unknown error 000000000 [ 306.366057][T21559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5720'. [ 306.558394][T21572] bridge8: entered allmulticast mode [ 306.882860][T21585] 9pnet: p9_errstr2errno: server reported unknown error 000000000 [ 306.949216][T21595] loop4: detected capacity change from 0 to 512 [ 306.985234][T21595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.997978][T21549] ================================================================== [ 307.006148][T21549] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 307.013447][T21549] [ 307.015757][T21549] read to 0xffff8881629526b8 of 4 bytes by task 21555 on cpu 1: [ 307.023465][T21549] atime_needs_update+0x25f/0x3e0 [ 307.028483][T21549] touch_atime+0x4a/0x340 [ 307.032801][T21549] shmem_file_read_iter+0x477/0x540 [ 307.038010][T21549] copy_splice_read+0x471/0x6c0 [ 307.042861][T21549] splice_direct_to_actor+0x28f/0x670 [ 307.048233][T21549] do_splice_direct+0x119/0x1a0 [ 307.053084][T21549] do_sendfile+0x380/0x650 [ 307.057500][T21549] __x64_sys_sendfile64+0x105/0x150 [ 307.062688][T21549] x64_sys_call+0x2db1/0x3000 [ 307.067364][T21549] do_syscall_64+0xc0/0x2a0 [ 307.071971][T21549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.077855][T21549] [ 307.080165][T21549] write to 0xffff8881629526b8 of 4 bytes by task 21549 on cpu 0: [ 307.087975][T21549] touch_atime+0x1e8/0x340 [ 307.092473][T21549] shmem_file_read_iter+0x477/0x540 [ 307.097668][T21549] copy_splice_read+0x471/0x6c0 [ 307.102531][T21549] splice_direct_to_actor+0x28f/0x670 [ 307.107901][T21549] do_splice_direct+0x119/0x1a0 [ 307.112752][T21549] do_sendfile+0x380/0x650 [ 307.117158][T21549] __x64_sys_sendfile64+0x105/0x150 [ 307.122370][T21549] x64_sys_call+0x2db1/0x3000 [ 307.127037][T21549] do_syscall_64+0xc0/0x2a0 [ 307.131535][T21549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.137415][T21549] [ 307.139726][T21549] value changed: 0x1a28fc7a -> 0x1ac192fa [ 307.145429][T21549] [ 307.147739][T21549] Reported by Kernel Concurrency Sanitizer on: [ 307.153893][T21549] CPU: 0 UID: 0 PID: 21549 Comm: syz.9.5717 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 307.165256][T21549] Tainted: [W]=WARN [ 307.169039][T21549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 307.179077][T21549] ================================================================== [ 307.192695][T21595] ext4 filesystem being mounted at /491/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.242758][T11947] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.