last executing test programs: 1m13.223162326s ago: executing program 0 (id=24): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x102a58, 0x10000, 0x8, 0x6, 0x8, 0x2020005, 0xff, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xe, 0xffffffffffffffff, 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000080)=""/17, &(0x7f0000000100)=0x11) 1m13.187842139s ago: executing program 0 (id=26): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000540)='~', 0x1, 0x4c801, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x1e0d}], 0x1, 0x40002043, 0x0) 1m13.138628171s ago: executing program 0 (id=29): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000500)={0x11, 0x5, r2, 0x1, 0x3, 0x6, @broadcast}, 0x14) bind$packet(r0, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000680)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @void, {@llc={0x606, {@llc={0xfe, 0xaa, "eb"}}}}}, 0x0) 1m13.074367755s ago: executing program 0 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5299, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m13.022210848s ago: executing program 0 (id=34): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x19, 0x0, 0x0}, 0x90) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140), 0x300, &(0x7f0000000280)}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) 1m11.742612722s ago: executing program 0 (id=72): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) rt_sigprocmask(0x2, &(0x7f0000000000)={[0x6]}, &(0x7f0000000080), 0x8) 1m11.742474013s ago: executing program 32 (id=72): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) rt_sigprocmask(0x2, &(0x7f0000000000)={[0x6]}, &(0x7f0000000080), 0x8) 1m3.478309594s ago: executing program 2 (id=309): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20008840}, 0x2004c886) 1m3.427481767s ago: executing program 2 (id=311): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local}}) io_uring_enter(r1, 0x3532, 0x32c9, 0x45, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000480)={{0x2f, @multicast2, 0x4e24, 0x4, 'sed\x00', 0x18, 0x8, 0x4d}, {@local, 0x4e21, 0x10000, 0x1, 0x4}}, 0x44) 1m3.267718126s ago: executing program 2 (id=316): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000009380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/203, 0xcb}, 0x964b}], 0x1, 0x12141, 0x0) 1m3.174791111s ago: executing program 2 (id=320): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x100) 1m3.081635757s ago: executing program 2 (id=324): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x4}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x3, 0x79b}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x20}}, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 1m2.438324285s ago: executing program 2 (id=333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0x0, 0x9}, {0xf, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xe}}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 1m2.411313036s ago: executing program 33 (id=333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0x0, 0x9}, {0xf, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xe}}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 59.721269533s ago: executing program 1 (id=388): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0x2, @perf_config_ext={0x6}, 0x4, 0x0, 0xfffe, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000100)='=', 0xfffffd4a, 0x4fed3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x1000) 59.311281277s ago: executing program 1 (id=399): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100028, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x6220, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs(0x0, 0x0) r0 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) ptrace(0x8, r0) 59.133388197s ago: executing program 1 (id=403): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0xfd, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, 0x0, &(0x7f0000001540)) 58.140730275s ago: executing program 1 (id=419): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) 58.032390181s ago: executing program 1 (id=423): r0 = io_uring_setup(0x1133, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x1, 0x119}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x11, &(0x7f00000002c0), 0x2) r1 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x1, 0x0, 0x10}, &(0x7f0000000380)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) 57.725221978s ago: executing program 1 (id=431): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000200)=0x6) 57.725122289s ago: executing program 34 (id=431): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000200)=0x6) 35.645590365s ago: executing program 5 (id=903): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, 0x0, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0xc11, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40014) 35.578399808s ago: executing program 5 (id=905): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) ioprio_set$pid(0x3, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r1, r1) ioprio_get$uid(0x3, 0x0) 35.575575658s ago: executing program 5 (id=906): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x82, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) 35.546133581s ago: executing program 5 (id=907): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x24020400) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) 35.497535153s ago: executing program 5 (id=910): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0xf56) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000480)={0x8}) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 35.285436075s ago: executing program 5 (id=914): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f00)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3ff, 0x9, 0x555, 0x1f, 0xb7, 0x9, 0x36b, 0x9, 0xb, 0x7ff, 0x1a, 0x4, 0x7, 0xa, 0xa, 0x3}}, @TCA_GRED_STAB={0xdb, 0x2, "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"}]}}]}, 0x170}}, 0x0) 35.265536177s ago: executing program 35 (id=914): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f00)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3ff, 0x9, 0x555, 0x1f, 0xb7, 0x9, 0x36b, 0x9, 0xb, 0x7ff, 0x1a, 0x4, 0x7, 0xa, 0xa, 0x3}}, @TCA_GRED_STAB={0xdb, 0x2, "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"}]}}]}, 0x170}}, 0x0) 25.184700613s ago: executing program 8 (id=1181): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x20002000, 0x4) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00010100004000", 0x7}, {&(0x7f0000000080)='%y', 0x2}], 0x2}, 0x4004) readv(r1, &(0x7f00000002c0), 0x44) 24.987836245s ago: executing program 8 (id=1183): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 24.987327805s ago: executing program 8 (id=1184): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200812, &(0x7f0000000180)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@euid_eq}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f00000004c0)={0x0, 0x119e, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x7fffffff, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x1, 0x0}) io_uring_enter(r0, 0x8080627, 0xe07c, 0x8, 0x0, 0xffffffffffffffd2) 24.705684901s ago: executing program 8 (id=1190): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 24.576629559s ago: executing program 8 (id=1192): r0 = socket$inet6(0xa, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x6, 0x4) 24.282582136s ago: executing program 8 (id=1199): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/133, 0x85}], 0x1}, 0x10020) 24.282483846s ago: executing program 36 (id=1199): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/133, 0x85}], 0x1}, 0x10020) 3.273756909s ago: executing program 9 (id=1589): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x8, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) sendmsg$inet(r0, &(0x7f0000000bc0)={&(0x7f0000000100)={0x2, 0x3ff, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000240)="ec", 0x1}], 0x1}, 0x400c040) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8001) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000) 2.412078519s ago: executing program 9 (id=1597): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x200, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f1", 0x1) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 1.665196233s ago: executing program 6 (id=1610): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000700)="0e14f42abb4d1e9fafbafbc92200", 0xe, 0x0, &(0x7f0000000380)={0x11, 0x8100, r2, 0x1, 0xdb, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x633019276041e1cf}}, 0x14) 1.632151405s ago: executing program 6 (id=1611): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, 0x0, 0x0}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) 1.331095853s ago: executing program 4 (id=1617): r0 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x0, 0x207}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r0, 0xd81, 0x3, 0x20, 0x0, 0x0) sendmmsg(r4, &(0x7f000000bf00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="1b", 0x1}], 0x1}}], 0x1, 0x10081) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto(r4, &(0x7f00000000c0)="0918e4406ea6", 0x6, 0x2404881c, 0x0, 0x0) 1.304135974s ago: executing program 7 (id=1618): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) chmod(&(0x7f0000000040)='.\x00', 0x35e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.293754435s ago: executing program 9 (id=1619): r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) close(0x3) 1.283691695s ago: executing program 4 (id=1620): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x9, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x0, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x0, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x0, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x0, 0x2, 0xc491}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x0, 0x2, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x0, 0x2, 0xffffffb7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x0, 0x4, 0xb0}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.173933232s ago: executing program 6 (id=1621): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xfc5, 0x2db0, 0x101, 0x3bdc, 0x7, "7f5972d4bb67f3661c0196fe1d42c5d7cf38f6"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x0, 0x83, "00000000000000000000ffff00000000000008"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x7) 1.157987063s ago: executing program 4 (id=1622): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000700)="0e14f42abb4d1e9fafbafbc92200", 0xe, 0x0, &(0x7f0000000380)={0x11, 0x8100, r2, 0x1, 0xdb, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x633019276041e1cf}}, 0x14) 1.150724743s ago: executing program 9 (id=1623): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x4040040) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={r1, 0x4, 0x3, 0x1}) close_range(r2, 0xffffffffffffffff, 0x0) 1.134542904s ago: executing program 4 (id=1624): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x20040600) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x5, 0x0, &(0x7f0000000080)=0x5a) 1.114930625s ago: executing program 9 (id=1625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ppoll(&(0x7f00000000c0)=[{r2, 0x2292}], 0x1, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x8001a0) 1.114497675s ago: executing program 4 (id=1626): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setstatus(r0, 0x4, 0x6c00) write$UHID_INPUT(r0, &(0x7f00000011c0)={0x8, {"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", 0x1000}}, 0x1006) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 1.051693619s ago: executing program 7 (id=1627): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="10"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) 1.004238121s ago: executing program 7 (id=1628): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x6c, 0x2, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_ID={0x8}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 992.034282ms ago: executing program 7 (id=1629): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) io_setup(0x2007, &(0x7f0000000980)=0x0) io_pgetevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_destroy(r1) 834.823752ms ago: executing program 7 (id=1630): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getrlimit(0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x400, 0x400, 0x0) 774.553015ms ago: executing program 7 (id=1631): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 375.697708ms ago: executing program 3 (id=1641): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x82, &(0x7f0000000300)={0x0, 0xb}, 0x8) 349.31028ms ago: executing program 3 (id=1642): setuid(0xee00) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioperm(0x3, 0x3, 0x9) 323.235681ms ago: executing program 3 (id=1643): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x35c4, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 322.855242ms ago: executing program 6 (id=1644): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r0 = syz_io_uring_setup(0x3fa1, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x0, 0xfffffffe}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000500)={0x2, 0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/248, 0xf8}, {0x0}], 0x0}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r2, &(0x7f0000002140)=""/17, 0x11, 0x0) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) 293.873193ms ago: executing program 3 (id=1645): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) listen(r0, 0x5) 293.453103ms ago: executing program 3 (id=1646): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x10, 0x9}, {0xf, 0x5}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r0) 236.449546ms ago: executing program 4 (id=1647): memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) 98.134214ms ago: executing program 9 (id=1648): r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_clone(0x8200e411, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2080100}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x5a5856e9399ca36}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0xca}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) 32.872608ms ago: executing program 3 (id=1649): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setresgid(0x0, 0xee00, 0x0) r0 = semget$private(0x0, 0x4, 0x29b) semop(r0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x70, 0xd49}, 0x3ff, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3}) semctl$GETNCNT(r0, 0x4, 0xe, 0x0) 32.346438ms ago: executing program 6 (id=1650): io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x800, 0xb}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x35c4, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 6 (id=1651): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x49) kernel console output (not intermixed with test programs): is beyond EOD, truncated [ 59.172703][ T5907] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 59.175952][ T4519] loop6: p79 start 150994944 is beyond EOD, truncated [ 59.191671][ T4519] loop6: p80 start 150994944 is beyond EOD, truncated [ 59.198439][ T4519] loop6: p81 start 150994944 is beyond EOD, truncated [ 59.205295][ T4519] loop6: p82 start 150994944 is beyond EOD, truncated [ 59.212070][ T4519] loop6: p83 start 150994944 is beyond EOD, truncated [ 59.218818][ T4519] loop6: p84 start 150994944 is beyond EOD, truncated [ 59.225591][ T4519] loop6: p85 start 150994944 is beyond EOD, truncated [ 59.232427][ T4519] loop6: p86 start 150994944 is beyond EOD, truncated [ 59.239286][ T4519] loop6: p87 start 150994944 is beyond EOD, truncated [ 59.246083][ T4519] loop6: p88 start 150994944 is beyond EOD, truncated [ 59.252868][ T4519] loop6: p89 start 150994944 is beyond EOD, truncated [ 59.259610][ T4519] loop6: p90 start 150994944 is beyond EOD, truncated [ 59.266462][ T4519] loop6: p91 start 150994944 is beyond EOD, truncated [ 59.273230][ T4519] loop6: p92 start 150994944 is beyond EOD, truncated [ 59.279973][ T4519] loop6: p93 start 150994944 is beyond EOD, truncated [ 59.286845][ T4519] loop6: p94 start 150994944 is beyond EOD, truncated [ 59.293618][ T4519] loop6: p95 start 150994944 is beyond EOD, truncated [ 59.300363][ T4519] loop6: p96 start 150994944 is beyond EOD, truncated [ 59.307142][ T4519] loop6: p97 start 150994944 is beyond EOD, truncated [ 59.313911][ T4519] loop6: p98 start 150994944 is beyond EOD, truncated [ 59.320652][ T4519] loop6: p99 start 150994944 is beyond EOD, truncated [ 59.327512][ T4519] loop6: p100 start 150994944 is beyond EOD, truncated [ 59.334405][ T4519] loop6: p101 start 150994944 is beyond EOD, truncated [ 59.341303][ T4519] loop6: p102 start 150994944 is beyond EOD, truncated [ 59.348157][ T4519] loop6: p103 start 150994944 is beyond EOD, truncated [ 59.355193][ T4519] loop6: p104 start 150994944 is beyond EOD, truncated [ 59.362064][ T4519] loop6: p105 start 150994944 is beyond EOD, truncated [ 59.368951][ T4519] loop6: p106 start 150994944 is beyond EOD, truncated [ 59.375807][ T4519] loop6: p107 start 150994944 is beyond EOD, truncated [ 59.382668][ T4519] loop6: p108 start 150994944 is beyond EOD, truncated [ 59.389544][ T4519] loop6: p109 start 150994944 is beyond EOD, truncated [ 59.396464][ T4519] loop6: p110 start 150994944 is beyond EOD, truncated [ 59.403340][ T4519] loop6: p111 start 150994944 is beyond EOD, truncated [ 59.410191][ T4519] loop6: p112 start 150994944 is beyond EOD, truncated [ 59.417113][ T4519] loop6: p113 start 150994944 is beyond EOD, truncated [ 59.424007][ T4519] loop6: p114 start 150994944 is beyond EOD, truncated [ 59.430835][ T4519] loop6: p115 start 150994944 is beyond EOD, truncated [ 59.437708][ T4519] loop6: p116 start 150994944 is beyond EOD, truncated [ 59.444573][ T4519] loop6: p117 start 150994944 is beyond EOD, truncated [ 59.451483][ T4519] loop6: p118 start 150994944 is beyond EOD, truncated [ 59.458326][ T4519] loop6: p119 start 150994944 is beyond EOD, truncated [ 59.465210][ T4519] loop6: p120 start 150994944 is beyond EOD, truncated [ 59.472070][ T4519] loop6: p121 start 150994944 is beyond EOD, truncated [ 59.478972][ T4519] loop6: p122 start 150994944 is beyond EOD, truncated [ 59.485847][ T4519] loop6: p123 start 150994944 is beyond EOD, truncated [ 59.492814][ T4519] loop6: p124 start 150994944 is beyond EOD, truncated [ 59.499695][ T4519] loop6: p125 start 150994944 is beyond EOD, truncated [ 59.506697][ T4519] loop6: p126 start 150994944 is beyond EOD, truncated [ 59.513570][ T4519] loop6: p127 start 150994944 is beyond EOD, truncated [ 59.520496][ T4519] loop6: p128 start 150994944 is beyond EOD, truncated [ 59.527369][ T4519] loop6: p129 start 150994944 is beyond EOD, truncated [ 59.534243][ T4519] loop6: p130 start 150994944 is beyond EOD, truncated [ 59.541095][ T4519] loop6: p131 start 150994944 is beyond EOD, truncated [ 59.547937][ T4519] loop6: p132 start 150994944 is beyond EOD, truncated [ 59.554811][ T4519] loop6: p133 start 150994944 is beyond EOD, truncated [ 59.561685][ T4519] loop6: p134 start 150994944 is beyond EOD, truncated [ 59.568532][ T4519] loop6: p135 start 150994944 is beyond EOD, truncated [ 59.575428][ T4519] loop6: p136 start 150994944 is beyond EOD, truncated [ 59.582375][ T4519] loop6: p137 start 150994944 is beyond EOD, truncated [ 59.589229][ T4519] loop6: p138 start 150994944 is beyond EOD, truncated [ 59.596114][ T4519] loop6: p139 start 150994944 is beyond EOD, truncated [ 59.603082][ T4519] loop6: p140 start 150994944 is beyond EOD, truncated [ 59.609970][ T4519] loop6: p141 start 150994944 is beyond EOD, truncated [ 59.616844][ T4519] loop6: p142 start 150994944 is beyond EOD, truncated [ 59.623807][ T4519] loop6: p143 start 150994944 is beyond EOD, truncated [ 59.630659][ T4519] loop6: p144 start 150994944 is beyond EOD, truncated [ 59.637545][ T4519] loop6: p145 start 150994944 is beyond EOD, truncated [ 59.644435][ T4519] loop6: p146 start 150994944 is beyond EOD, truncated [ 59.651305][ T4519] loop6: p147 start 150994944 is beyond EOD, truncated [ 59.658185][ T4519] loop6: p148 start 150994944 is beyond EOD, truncated [ 59.665149][ T4519] loop6: p149 start 150994944 is beyond EOD, truncated [ 59.672206][ T4519] loop6: p150 start 150994944 is beyond EOD, truncated [ 59.679062][ T4519] loop6: p151 start 150994944 is beyond EOD, truncated [ 59.686143][ T4519] loop6: p152 start 150994944 is beyond EOD, truncated [ 59.693032][ T4519] loop6: p153 start 150994944 is beyond EOD, truncated [ 59.699892][ T4519] loop6: p154 start 150994944 is beyond EOD, truncated [ 59.706791][ T4519] loop6: p155 start 150994944 is beyond EOD, truncated [ 59.713674][ T4519] loop6: p156 start 150994944 is beyond EOD, truncated [ 59.720587][ T4519] loop6: p157 start 150994944 is beyond EOD, truncated [ 59.727494][ T4519] loop6: p158 start 150994944 is beyond EOD, truncated [ 59.734520][ T4519] loop6: p159 start 150994944 is beyond EOD, truncated [ 59.741472][ T4519] loop6: p160 start 150994944 is beyond EOD, truncated [ 59.748327][ T4519] loop6: p161 start 150994944 is beyond EOD, truncated [ 59.755202][ T4519] loop6: p162 start 150994944 is beyond EOD, truncated [ 59.762114][ T4519] loop6: p163 start 150994944 is beyond EOD, truncated [ 59.768967][ T4519] loop6: p164 start 150994944 is beyond EOD, truncated [ 59.775832][ T4519] loop6: p165 start 150994944 is beyond EOD, truncated [ 59.782759][ T4519] loop6: p166 start 150994944 is beyond EOD, truncated [ 59.789615][ T4519] loop6: p167 start 150994944 is beyond EOD, truncated [ 59.796518][ T4519] loop6: p168 start 150994944 is beyond EOD, truncated [ 59.803420][ T4519] loop6: p169 start 150994944 is beyond EOD, truncated [ 59.810267][ T4519] loop6: p170 start 150994944 is beyond EOD, truncated [ 59.817675][ T4519] loop6: p171 start 150994944 is beyond EOD, truncated [ 59.824560][ T4519] loop6: p172 start 150994944 is beyond EOD, truncated [ 59.831421][ T4519] loop6: p173 start 150994944 is beyond EOD, truncated [ 59.838247][ T4519] loop6: p174 start 150994944 is beyond EOD, truncated [ 59.845137][ T4519] loop6: p175 start 150994944 is beyond EOD, truncated [ 59.852087][ T4519] loop6: p176 start 150994944 is beyond EOD, truncated [ 59.858945][ T4519] loop6: p177 start 150994944 is beyond EOD, truncated [ 59.865874][ T4519] loop6: p178 start 150994944 is beyond EOD, truncated [ 59.872800][ T4519] loop6: p179 start 150994944 is beyond EOD, truncated [ 59.879632][ T4519] loop6: p180 start 150994944 is beyond EOD, truncated [ 59.886498][ T4519] loop6: p181 start 150994944 is beyond EOD, truncated [ 59.893364][ T4519] loop6: p182 start 150994944 is beyond EOD, truncated [ 59.900298][ T4519] loop6: p183 start 150994944 is beyond EOD, truncated [ 59.907181][ T4519] loop6: p184 start 150994944 is beyond EOD, truncated [ 59.914052][ T4519] loop6: p185 start 150994944 is beyond EOD, truncated [ 59.920884][ T4519] loop6: p186 start 150994944 is beyond EOD, truncated [ 59.927747][ T4519] loop6: p187 start 150994944 is beyond EOD, truncated [ 59.934620][ T4519] loop6: p188 start 150994944 is beyond EOD, truncated [ 59.941497][ T4519] loop6: p189 start 150994944 is beyond EOD, truncated [ 59.948358][ T4519] loop6: p190 start 150994944 is beyond EOD, truncated [ 59.955258][ T4519] loop6: p191 start 150994944 is beyond EOD, truncated [ 59.962215][ T4519] loop6: p192 start 150994944 is beyond EOD, truncated [ 59.969088][ T4519] loop6: p193 start 150994944 is beyond EOD, truncated [ 59.976063][ T4519] loop6: p194 start 150994944 is beyond EOD, truncated [ 59.982927][ T4519] loop6: p195 start 150994944 is beyond EOD, truncated [ 59.989793][ T4519] loop6: p196 start 150994944 is beyond EOD, truncated [ 59.996667][ T4519] loop6: p197 start 150994944 is beyond EOD, truncated [ 60.003606][ T4519] loop6: p198 start 150994944 is beyond EOD, truncated [ 60.010436][ T4519] loop6: p199 start 150994944 is beyond EOD, truncated [ 60.017294][ T4519] loop6: p200 start 150994944 is beyond EOD, truncated [ 60.024156][ T4519] loop6: p201 start 150994944 is beyond EOD, truncated [ 60.030986][ T4519] loop6: p202 start 150994944 is beyond EOD, truncated [ 60.037854][ T4519] loop6: p203 start 150994944 is beyond EOD, truncated [ 60.044725][ T4519] loop6: p204 start 150994944 is beyond EOD, truncated [ 60.051580][ T4519] loop6: p205 start 150994944 is beyond EOD, truncated [ 60.058515][ T4519] loop6: p206 start 150994944 is beyond EOD, truncated [ 60.065490][ T4519] loop6: p207 start 150994944 is beyond EOD, truncated [ 60.072411][ T4519] loop6: p208 start 150994944 is beyond EOD, truncated [ 60.079278][ T4519] loop6: p209 start 150994944 is beyond EOD, truncated [ 60.086137][ T4519] loop6: p210 start 150994944 is beyond EOD, truncated [ 60.093071][ T4519] loop6: p211 start 150994944 is beyond EOD, truncated [ 60.099930][ T4519] loop6: p212 start 150994944 is beyond EOD, truncated [ 60.106822][ T4519] loop6: p213 start 150994944 is beyond EOD, truncated [ 60.113699][ T4519] loop6: p214 start 150994944 is beyond EOD, truncated [ 60.120527][ T4519] loop6: p215 start 150994944 is beyond EOD, truncated [ 60.127392][ T4519] loop6: p216 start 150994944 is beyond EOD, truncated [ 60.134255][ T4519] loop6: p217 start 150994944 is beyond EOD, truncated [ 60.141108][ T4519] loop6: p218 start 150994944 is beyond EOD, truncated [ 60.147947][ T4519] loop6: p219 start 150994944 is beyond EOD, truncated [ 60.154803][ T4519] loop6: p220 start 150994944 is beyond EOD, truncated [ 60.161672][ T4519] loop6: p221 start 150994944 is beyond EOD, truncated [ 60.168498][ T4519] loop6: p222 start 150994944 is beyond EOD, truncated [ 60.175358][ T4519] loop6: p223 start 150994944 is beyond EOD, truncated [ 60.182235][ T4519] loop6: p224 start 150994944 is beyond EOD, truncated [ 60.189064][ T4519] loop6: p225 start 150994944 is beyond EOD, truncated [ 60.195967][ T4519] loop6: p226 start 150994944 is beyond EOD, truncated [ 60.202855][ T4519] loop6: p227 start 150994944 is beyond EOD, truncated [ 60.209709][ T4519] loop6: p228 start 150994944 is beyond EOD, truncated [ 60.216632][ T4519] loop6: p229 start 150994944 is beyond EOD, truncated [ 60.223519][ T4519] loop6: p230 start 150994944 is beyond EOD, truncated [ 60.230404][ T4519] loop6: p231 start 150994944 is beyond EOD, truncated [ 60.237368][ T4519] loop6: p232 start 150994944 is beyond EOD, truncated [ 60.244329][ T4519] loop6: p233 start 150994944 is beyond EOD, truncated [ 60.251300][ T4519] loop6: p234 start 150994944 is beyond EOD, truncated [ 60.258155][ T4519] loop6: p235 start 150994944 is beyond EOD, truncated [ 60.265119][ T4519] loop6: p236 start 150994944 is beyond EOD, truncated [ 60.272023][ T4519] loop6: p237 start 150994944 is beyond EOD, truncated [ 60.278956][ T4519] loop6: p238 start 150994944 is beyond EOD, truncated [ 60.285934][ T4519] loop6: p239 start 150994944 is beyond EOD, truncated [ 60.292820][ T4519] loop6: p240 start 150994944 is beyond EOD, truncated [ 60.299678][ T4519] loop6: p241 start 150994944 is beyond EOD, truncated [ 60.306658][ T4519] loop6: p242 start 150994944 is beyond EOD, truncated [ 60.313603][ T4519] loop6: p243 start 150994944 is beyond EOD, truncated [ 60.320435][ T4519] loop6: p244 start 150994944 is beyond EOD, truncated [ 60.327324][ T4519] loop6: p245 start 150994944 is beyond EOD, truncated [ 60.334316][ T4519] loop6: p246 start 150994944 is beyond EOD, truncated [ 60.341217][ T4519] loop6: p247 start 150994944 is beyond EOD, truncated [ 60.348060][ T4519] loop6: p248 start 150994944 is beyond EOD, truncated [ 60.354937][ T4519] loop6: p249 start 150994944 is beyond EOD, truncated [ 60.361876][ T4519] loop6: p250 start 150994944 is beyond EOD, truncated [ 60.368764][ T4519] loop6: p251 start 150994944 is beyond EOD, truncated [ 60.375617][ T4519] loop6: p252 start 150994944 is beyond EOD, truncated [ 60.382518][ T4519] loop6: p253 start 150994944 is beyond EOD, truncated [ 60.389382][ T4519] loop6: p254 start 150994944 is beyond EOD, truncated [ 60.396253][ T4519] loop6: p255 start 150994944 is beyond EOD, truncated [ 60.409049][ T3468] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 60.427913][ T5877] loop6: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 60.439325][ T5877] loop6: p2 start 150994944 is beyond EOD, truncated [ 60.556816][ T5931] loop4: detected capacity change from 0 to 512 [ 60.560260][ T5877] loop6: p5 start 150994944 is beyond EOD, truncated [ 60.563611][ T5931] EXT4-fs: Ignoring removed orlov option [ 60.569899][ T5877] loop6: p6 start 150994944 is beyond EOD, truncated [ 60.569921][ T5877] loop6: p7 start 150994944 is beyond EOD, [ 60.575669][ T5931] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.582296][ T5877] truncated [ 60.597742][ T5877] loop6: p8 start 150994944 is beyond EOD, truncated [ 60.604647][ T5877] loop6: p9 start 150994944 is beyond EOD, truncated [ 60.611401][ T5877] loop6: p10 start 150994944 is beyond EOD, truncated [ 60.618323][ T5877] loop6: p11 start 150994944 is beyond EOD, truncated [ 60.625153][ T5877] loop6: p12 start 150994944 is beyond EOD, truncated [ 60.631971][ T5877] loop6: p13 start 150994944 is beyond EOD, truncated [ 60.638741][ T5877] loop6: p14 start 150994944 is beyond EOD, truncated [ 60.645634][ T5877] loop6: p15 start 150994944 is beyond EOD, truncated [ 60.652441][ T5877] loop6: p16 start 150994944 is beyond EOD, truncated [ 60.659214][ T5877] loop6: p17 start 150994944 is beyond EOD, truncated [ 60.666038][ T5877] loop6: p18 start 150994944 is beyond EOD, truncated [ 60.672860][ T5877] loop6: p19 start 150994944 is beyond EOD, truncated [ 60.679690][ T5877] loop6: p20 start 150994944 is beyond EOD, truncated [ 60.686582][ T5877] loop6: p21 start 150994944 is beyond EOD, truncated [ 60.693651][ T5877] loop6: p22 start 150994944 is beyond EOD, truncated [ 60.700513][ T5877] loop6: p23 start 150994944 is beyond EOD, truncated [ 60.707339][ T5877] loop6: p24 start 150994944 is beyond EOD, truncated [ 60.714136][ T5877] loop6: p25 start 150994944 is beyond EOD, truncated [ 60.720956][ T5877] loop6: p26 start 150994944 is beyond EOD, truncated [ 60.727779][ T5877] loop6: p27 start 150994944 is beyond EOD, truncated [ 60.734607][ T5877] loop6: p28 start 150994944 is beyond EOD, truncated [ 60.741409][ T5877] loop6: p29 start 150994944 is beyond EOD, truncated [ 60.748286][ T5877] loop6: p30 start 150994944 is beyond EOD, truncated [ 60.755122][ T5877] loop6: p31 start 150994944 is beyond EOD, truncated [ 60.761936][ T5877] loop6: p32 start 150994944 is beyond EOD, truncated [ 60.768838][ T5877] loop6: p33 start 150994944 is beyond EOD, truncated [ 60.775657][ T5877] loop6: p34 start 150994944 is beyond EOD, truncated [ 60.782552][ T5877] loop6: p35 start 150994944 is beyond EOD, truncated [ 60.789348][ T5877] loop6: p36 start 150994944 is beyond EOD, truncated [ 60.796158][ T5877] loop6: p37 start 150994944 is beyond EOD, truncated [ 60.802950][ T5877] loop6: p38 start 150994944 is beyond EOD, truncated [ 60.809722][ T5877] loop6: p39 start 150994944 is beyond EOD, truncated [ 60.816548][ T5877] loop6: p40 start 150994944 is beyond EOD, truncated [ 60.823339][ T5877] loop6: p41 start 150994944 is beyond EOD, truncated [ 60.830112][ T5877] loop6: p42 start 150994944 is beyond EOD, truncated [ 60.836935][ T5877] loop6: p43 start 150994944 is beyond EOD, truncated [ 60.843769][ T5877] loop6: p44 start 150994944 is beyond EOD, truncated [ 60.850586][ T5877] loop6: p45 start 150994944 is beyond EOD, truncated [ 60.857413][ T5877] loop6: p46 start 150994944 is beyond EOD, truncated [ 60.861166][ T5931] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.793: corrupted in-inode xattr: e_value size too large [ 60.864254][ T5877] loop6: p47 start 150994944 is beyond EOD, truncated [ 60.878672][ T5931] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.793: couldn't read orphan inode 15 (err -117) [ 60.884958][ T5877] loop6: p48 start 150994944 is beyond EOD, truncated [ 60.903473][ T5877] loop6: p49 start 150994944 is beyond EOD, truncated [ 60.910256][ T5877] loop6: p50 start 150994944 is beyond EOD, truncated [ 60.917505][ T5877] loop6: p51 start 150994944 is beyond EOD, truncated [ 60.923981][ T5931] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 60.924340][ T5877] loop6: p52 start 150994944 is beyond EOD, truncated [ 60.939432][ T5877] loop6: p53 start 150994944 is beyond EOD, truncated [ 60.943895][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 60.943924][ T29] audit: type=1400 audit(1770027425.836:637): avc: denied { mac_admin } for pid=5930 comm="syz.4.793" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.946329][ T5877] loop6: p54 start 150994944 is beyond EOD, [ 60.952632][ T29] audit: type=1400 audit(1770027425.856:638): avc: denied { relabelto } for pid=5930 comm="syz.4.793" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 60.973447][ T5877] truncated [ 60.973457][ T5877] loop6: p55 start 150994944 is beyond EOD, truncated [ 60.973475][ T5877] loop6: p56 start 150994944 is beyond EOD, truncated [ 60.973508][ T5877] loop6: p57 start 150994944 is beyond EOD, truncated [ 61.027552][ T5877] loop6: p58 start 150994944 is beyond EOD, truncated [ 61.034396][ T5877] loop6: p59 start 150994944 is beyond EOD, truncated [ 61.041207][ T5877] loop6: p60 start 150994944 is beyond EOD, truncated [ 61.047984][ T5877] loop6: p61 start 150994944 is beyond EOD, truncated [ 61.054792][ T5877] loop6: p62 start 150994944 is beyond EOD, truncated [ 61.061625][ T5877] loop6: p63 start 150994944 is beyond EOD, truncated [ 61.068399][ T5877] loop6: p64 start 150994944 is beyond EOD, truncated [ 61.075199][ T5877] loop6: p65 start 150994944 is beyond EOD, truncated [ 61.081974][ T5877] loop6: p66 start 150994944 is beyond EOD, truncated [ 61.088739][ T5877] loop6: p67 start 150994944 is beyond EOD, truncated [ 61.095831][ T5877] loop6: p68 start 150994944 is beyond EOD, truncated [ 61.102770][ T5877] loop6: p69 start 150994944 is beyond EOD, truncated [ 61.109527][ T5877] loop6: p70 start 150994944 is beyond EOD, truncated [ 61.116328][ T5877] loop6: p71 start 150994944 is beyond EOD, truncated [ 61.123121][ T5877] loop6: p72 start 150994944 is beyond EOD, truncated [ 61.129864][ T5877] loop6: p73 start 150994944 is beyond EOD, truncated [ 61.136670][ T5877] loop6: p74 start 150994944 is beyond EOD, truncated [ 61.143445][ T5877] loop6: p75 start 150994944 is beyond EOD, truncated [ 61.150256][ T5877] loop6: p76 start 150994944 is beyond EOD, truncated [ 61.157018][ T5877] loop6: p77 start 150994944 is beyond EOD, truncated [ 61.163832][ T5877] loop6: p78 start 150994944 is beyond EOD, truncated [ 61.170598][ T5877] loop6: p79 start 150994944 is beyond EOD, truncated [ 61.177436][ T5877] loop6: p80 start 150994944 is beyond EOD, truncated [ 61.184383][ T5877] loop6: p81 start 150994944 is beyond EOD, truncated [ 61.191253][ T5877] loop6: p82 start 150994944 is beyond EOD, truncated [ 61.198059][ T5877] loop6: p83 start 150994944 is beyond EOD, truncated [ 61.204846][ T5877] loop6: p84 start 150994944 is beyond EOD, truncated [ 61.211624][ T5877] loop6: p85 start 150994944 is beyond EOD, truncated [ 61.218477][ T5877] loop6: p86 start 150994944 is beyond EOD, truncated [ 61.225249][ T5877] loop6: p87 start 150994944 is beyond EOD, truncated [ 61.232055][ T5877] loop6: p88 start 150994944 is beyond EOD, truncated [ 61.238795][ T5877] loop6: p89 start 150994944 is beyond EOD, truncated [ 61.245556][ T5877] loop6: p90 start 150994944 is beyond EOD, truncated [ 61.252375][ T5877] loop6: p91 start 150994944 is beyond EOD, truncated [ 61.259140][ T5877] loop6: p92 start 150994944 is beyond EOD, truncated [ 61.265924][ T5877] loop6: p93 start 150994944 is beyond EOD, truncated [ 61.272711][ T5877] loop6: p94 start 150994944 is beyond EOD, truncated [ 61.279510][ T5877] loop6: p95 start 150994944 is beyond EOD, truncated [ 61.286330][ T5877] loop6: p96 start 150994944 is beyond EOD, truncated [ 61.293135][ T5877] loop6: p97 start 150994944 is beyond EOD, truncated [ 61.299875][ T5877] loop6: p98 start 150994944 is beyond EOD, truncated [ 61.306655][ T5877] loop6: p99 start 150994944 is beyond EOD, truncated [ 61.313430][ T5877] loop6: p100 start 150994944 is beyond EOD, truncated [ 61.320386][ T5877] loop6: p101 start 150994944 is beyond EOD, truncated [ 61.327313][ T5877] loop6: p102 start 150994944 is beyond EOD, truncated [ 61.334171][ T5877] loop6: p103 start 150994944 is beyond EOD, truncated [ 61.341000][ T5877] loop6: p104 start 150994944 is beyond EOD, truncated [ 61.347905][ T5877] loop6: p105 start 150994944 is beyond EOD, truncated [ 61.354785][ T5877] loop6: p106 start 150994944 is beyond EOD, truncated [ 61.361683][ T5877] loop6: p107 start 150994944 is beyond EOD, truncated [ 61.368872][ T5877] loop6: p108 start 150994944 is beyond EOD, truncated [ 61.375818][ T5877] loop6: p109 start 150994944 is beyond EOD, truncated [ 61.383142][ T5877] loop6: p110 start 150994944 is beyond EOD, truncated [ 61.390020][ T5877] loop6: p111 start 150994944 is beyond EOD, truncated [ 61.396983][ T5877] loop6: p112 start 150994944 is beyond EOD, truncated [ 61.403874][ T5877] loop6: p113 start 150994944 is beyond EOD, truncated [ 61.410704][ T5877] loop6: p114 start 150994944 is beyond EOD, truncated [ 61.417647][ T5877] loop6: p115 start 150994944 is beyond EOD, truncated [ 61.424508][ T5877] loop6: p116 start 150994944 is beyond EOD, truncated [ 61.431362][ T5877] loop6: p117 start 150994944 is beyond EOD, truncated [ 61.438201][ T5877] loop6: p118 start 150994944 is beyond EOD, truncated [ 61.445050][ T5877] loop6: p119 start 150994944 is beyond EOD, truncated [ 61.451941][ T5877] loop6: p120 start 150994944 is beyond EOD, truncated [ 61.458789][ T5877] loop6: p121 start 150994944 is beyond EOD, truncated [ 61.465712][ T5877] loop6: p122 start 150994944 is beyond EOD, truncated [ 61.472571][ T5877] loop6: p123 start 150994944 is beyond EOD, truncated [ 61.479457][ T5877] loop6: p124 start 150994944 is beyond EOD, truncated [ 61.486366][ T5877] loop6: p125 start 150994944 is beyond EOD, truncated [ 61.493266][ T5877] loop6: p126 start 150994944 is beyond EOD, truncated [ 61.500208][ T5877] loop6: p127 start 150994944 is beyond EOD, truncated [ 61.507213][ T5877] loop6: p128 start 150994944 is beyond EOD, truncated [ 61.514195][ T5877] loop6: p129 start 150994944 is beyond EOD, truncated [ 61.521050][ T5877] loop6: p130 start 150994944 is beyond EOD, truncated [ 61.527897][ T5877] loop6: p131 start 150994944 is beyond EOD, truncated [ 61.534755][ T5877] loop6: p132 start 150994944 is beyond EOD, truncated [ 61.541750][ T5877] loop6: p133 start 150994944 is beyond EOD, truncated [ 61.548578][ T5877] loop6: p134 start 150994944 is beyond EOD, truncated [ 61.555549][ T5877] loop6: p135 start 150994944 is beyond EOD, truncated [ 61.562487][ T5877] loop6: p136 start 150994944 is beyond EOD, truncated [ 61.569315][ T5877] loop6: p137 start 150994944 is beyond EOD, truncated [ 61.576283][ T5877] loop6: p138 start 150994944 is beyond EOD, truncated [ 61.583144][ T5877] loop6: p139 start 150994944 is beyond EOD, truncated [ 61.589998][ T5877] loop6: p140 start 150994944 is beyond EOD, truncated [ 61.596849][ T5877] loop6: p141 start 150994944 is beyond EOD, truncated [ 61.603721][ T5877] loop6: p142 start 150994944 is beyond EOD, truncated [ 61.610550][ T5877] loop6: p143 start 150994944 is beyond EOD, truncated [ 61.617586][ T5877] loop6: p144 start 150994944 is beyond EOD, truncated [ 61.624503][ T5877] loop6: p145 start 150994944 is beyond EOD, truncated [ 61.631362][ T5877] loop6: p146 start 150994944 is beyond EOD, truncated [ 61.638254][ T5877] loop6: p147 start 150994944 is beyond EOD, truncated [ 61.645132][ T5877] loop6: p148 start 150994944 is beyond EOD, truncated [ 61.652004][ T5877] loop6: p149 start 150994944 is beyond EOD, truncated [ 61.658872][ T5877] loop6: p150 start 150994944 is beyond EOD, truncated [ 61.665890][ T5877] loop6: p151 start 150994944 is beyond EOD, truncated [ 61.672903][ T5877] loop6: p152 start 150994944 is beyond EOD, truncated [ 61.679793][ T5877] loop6: p153 start 150994944 is beyond EOD, truncated [ 61.686727][ T5877] loop6: p154 start 150994944 is beyond EOD, truncated [ 61.694128][ T5877] loop6: p155 start 150994944 is beyond EOD, truncated [ 61.700989][ T5877] loop6: p156 start 150994944 is beyond EOD, truncated [ 61.707946][ T5877] loop6: p157 start 150994944 is beyond EOD, truncated [ 61.714820][ T5877] loop6: p158 start 150994944 is beyond EOD, truncated [ 61.721772][ T5877] loop6: p159 start 150994944 is beyond EOD, truncated [ 61.728689][ T5877] loop6: p160 start 150994944 is beyond EOD, truncated [ 61.736169][ T5877] loop6: p161 start 150994944 is beyond EOD, truncated [ 61.743321][ T5877] loop6: p162 start 150994944 is beyond EOD, truncated [ 61.750156][ T5877] loop6: p163 start 150994944 is beyond EOD, truncated [ 61.757008][ T5877] loop6: p164 start 150994944 is beyond EOD, truncated [ 61.763875][ T5877] loop6: p165 start 150994944 is beyond EOD, truncated [ 61.770706][ T5877] loop6: p166 start 150994944 is beyond EOD, truncated [ 61.777632][ T5877] loop6: p167 start 150994944 is beyond EOD, truncated [ 61.784555][ T5877] loop6: p168 start 150994944 is beyond EOD, truncated [ 61.791420][ T5877] loop6: p169 start 150994944 is beyond EOD, truncated [ 61.798270][ T5877] loop6: p170 start 150994944 is beyond EOD, truncated [ 61.805165][ T5877] loop6: p171 start 150994944 is beyond EOD, truncated [ 61.812039][ T5877] loop6: p172 start 150994944 is beyond EOD, truncated [ 61.818868][ T5877] loop6: p173 start 150994944 is beyond EOD, truncated [ 61.825722][ T5877] loop6: p174 start 150994944 is beyond EOD, truncated [ 61.832583][ T5877] loop6: p175 start 150994944 is beyond EOD, truncated [ 61.839411][ T5877] loop6: p176 start 150994944 is beyond EOD, truncated [ 61.846369][ T5877] loop6: p177 start 150994944 is beyond EOD, truncated [ 61.853226][ T5877] loop6: p178 start 150994944 is beyond EOD, truncated [ 61.860065][ T5877] loop6: p179 start 150994944 is beyond EOD, truncated [ 61.866971][ T5877] loop6: p180 start 150994944 is beyond EOD, truncated [ 61.873832][ T5877] loop6: p181 start 150994944 is beyond EOD, truncated [ 61.880665][ T5877] loop6: p182 start 150994944 is beyond EOD, truncated [ 61.887521][ T5877] loop6: p183 start 150994944 is beyond EOD, truncated [ 61.894456][ T5877] loop6: p184 start 150994944 is beyond EOD, truncated [ 61.901357][ T5877] loop6: p185 start 150994944 is beyond EOD, truncated [ 61.908209][ T5877] loop6: p186 start 150994944 is beyond EOD, truncated [ 61.915075][ T5877] loop6: p187 start 150994944 is beyond EOD, truncated [ 61.921984][ T5877] loop6: p188 start 150994944 is beyond EOD, truncated [ 61.928829][ T5877] loop6: p189 start 150994944 is beyond EOD, truncated [ 61.935764][ T5877] loop6: p190 start 150994944 is beyond EOD, truncated [ 61.942643][ T5877] loop6: p191 start 150994944 is beyond EOD, truncated [ 61.949478][ T5877] loop6: p192 start 150994944 is beyond EOD, truncated [ 61.956406][ T5877] loop6: p193 start 150994944 is beyond EOD, truncated [ 61.963265][ T5877] loop6: p194 start 150994944 is beyond EOD, truncated [ 61.970106][ T5877] loop6: p195 start 150994944 is beyond EOD, truncated [ 61.976986][ T5877] loop6: p196 start 150994944 is beyond EOD, truncated [ 61.983854][ T5877] loop6: p197 start 150994944 is beyond EOD, truncated [ 61.990779][ T5877] loop6: p198 start 150994944 is beyond EOD, truncated [ 61.997639][ T5877] loop6: p199 start 150994944 is beyond EOD, truncated [ 62.004511][ T5877] loop6: p200 start 150994944 is beyond EOD, truncated [ 62.011403][ T5877] loop6: p201 start 150994944 is beyond EOD, truncated [ 62.018268][ T5877] loop6: p202 start 150994944 is beyond EOD, truncated [ 62.025200][ T5877] loop6: p203 start 150994944 is beyond EOD, truncated [ 62.032088][ T5877] loop6: p204 start 150994944 is beyond EOD, truncated [ 62.039004][ T5877] loop6: p205 start 150994944 is beyond EOD, truncated [ 62.045854][ T5877] loop6: p206 start 150994944 is beyond EOD, truncated [ 62.052721][ T5877] loop6: p207 start 150994944 is beyond EOD, truncated [ 62.059558][ T5877] loop6: p208 start 150994944 is beyond EOD, truncated [ 62.066447][ T5877] loop6: p209 start 150994944 is beyond EOD, truncated [ 62.073309][ T5877] loop6: p210 start 150994944 is beyond EOD, truncated [ 62.080139][ T5877] loop6: p211 start 150994944 is beyond EOD, truncated [ 62.087073][ T5877] loop6: p212 start 150994944 is beyond EOD, truncated [ 62.093951][ T5877] loop6: p213 start 150994944 is beyond EOD, truncated [ 62.100807][ T5877] loop6: p214 start 150994944 is beyond EOD, truncated [ 62.107664][ T5877] loop6: p215 start 150994944 is beyond EOD, truncated [ 62.114597][ T5877] loop6: p216 start 150994944 is beyond EOD, truncated [ 62.121505][ T5877] loop6: p217 start 150994944 is beyond EOD, truncated [ 62.128414][ T5877] loop6: p218 start 150994944 is beyond EOD, truncated [ 62.135261][ T5877] loop6: p219 start 150994944 is beyond EOD, truncated [ 62.142122][ T5877] loop6: p220 start 150994944 is beyond EOD, truncated [ 62.148969][ T5877] loop6: p221 start 150994944 is beyond EOD, truncated [ 62.155901][ T5877] loop6: p222 start 150994944 is beyond EOD, truncated [ 62.162762][ T5877] loop6: p223 start 150994944 is beyond EOD, truncated [ 62.169591][ T5877] loop6: p224 start 150994944 is beyond EOD, truncated [ 62.176486][ T5877] loop6: p225 start 150994944 is beyond EOD, truncated [ 62.183345][ T5877] loop6: p226 start 150994944 is beyond EOD, truncated [ 62.190287][ T5877] loop6: p227 start 150994944 is beyond EOD, truncated [ 62.197230][ T5877] loop6: p228 start 150994944 is beyond EOD, truncated [ 62.204117][ T5877] loop6: p229 start 150994944 is beyond EOD, truncated [ 62.210947][ T5877] loop6: p230 start 150994944 is beyond EOD, truncated [ 62.217805][ T5877] loop6: p231 start 150994944 is beyond EOD, truncated [ 62.224766][ T5877] loop6: p232 start 150994944 is beyond EOD, truncated [ 62.231621][ T5877] loop6: p233 start 150994944 is beyond EOD, truncated [ 62.239665][ T5877] loop6: p234 start 150994944 is beyond EOD, truncated [ 62.247167][ T5877] loop6: p235 start 150994944 is beyond EOD, truncated [ 62.254026][ T5877] loop6: p236 start 150994944 is beyond EOD, truncated [ 62.260880][ T5877] loop6: p237 start 150994944 is beyond EOD, truncated [ 62.268967][ T5877] loop6: p238 start 150994944 is beyond EOD, truncated [ 62.275862][ T5877] loop6: p239 start 150994944 is beyond EOD, truncated [ 62.282808][ T5877] loop6: p240 start 150994944 is beyond EOD, truncated [ 62.289744][ T5877] loop6: p241 start 150994944 is beyond EOD, truncated [ 62.296654][ T5877] loop6: p242 start 150994944 is beyond EOD, truncated [ 62.303523][ T5877] loop6: p243 start 150994944 is beyond EOD, truncated [ 62.310358][ T5877] loop6: p244 start 150994944 is beyond EOD, truncated [ 62.317235][ T5877] loop6: p245 start 150994944 is beyond EOD, truncated [ 62.324102][ T5877] loop6: p246 start 150994944 is beyond EOD, truncated [ 62.331004][ T5877] loop6: p247 start 150994944 is beyond EOD, truncated [ 62.337913][ T5877] loop6: p248 start 150994944 is beyond EOD, truncated [ 62.344798][ T5877] loop6: p249 start 150994944 is beyond EOD, truncated [ 62.351670][ T5877] loop6: p250 start 150994944 is beyond EOD, truncated [ 62.358584][ T5877] loop6: p251 start 150994944 is beyond EOD, truncated [ 62.365472][ T5877] loop6: p252 start 150994944 is beyond EOD, truncated [ 62.372849][ T5877] loop6: p253 start 150994944 is beyond EOD, truncated [ 62.380270][ T5877] loop6: p254 start 150994944 is beyond EOD, truncated [ 62.387198][ T5877] loop6: p255 start 150994944 is beyond EOD, truncated [ 62.425315][ T3002] loop6: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 62.430289][ T3002] loop6: p2 start 150994944 is beyond EOD, truncated [ 62.549616][ T3002] loop6: p5 start 150994944 is beyond EOD, truncated [ 62.556433][ T3002] loop6: p6 start 150994944 is beyond EOD, truncated [ 62.563210][ T3002] loop6: p7 start 150994944 is beyond EOD, truncated [ 62.569909][ T3002] loop6: p8 start 150994944 is beyond EOD, truncated [ 62.576704][ T3002] loop6: p9 start 150994944 is beyond EOD, truncated [ 62.583565][ T3002] loop6: p10 start 150994944 is beyond EOD, truncated [ 62.590334][ T3002] loop6: p11 start 150994944 is beyond EOD, truncated [ 62.597155][ T3002] loop6: p12 start 150994944 is beyond EOD, truncated [ 62.603961][ T3002] loop6: p13 start 150994944 is beyond EOD, truncated [ 62.605538][ T5990] No such timeout policy "syz1" [ 62.610809][ T3002] loop6: p14 start 150994944 is beyond EOD, truncated [ 62.610830][ T3002] loop6: p15 start 150994944 is beyond EOD, truncated [ 62.610845][ T3002] loop6: p16 start 150994944 is beyond EOD, truncated [ 62.610859][ T3002] loop6: p17 start 150994944 is beyond EOD, truncated [ 62.610881][ T3002] loop6: p18 start 150994944 is beyond EOD, truncated [ 62.610897][ T3002] loop6: p19 start 150994944 is beyond EOD, truncated [ 62.610914][ T3002] loop6: p20 start 150994944 is beyond EOD, truncated [ 62.610963][ T3002] loop6: p21 start 150994944 is beyond EOD, truncated [ 62.610980][ T3002] loop6: p22 start 150994944 is beyond EOD, truncated [ 62.610997][ T3002] loop6: p23 start 150994944 is beyond EOD, truncated [ 62.611094][ T3002] loop6: p24 start 150994944 is beyond EOD, truncated [ 62.611112][ T3002] loop6: p25 start 150994944 is beyond EOD, truncated [ 62.611130][ T3002] loop6: p26 start 150994944 is beyond EOD, truncated [ 62.611210][ T3002] loop6: p27 start 150994944 is beyond EOD, truncated [ 62.611227][ T3002] loop6: p28 start 150994944 is beyond EOD, [ 62.662709][ T5995] netlink: 'syz.3.804': attribute type 4 has an invalid length. [ 62.664321][ T3002] truncated [ 62.693111][ T5995] netlink: 'syz.3.804': attribute type 4 has an invalid length. [ 62.698291][ T3002] loop6: p29 start 150994944 is beyond EOD, truncated [ 62.698312][ T3002] loop6: p30 start 150994944 is beyond EOD, truncated [ 62.698329][ T3002] loop6: p31 start 150994944 is beyond EOD, truncated [ 62.756718][ T3002] loop6: p32 start 150994944 is beyond EOD, truncated [ 62.763498][ T3002] loop6: p33 start 150994944 is beyond EOD, truncated [ 62.770265][ T3002] loop6: p34 start 150994944 is beyond EOD, truncated [ 62.777164][ T3002] loop6: p35 start 150994944 is beyond EOD, truncated [ 62.783958][ T3002] loop6: p36 start 150994944 is beyond EOD, truncated [ 62.787194][ T3420] IPVS: starting estimator thread 0... [ 62.790729][ T3002] loop6: p37 start 150994944 is beyond EOD, truncated [ 62.790749][ T3002] loop6: p38 start 150994944 is beyond EOD, truncated [ 62.809789][ T3002] loop6: p39 start 150994944 is beyond EOD, truncated [ 62.816609][ T3002] loop6: p40 start 150994944 is beyond EOD, truncated [ 62.823406][ T3002] loop6: p41 start 150994944 is beyond EOD, truncated [ 62.830182][ T3002] loop6: p42 start 150994944 is beyond EOD, truncated [ 62.836983][ T3002] loop6: p43 start 150994944 is beyond EOD, truncated [ 62.843796][ T3002] loop6: p44 start 150994944 is beyond EOD, truncated [ 62.850562][ T3002] loop6: p45 start 150994944 is beyond EOD, truncated [ 62.857406][ T3002] loop6: p46 start 150994944 is beyond EOD, truncated [ 62.864230][ T3002] loop6: p47 start 150994944 is beyond EOD, truncated [ 62.870997][ T3002] loop6: p48 start 150994944 is beyond EOD, truncated [ 62.877817][ T3002] loop6: p49 start 150994944 is beyond EOD, truncated [ 62.884640][ T3002] loop6: p50 start 150994944 is beyond EOD, truncated [ 62.891492][ T3002] loop6: p51 start 150994944 is beyond EOD, truncated [ 62.891603][ T6005] IPVS: using max 2016 ests per chain, 100800 per kthread [ 62.898249][ T3002] loop6: p52 start 150994944 is beyond EOD, truncated [ 62.898267][ T3002] loop6: p53 start 150994944 is beyond EOD, truncated [ 62.918961][ T3002] loop6: p54 start 150994944 is beyond EOD, truncated [ 62.925764][ T3002] loop6: p55 start 150994944 is beyond EOD, truncated [ 62.932586][ T3002] loop6: p56 start 150994944 is beyond EOD, truncated [ 62.939352][ T3002] loop6: p57 start 150994944 is beyond EOD, truncated [ 62.946152][ T3002] loop6: p58 start 150994944 is beyond EOD, truncated [ 62.952944][ T3002] loop6: p59 start 150994944 is beyond EOD, truncated [ 62.959709][ T3002] loop6: p60 start 150994944 is beyond EOD, truncated [ 62.966513][ T3002] loop6: p61 start 150994944 is beyond EOD, truncated [ 62.973329][ T3002] loop6: p62 start 150994944 is beyond EOD, truncated [ 62.980099][ T3002] loop6: p63 start 150994944 is beyond EOD, truncated [ 62.986896][ T3002] loop6: p64 start 150994944 is beyond EOD, truncated [ 62.993721][ T3002] loop6: p65 start 150994944 is beyond EOD, truncated [ 63.000491][ T3002] loop6: p66 start 150994944 is beyond EOD, truncated [ 63.007291][ T3002] loop6: p67 start 150994944 is beyond EOD, truncated [ 63.014605][ T3002] loop6: p68 start 150994944 is beyond EOD, truncated [ 63.021111][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.021851][ T3002] loop6: p69 start 150994944 is beyond EOD, truncated [ 63.036271][ T3002] loop6: p70 start 150994944 is beyond EOD, truncated [ 63.039670][ T6014] __nla_validate_parse: 2 callbacks suppressed [ 63.039688][ T6014] netlink: 208 bytes leftover after parsing attributes in process `syz.4.809'. [ 63.043062][ T3002] loop6: p71 start 150994944 is beyond EOD, truncated [ 63.043082][ T3002] loop6: p72 start 150994944 is beyond EOD, truncated [ 63.043096][ T3002] loop6: p73 start 150994944 is beyond EOD, truncated [ 63.043135][ T3002] loop6: p74 start 150994944 is beyond EOD, truncated [ 63.043151][ T3002] loop6: p75 start 150994944 is beyond EOD, truncated [ 63.043165][ T3002] loop6: p76 start 150994944 is beyond EOD, truncated [ 63.043180][ T3002] loop6: p77 start 150994944 is beyond EOD, [ 63.049677][ T6014] netlink: 208 bytes leftover after parsing attributes in process `syz.4.809'. [ 63.059167][ T3002] truncated [ 63.059177][ T3002] loop6: p78 start 150994944 is beyond EOD, truncated [ 63.059194][ T3002] loop6: p79 start 150994944 is beyond EOD, truncated [ 63.131935][ T3002] loop6: p80 start 150994944 is beyond EOD, truncated [ 63.138712][ T3002] loop6: p81 start 150994944 is beyond EOD, truncated [ 63.145536][ T3002] loop6: p82 start 150994944 is beyond EOD, truncated [ 63.152341][ T3002] loop6: p83 start 150994944 is beyond EOD, truncated [ 63.159157][ T3002] loop6: p84 start 150994944 is beyond EOD, truncated [ 63.165956][ T3002] loop6: p85 start 150994944 is beyond EOD, truncated [ 63.172763][ T3002] loop6: p86 start 150994944 is beyond EOD, truncated [ 63.179645][ T3002] loop6: p87 start 150994944 is beyond EOD, truncated [ 63.186453][ T3002] loop6: p88 start 150994944 is beyond EOD, truncated [ 63.193349][ T3002] loop6: p89 start 150994944 is beyond EOD, truncated [ 63.200121][ T3002] loop6: p90 start 150994944 is beyond EOD, truncated [ 63.206989][ T3002] loop6: p91 start 150994944 is beyond EOD, truncated [ 63.213782][ T3002] loop6: p92 start 150994944 is beyond EOD, truncated [ 63.220549][ T3002] loop6: p93 start 150994944 is beyond EOD, truncated [ 63.227435][ T3002] loop6: p94 start 150994944 is beyond EOD, truncated [ 63.234240][ T3002] loop6: p95 start 150994944 is beyond EOD, truncated [ 63.241079][ T29] audit: type=1400 audit(1770027428.156:639): avc: denied { create } for pid=6016 comm="syz.7.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 63.241084][ T3002] loop6: p96 start 150994944 is beyond EOD, [ 63.248634][ T29] audit: type=1400 audit(1770027428.156:640): avc: denied { read } for pid=6016 comm="syz.7.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 63.260465][ T3002] truncated [ 63.260473][ T3002] loop6: p97 start 150994944 is beyond EOD, truncated [ 63.260490][ T3002] loop6: p98 start 150994944 is beyond EOD, truncated [ 63.260505][ T3002] loop6: p99 start 150994944 is beyond EOD, truncated [ 63.260521][ T3002] loop6: p100 start 150994944 is beyond EOD, truncated [ 63.260537][ T3002] loop6: p101 start 150994944 is beyond EOD, truncated [ 63.322946][ T3002] loop6: p102 start 150994944 is beyond EOD, truncated [ 63.329850][ T3002] loop6: p103 start 150994944 is beyond EOD, truncated [ 63.336785][ T3002] loop6: p104 start 150994944 is beyond EOD, truncated [ 63.343869][ T3002] loop6: p105 start 150994944 is beyond EOD, truncated [ 63.350849][ T3002] loop6: p106 start 150994944 is beyond EOD, truncated [ 63.350869][ T3002] loop6: p107 start 150994944 is beyond EOD, truncated [ 63.364681][ T3002] loop6: p108 start 150994944 is beyond EOD, truncated [ 63.371691][ T3002] loop6: p109 start 150994944 is beyond EOD, truncated [ 63.378551][ T3002] loop6: p110 start 150994944 is beyond EOD, truncated [ 63.385453][ T3002] loop6: p111 start 150994944 is beyond EOD, truncated [ 63.392324][ T3002] loop6: p112 start 150994944 is beyond EOD, truncated [ 63.399260][ T3002] loop6: p113 start 150994944 is beyond EOD, truncated [ 63.406214][ T3002] loop6: p114 start 150994944 is beyond EOD, truncated [ 63.413144][ T3002] loop6: p115 start 150994944 is beyond EOD, truncated [ 63.419994][ T3002] loop6: p116 start 150994944 is beyond EOD, truncated [ 63.426894][ T3002] loop6: p117 start 150994944 is beyond EOD, truncated [ 63.433842][ T3002] loop6: p118 start 150994944 is beyond EOD, truncated [ 63.440697][ T3002] loop6: p119 start 150994944 is beyond EOD, truncated [ 63.447603][ T3002] loop6: p120 start 150994944 is beyond EOD, truncated [ 63.454480][ T3002] loop6: p121 start 150994944 is beyond EOD, truncated [ 63.461414][ T3002] loop6: p122 start 150994944 is beyond EOD, truncated [ 63.468290][ T3002] loop6: p123 start 150994944 is beyond EOD, truncated [ 63.475208][ T3002] loop6: p124 start 150994944 is beyond EOD, truncated [ 63.482131][ T3002] loop6: p125 start 150994944 is beyond EOD, truncated [ 63.488983][ T3002] loop6: p126 start 150994944 is beyond EOD, truncated [ 63.495966][ T3002] loop6: p127 start 150994944 is beyond EOD, truncated [ 63.502938][ T3002] loop6: p128 start 150994944 is beyond EOD, truncated [ 63.509806][ T3002] loop6: p129 start 150994944 is beyond EOD, truncated [ 63.516761][ T3002] loop6: p130 start 150994944 is beyond EOD, truncated [ 63.523722][ T3002] loop6: p131 start 150994944 is beyond EOD, truncated [ 63.530651][ T3002] loop6: p132 start 150994944 is beyond EOD, truncated [ 63.537550][ T3002] loop6: p133 start 150994944 is beyond EOD, truncated [ 63.544508][ T3002] loop6: p134 start 150994944 is beyond EOD, truncated [ 63.551394][ T3002] loop6: p135 start 150994944 is beyond EOD, truncated [ 63.558240][ T3002] loop6: p136 start 150994944 is beyond EOD, truncated [ 63.565142][ T3002] loop6: p137 start 150994944 is beyond EOD, truncated [ 63.572107][ T3002] loop6: p138 start 150994944 is beyond EOD, truncated [ 63.578961][ T3002] loop6: p139 start 150994944 is beyond EOD, truncated [ 63.585874][ T3002] loop6: p140 start 150994944 is beyond EOD, truncated [ 63.592776][ T3002] loop6: p141 start 150994944 is beyond EOD, truncated [ 63.599695][ T3002] loop6: p142 start 150994944 is beyond EOD, truncated [ 63.606639][ T3002] loop6: p143 start 150994944 is beyond EOD, truncated [ 63.613531][ T3002] loop6: p144 start 150994944 is beyond EOD, truncated [ 63.620449][ T3002] loop6: p145 start 150994944 is beyond EOD, truncated [ 63.627362][ T3002] loop6: p146 start 150994944 is beyond EOD, truncated [ 63.634258][ T3002] loop6: p147 start 150994944 is beyond EOD, truncated [ 63.641220][ T3002] loop6: p148 start 150994944 is beyond EOD, truncated [ 63.648092][ T3002] loop6: p149 start 150994944 is beyond EOD, truncated [ 63.655169][ T3002] loop6: p150 start 150994944 is beyond EOD, truncated [ 63.662258][ T3002] loop6: p151 start 150994944 is beyond EOD, truncated [ 63.669148][ T3002] loop6: p152 start 150994944 is beyond EOD, truncated [ 63.676041][ T3002] loop6: p153 start 150994944 is beyond EOD, truncated [ 63.682927][ T3002] loop6: p154 start 150994944 is beyond EOD, truncated [ 63.689777][ T3002] loop6: p155 start 150994944 is beyond EOD, truncated [ 63.696684][ T3002] loop6: p156 start 150994944 is beyond EOD, truncated [ 63.703570][ T3002] loop6: p157 start 150994944 is beyond EOD, truncated [ 63.710419][ T3002] loop6: p158 start 150994944 is beyond EOD, truncated [ 63.717327][ T3002] loop6: p159 start 150994944 is beyond EOD, truncated [ 63.724210][ T3002] loop6: p160 start 150994944 is beyond EOD, truncated [ 63.731107][ T3002] loop6: p161 start 150994944 is beyond EOD, truncated [ 63.737961][ T3002] loop6: p162 start 150994944 is beyond EOD, truncated [ 63.744883][ T3002] loop6: p163 start 150994944 is beyond EOD, truncated [ 63.751768][ T3002] loop6: p164 start 150994944 is beyond EOD, truncated [ 63.758649][ T3002] loop6: p165 start 150994944 is beyond EOD, truncated [ 63.765575][ T3002] loop6: p166 start 150994944 is beyond EOD, truncated [ 63.772482][ T3002] loop6: p167 start 150994944 is beyond EOD, truncated [ 63.779335][ T3002] loop6: p168 start 150994944 is beyond EOD, truncated [ 63.786223][ T3002] loop6: p169 start 150994944 is beyond EOD, truncated [ 63.793093][ T3002] loop6: p170 start 150994944 is beyond EOD, truncated [ 63.799952][ T3002] loop6: p171 start 150994944 is beyond EOD, truncated [ 63.806857][ T3002] loop6: p172 start 150994944 is beyond EOD, truncated [ 63.813770][ T3002] loop6: p173 start 150994944 is beyond EOD, truncated [ 63.820624][ T3002] loop6: p174 start 150994944 is beyond EOD, truncated [ 63.827532][ T3002] loop6: p175 start 150994944 is beyond EOD, truncated [ 63.834430][ T3002] loop6: p176 start 150994944 is beyond EOD, truncated [ 63.841314][ T3002] loop6: p177 start 150994944 is beyond EOD, truncated [ 63.848164][ T3002] loop6: p178 start 150994944 is beyond EOD, truncated [ 63.855129][ T3002] loop6: p179 start 150994944 is beyond EOD, truncated [ 63.862036][ T3002] loop6: p180 start 150994944 is beyond EOD, truncated [ 63.868893][ T3002] loop6: p181 start 150994944 is beyond EOD, truncated [ 63.875781][ T3002] loop6: p182 start 150994944 is beyond EOD, truncated [ 63.882717][ T3002] loop6: p183 start 150994944 is beyond EOD, truncated [ 63.889573][ T3002] loop6: p184 start 150994944 is beyond EOD, truncated [ 63.896458][ T3002] loop6: p185 start 150994944 is beyond EOD, truncated [ 63.903406][ T3002] loop6: p186 start 150994944 is beyond EOD, truncated [ 63.910253][ T3002] loop6: p187 start 150994944 is beyond EOD, truncated [ 63.917190][ T3002] loop6: p188 start 150994944 is beyond EOD, truncated [ 63.924063][ T3002] loop6: p189 start 150994944 is beyond EOD, truncated [ 63.930915][ T3002] loop6: p190 start 150994944 is beyond EOD, truncated [ 63.937810][ T3002] loop6: p191 start 150994944 is beyond EOD, truncated [ 63.944693][ T3002] loop6: p192 start 150994944 is beyond EOD, truncated [ 63.951684][ T3002] loop6: p193 start 150994944 is beyond EOD, truncated [ 63.958536][ T3002] loop6: p194 start 150994944 is beyond EOD, truncated [ 63.965524][ T3002] loop6: p195 start 150994944 is beyond EOD, truncated [ 63.972401][ T3002] loop6: p196 start 150994944 is beyond EOD, truncated [ 63.979308][ T3002] loop6: p197 start 150994944 is beyond EOD, truncated [ 63.986258][ T3002] loop6: p198 start 150994944 is beyond EOD, truncated [ 63.993160][ T3002] loop6: p199 start 150994944 is beyond EOD, truncated [ 64.000020][ T3002] loop6: p200 start 150994944 is beyond EOD, truncated [ 64.006925][ T3002] loop6: p201 start 150994944 is beyond EOD, truncated [ 64.013830][ T3002] loop6: p202 start 150994944 is beyond EOD, truncated [ 64.020686][ T3002] loop6: p203 start 150994944 is beyond EOD, truncated [ 64.027588][ T3002] loop6: p204 start 150994944 is beyond EOD, truncated [ 64.034563][ T3002] loop6: p205 start 150994944 is beyond EOD, truncated [ 64.041454][ T3002] loop6: p206 start 150994944 is beyond EOD, truncated [ 64.048322][ T3002] loop6: p207 start 150994944 is beyond EOD, truncated [ 64.055225][ T3002] loop6: p208 start 150994944 is beyond EOD, truncated [ 64.062131][ T3002] loop6: p209 start 150994944 is beyond EOD, truncated [ 64.068980][ T3002] loop6: p210 start 150994944 is beyond EOD, truncated [ 64.075931][ T3002] loop6: p211 start 150994944 is beyond EOD, truncated [ 64.082810][ T3002] loop6: p212 start 150994944 is beyond EOD, truncated [ 64.089666][ T3002] loop6: p213 start 150994944 is beyond EOD, truncated [ 64.096564][ T3002] loop6: p214 start 150994944 is beyond EOD, truncated [ 64.103459][ T3002] loop6: p215 start 150994944 is beyond EOD, truncated [ 64.110379][ T3002] loop6: p216 start 150994944 is beyond EOD, truncated [ 64.117316][ T3002] loop6: p217 start 150994944 is beyond EOD, truncated [ 64.124201][ T3002] loop6: p218 start 150994944 is beyond EOD, truncated [ 64.131157][ T3002] loop6: p219 start 150994944 is beyond EOD, truncated [ 64.138018][ T3002] loop6: p220 start 150994944 is beyond EOD, truncated [ 64.144949][ T3002] loop6: p221 start 150994944 is beyond EOD, truncated [ 64.151902][ T3002] loop6: p222 start 150994944 is beyond EOD, truncated [ 64.158749][ T3002] loop6: p223 start 150994944 is beyond EOD, truncated [ 64.165643][ T3002] loop6: p224 start 150994944 is beyond EOD, truncated [ 64.172575][ T3002] loop6: p225 start 150994944 is beyond EOD, truncated [ 64.179440][ T3002] loop6: p226 start 150994944 is beyond EOD, truncated [ 64.186344][ T3002] loop6: p227 start 150994944 is beyond EOD, truncated [ 64.193225][ T3002] loop6: p228 start 150994944 is beyond EOD, truncated [ 64.200081][ T3002] loop6: p229 start 150994944 is beyond EOD, truncated [ 64.206973][ T3002] loop6: p230 start 150994944 is beyond EOD, truncated [ 64.213856][ T3002] loop6: p231 start 150994944 is beyond EOD, truncated [ 64.220797][ T3002] loop6: p232 start 150994944 is beyond EOD, truncated [ 64.227692][ T3002] loop6: p233 start 150994944 is beyond EOD, truncated [ 64.234603][ T3002] loop6: p234 start 150994944 is beyond EOD, truncated [ 64.241505][ T3002] loop6: p235 start 150994944 is beyond EOD, truncated [ 64.248371][ T3002] loop6: p236 start 150994944 is beyond EOD, truncated [ 64.255264][ T3002] loop6: p237 start 150994944 is beyond EOD, truncated [ 64.262495][ T3002] loop6: p238 start 150994944 is beyond EOD, truncated [ 64.269425][ T3002] loop6: p239 start 150994944 is beyond EOD, truncated [ 64.276577][ T3002] loop6: p240 start 150994944 is beyond EOD, truncated [ 64.283605][ T3002] loop6: p241 start 150994944 is beyond EOD, truncated [ 64.290535][ T3002] loop6: p242 start 150994944 is beyond EOD, truncated [ 64.297668][ T3002] loop6: p243 start 150994944 is beyond EOD, truncated [ 64.304822][ T3002] loop6: p244 start 150994944 is beyond EOD, truncated [ 64.311723][ T3002] loop6: p245 start 150994944 is beyond EOD, truncated [ 64.318598][ T3002] loop6: p246 start 150994944 is beyond EOD, truncated [ 64.325480][ T3002] loop6: p247 start 150994944 is beyond EOD, truncated [ 64.332359][ T3002] loop6: p248 start 150994944 is beyond EOD, truncated [ 64.339204][ T3002] loop6: p249 start 150994944 is beyond EOD, truncated [ 64.346137][ T3002] loop6: p250 start 150994944 is beyond EOD, truncated [ 64.353028][ T3002] loop6: p251 start 150994944 is beyond EOD, truncated [ 64.359909][ T3002] loop6: p252 start 150994944 is beyond EOD, truncated [ 64.366794][ T3002] loop6: p253 start 150994944 is beyond EOD, truncated [ 64.373730][ T3002] loop6: p254 start 150994944 is beyond EOD, truncated [ 64.380583][ T3002] loop6: p255 start 150994944 is beyond EOD, truncated [ 64.494512][ T6025] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 64.612896][ T4519] udevd[4519]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 64.629670][ T4514] udevd[4514]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 64.657586][ T6033] loop7: detected capacity change from 0 to 128 [ 64.751255][ T4514] udevd[4514]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 64.762171][ T4519] udevd[4519]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 64.786271][ T4514] udevd[4514]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 64.811447][ T4519] udevd[4519]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 64.973697][ T3468] bio_check_eod: 26 callbacks suppressed [ 64.973717][ T3468] kworker/u8:7: attempt to access beyond end of device [ 64.973717][ T3468] loop7: rw=1, sector=145, nr_sectors = 16 limit=128 [ 65.026981][ T3468] kworker/u8:7: attempt to access beyond end of device [ 65.026981][ T3468] loop7: rw=1, sector=169, nr_sectors = 8 limit=128 [ 65.067838][ T3468] kworker/u8:7: attempt to access beyond end of device [ 65.067838][ T3468] loop7: rw=1, sector=185, nr_sectors = 8 limit=128 [ 65.136928][ T3468] kworker/u8:7: attempt to access beyond end of device [ 65.136928][ T3468] loop7: rw=1, sector=201, nr_sectors = 8 limit=128 [ 65.161735][ T3468] kworker/u8:7: attempt to access beyond end of device [ 65.161735][ T3468] loop7: rw=1, sector=217, nr_sectors = 8 limit=128 [ 65.252449][ T3468] kworker/u8:7: attempt to access beyond end of device [ 65.252449][ T3468] loop7: rw=1, sector=233, nr_sectors = 8 limit=128 [ 65.333724][ T3468] kworker/u8:7: attempt to access beyond end of device [ 65.333724][ T3468] loop7: rw=1, sector=249, nr_sectors = 8 limit=128 [ 65.363682][ T3468] kworker/u8:7: attempt to access beyond end of device [ 65.363682][ T3468] loop7: rw=1, sector=265, nr_sectors = 8 limit=128 [ 65.391423][ T3468] kworker/u8:7: attempt to access beyond end of device [ 65.391423][ T3468] loop7: rw=1, sector=281, nr_sectors = 8 limit=128 [ 65.422695][ T3468] kworker/u8:7: attempt to access beyond end of device [ 65.422695][ T3468] loop7: rw=1, sector=297, nr_sectors = 8 limit=128 [ 65.470890][ T29] audit: type=1326 audit(1770027430.376:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.6.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe860d2aeb9 code=0x7ffc0000 [ 65.538929][ T29] audit: type=1326 audit(1770027430.386:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.6.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe860d2aeb9 code=0x7ffc0000 [ 65.562238][ T29] audit: type=1326 audit(1770027430.386:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.6.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fe860d2aeb9 code=0x7ffc0000 [ 65.586296][ T29] audit: type=1326 audit(1770027430.386:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.6.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe860d2aeb9 code=0x7ffc0000 [ 65.609814][ T29] audit: type=1326 audit(1770027430.386:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.6.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe860d2aeb9 code=0x7ffc0000 [ 65.633124][ T29] audit: type=1326 audit(1770027430.386:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.6.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fe860d2aeb9 code=0x7ffc0000 [ 65.906391][ T6115] netlink: 'syz.3.851': attribute type 8 has an invalid length. [ 65.914220][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.851'. [ 65.925895][ T6115] bond0: entered promiscuous mode [ 65.930948][ T6115] bond_slave_0: entered promiscuous mode [ 65.936813][ T6115] bond_slave_1: entered promiscuous mode [ 65.945014][ T6115] gretap0: entered promiscuous mode [ 65.951601][ T6115] debugfs: 'hsr1' already exists in 'hsr' [ 65.957361][ T6115] Cannot create hsr debugfs directory [ 65.962813][ T6115] hsr1: entered promiscuous mode [ 65.979785][ T6117] loop6: detected capacity change from 0 to 2048 [ 65.989931][ T6119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6119 comm=syz.3.853 [ 66.005470][ T6119] netlink: 'syz.3.853': attribute type 1 has an invalid length. [ 66.067210][ T6117] EXT4-fs mount: 6 callbacks suppressed [ 66.067226][ T6117] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.085884][ T6119] bond1: (slave bridge1): making interface the new active one [ 66.101526][ T6119] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 66.181227][ T4436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.375390][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 66.375405][ T29] audit: type=1400 audit(1770027431.276:661): avc: denied { read } for pid=6136 comm="syz.6.859" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.404620][ T29] audit: type=1400 audit(1770027431.276:662): avc: denied { open } for pid=6136 comm="syz.6.859" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.428575][ T29] audit: type=1326 audit(1770027431.286:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6132 comm="syz.3.857" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8fdae3aeb9 code=0x0 [ 67.010721][ T36] IPVS: starting estimator thread 0... [ 67.114864][ T6173] netlink: 212924 bytes leftover after parsing attributes in process `syz.6.874'. [ 67.142603][ T41] IPVS: stop unused estimator thread 0... [ 67.155265][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.7.877'. [ 67.164175][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.7.877'. [ 67.183472][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.7.877'. [ 67.192303][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.7.877'. [ 67.309428][ T6196] loop6: detected capacity change from 0 to 512 [ 67.317709][ T6196] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 67.329844][ T6196] EXT4-fs (loop6): 1 truncate cleaned up [ 67.336867][ T6196] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.393425][ T4436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.422931][ T29] audit: type=1400 audit(1770027432.326:664): avc: denied { name_connect } for pid=6206 comm="syz.6.884" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 67.529848][ T6223] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.537133][ T6223] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.798118][ T29] audit: type=1400 audit(1770027432.706:665): avc: denied { write } for pid=6244 comm="syz.6.902" path="socket:[13427]" dev="sockfs" ino=13427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 68.122620][ T6270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 68.156107][ T29] audit: type=1400 audit(1770027433.066:666): avc: denied { getopt } for pid=6269 comm="syz.3.913" laddr=172.20.20.11 lport=4 faddr=172.20.20.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.262590][ T6277] netlink: 76 bytes leftover after parsing attributes in process `syz.3.917'. [ 68.309863][ T6283] netlink: 'syz.3.918': attribute type 5 has an invalid length. [ 68.397361][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz.7.920'. [ 68.543756][ T6280] chnl_net:caif_netlink_parms(): no params data found [ 68.593918][ T6280] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.601141][ T6280] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.621612][ T6280] bridge_slave_0: entered allmulticast mode [ 68.628203][ T6280] bridge_slave_0: entered promiscuous mode [ 68.641992][ T6280] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.649086][ T6280] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.671547][ T6280] bridge_slave_1: entered allmulticast mode [ 68.678106][ T6280] bridge_slave_1: entered promiscuous mode [ 68.686246][ T29] audit: type=1400 audit(1770027433.606:667): avc: denied { write } for pid=6321 comm="syz.4.929" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 68.737973][ T6280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.802604][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.7.930'. [ 68.811518][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.7.930'. [ 68.825929][ T6333] can: request_module (can-proto-0) failed. [ 68.836769][ T6333] netlink: 16 bytes leftover after parsing attributes in process `syz.3.933'. [ 68.894610][ T6280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.939290][ T6344] netlink: 'syz.4.938': attribute type 10 has an invalid length. [ 68.960364][ T6280] team0: Port device team_slave_0 added [ 68.971662][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.6.937'. [ 68.990009][ T6280] team0: Port device team_slave_1 added [ 69.032806][ T29] audit: type=1400 audit(1770027433.946:668): avc: denied { accept } for pid=6349 comm="syz.7.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.043224][ T6280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.059424][ T6280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.085457][ T6280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.158529][ T6280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.165525][ T6280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.191542][ T6280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.257221][ T6280] hsr_slave_0: entered promiscuous mode [ 69.266192][ T6280] hsr_slave_1: entered promiscuous mode [ 69.301965][ T6280] debugfs: 'hsr0' already exists in 'hsr' [ 69.307759][ T6280] Cannot create hsr debugfs directory [ 69.314722][ T6369] netlink: 20 bytes leftover after parsing attributes in process `syz.7.947'. [ 69.429684][ T6380] loop4: detected capacity change from 0 to 128 [ 69.619378][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.955'. [ 69.628426][ T6390] netlink: 'syz.3.955': attribute type 12 has an invalid length. [ 69.716550][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.955'. [ 69.725523][ T6390] netlink: 'syz.3.955': attribute type 12 has an invalid length. [ 69.753834][ T6280] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 69.853219][ T6280] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 69.865339][ T6280] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 69.886597][ T6280] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 70.012660][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.961'. [ 70.290716][ T29] audit: type=1400 audit(1770027435.196:669): avc: denied { getopt } for pid=6427 comm="syz.6.970" lport=39182 faddr=2001:: fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 70.330036][ T6431] loop6: detected capacity change from 0 to 512 [ 70.336866][ T6431] EXT4-fs: Ignoring removed oldalloc option [ 70.343354][ T6431] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 70.354756][ T6431] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #11: comm syz.6.971: corrupted in-inode xattr: invalid ea_ino [ 70.368291][ T6431] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.971: couldn't read orphan inode 11 (err -117) [ 70.380768][ T6431] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.399758][ T29] audit: type=1400 audit(1770027435.316:670): avc: denied { write } for pid=6430 comm="syz.6.971" name="file3" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 70.433530][ T4436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.609051][ T6497] bridge0: port 3(ipvlan2) entered blocking state [ 71.615555][ T6497] bridge0: port 3(ipvlan2) entered disabled state [ 71.622214][ T6497] ipvlan2: entered allmulticast mode [ 71.627487][ T6497] bridge0: entered allmulticast mode [ 71.633398][ T6497] ipvlan2: left allmulticast mode [ 71.638431][ T6497] bridge0: left allmulticast mode [ 71.715799][ T6499] IPv6: sit2: Disabled Multicast RS [ 72.387664][ T6535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6535 comm=syz.7.1016 [ 72.400855][ T6535] netlink: 'syz.7.1016': attribute type 1 has an invalid length. [ 72.420620][ T6535] bond1: (slave bridge1): making interface the new active one [ 72.429143][ T6535] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 72.479671][ T6540] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.486846][ T6540] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.898650][ T6396] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 72.939928][ T6552] ipip0: entered promiscuous mode [ 72.966091][ T6280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.979714][ T6280] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.995977][ T2439] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.997182][ T6557] xt_hashlimit: size too large, truncated to 1048576 [ 73.003090][ T2439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.013299][ T2439] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.024125][ T2439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.061711][ T6280] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.072120][ T6280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.156956][ T6280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.304686][ T6280] veth0_vlan: entered promiscuous mode [ 73.311134][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 73.311147][ T29] audit: type=1400 audit(1770027438.216:675): avc: denied { map } for pid=6590 comm="syz.6.1029" path="socket:[14009]" dev="sockfs" ino=14009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.314106][ T6280] veth1_vlan: entered promiscuous mode [ 73.317219][ T29] audit: type=1400 audit(1770027438.216:676): avc: denied { accept } for pid=6590 comm="syz.6.1029" path="socket:[14009]" dev="sockfs" ino=14009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.349632][ T6280] veth0_macvtap: entered promiscuous mode [ 73.376752][ T29] audit: type=1400 audit(1770027438.286:677): avc: denied { connect } for pid=6590 comm="syz.6.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.405139][ T6280] veth1_macvtap: entered promiscuous mode [ 73.417847][ T6280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.430972][ T6280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.440269][ T6592] tipc: Started in network mode [ 73.445265][ T6592] tipc: Node identity 4, cluster identity 4711 [ 73.451561][ T6592] tipc: Node number set to 4 [ 73.462281][ T31] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.482839][ T31] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.507202][ T31] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.519966][ T29] audit: type=1400 audit(1770027438.436:678): avc: denied { mounton } for pid=6280 comm="syz-executor" path="/root/syzkaller.qRx6m6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 73.531840][ T6594] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.575491][ T6594] bridge_slave_1: left allmulticast mode [ 73.581190][ T6594] bridge_slave_1: left promiscuous mode [ 73.586997][ T6594] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.586988][ T29] audit: type=1400 audit(1770027438.476:679): avc: denied { mount } for pid=6280 comm="syz-executor" name="/" dev="gadgetfs" ino=4429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 73.627370][ T6594] bridge_slave_1: entered promiscuous mode [ 73.641752][ T6594] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 73.659558][ T31] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.678586][ T6605] netlink: 'syz.6.1036': attribute type 1 has an invalid length. [ 73.692619][ T29] audit: type=1400 audit(1770027438.596:680): avc: denied { setopt } for pid=6608 comm="syz.7.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 73.749931][ T6605] bond1: entered promiscuous mode [ 73.755051][ T6605] bond1: entered allmulticast mode [ 73.780202][ T6605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.049584][ T29] audit: type=1400 audit(1770027438.956:681): avc: denied { firmware_load } for pid=6643 comm="syz.6.1051" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 74.267889][ T29] audit: type=1400 audit(1770027439.176:682): avc: denied { unmount } for pid=6651 comm="syz.3.1054" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 74.358329][ T29] audit: type=1400 audit(1770027439.266:683): avc: denied { associate } for pid=6656 comm="syz.3.1054" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 74.499929][ T29] audit: type=1400 audit(1770027439.406:684): avc: denied { connect } for pid=6661 comm="syz.4.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 74.678231][ T6668] loop4: detected capacity change from 0 to 512 [ 74.700963][ T6668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.724145][ T6668] ext4 filesystem being mounted at /207/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.776439][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.212299][ T6724] __nla_validate_parse: 2 callbacks suppressed [ 75.212311][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1081'. [ 75.227351][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1081'. [ 75.237836][ T6724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.253002][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1082'. [ 75.387612][ T6753] tipc: Failed to remove unknown binding: 66,1,1/0:2921885556/2921885558 [ 75.396130][ T6753] tipc: Failed to remove unknown binding: 66,1,1/0:2921885556/2921885558 [ 75.476802][ T6760] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1095'. [ 75.563276][ T6772] loop8: detected capacity change from 0 to 128 [ 75.576749][ T6772] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.615053][ T6772] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.661125][ T6280] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.880116][ T6800] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1112'. [ 75.893272][ T6800] geneve2: entered promiscuous mode [ 75.994702][ T6808] loop8: detected capacity change from 0 to 764 [ 76.052284][ T6808] iso9660: Unknown parameter '0x000000000000000300000000000000000000017777777777777777777770x0000000000000000' [ 76.124960][ T6815] loop4: detected capacity change from 0 to 512 [ 76.134836][ T6815] EXT4-fs: Ignoring removed nobh option [ 76.153548][ T6815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.166324][ T6815] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.205228][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.369311][ T6833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.377870][ T6833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.583443][ T6842] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1128'. [ 76.672454][ T6862] loop8: detected capacity change from 0 to 512 [ 76.679262][ T6862] EXT4-fs: Ignoring removed bh option [ 76.706312][ T6862] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 76.716236][ T6862] EXT4-fs (loop8): 1 truncate cleaned up [ 76.722681][ T6862] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.750382][ T6280] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.826365][ T6881] netlink: 'syz.8.1144': attribute type 29 has an invalid length. [ 76.835568][ T6881] netlink: 'syz.8.1144': attribute type 29 has an invalid length. [ 76.845690][ T6881] netlink: 500 bytes leftover after parsing attributes in process `syz.8.1144'. [ 76.872593][ T6884] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1145'. [ 76.882279][ T6884] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1145'. [ 77.056984][ T6903] loop6: detected capacity change from 0 to 128 [ 77.154082][ T6903] bio_check_eod: 16 callbacks suppressed [ 77.154100][ T6903] syz.6.1153: attempt to access beyond end of device [ 77.154100][ T6903] loop6: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 77.173914][ T6903] syz.6.1153: attempt to access beyond end of device [ 77.173914][ T6903] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 77.187906][ T6903] syz.6.1153: attempt to access beyond end of device [ 77.187906][ T6903] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 77.202119][ T6903] syz.6.1153: attempt to access beyond end of device [ 77.202119][ T6903] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 77.216283][ T6903] syz.6.1153: attempt to access beyond end of device [ 77.216283][ T6903] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 77.232534][ T6903] syz.6.1153: attempt to access beyond end of device [ 77.232534][ T6903] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 77.255885][ T6903] syz.6.1153: attempt to access beyond end of device [ 77.255885][ T6903] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 77.290646][ T6903] syz.6.1153: attempt to access beyond end of device [ 77.290646][ T6903] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 77.331559][ T6903] syz.6.1153: attempt to access beyond end of device [ 77.331559][ T6903] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 77.355851][ T6903] syz.6.1153: attempt to access beyond end of device [ 77.355851][ T6903] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 77.619788][ T6925] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.779423][ T6932] syzkaller0: entered promiscuous mode [ 77.785123][ T6932] syzkaller0: entered allmulticast mode [ 77.795559][ T6925] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.845223][ T6925] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.925270][ T6925] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.994849][ T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.008318][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.033248][ T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.054429][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.127094][ T6959] loop6: detected capacity change from 0 to 2048 [ 78.175329][ T4519] Alternate GPT is invalid, using primary GPT. [ 78.181821][ T4519] loop6: p2 p3 p7 [ 78.200287][ T6959] Alternate GPT is invalid, using primary GPT. [ 78.206811][ T6959] loop6: p2 p3 p7 [ 78.282033][ T6969] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1180'. [ 78.303677][ T4517] udevd[4517]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 78.313818][ T4519] udevd[4519]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 78.314670][ T4514] udevd[4514]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 78.355566][ T4517] udevd[4517]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 78.356256][ T4514] udevd[4514]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 78.366783][ T4519] udevd[4519]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 78.405789][ T4517] udevd[4517]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 78.417287][ T4519] udevd[4519]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 78.428640][ T4514] udevd[4514]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 78.460736][ T6973] netlink: 'syz.6.1182': attribute type 4 has an invalid length. [ 78.468687][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 78.468700][ T29] audit: type=1400 audit(1770027443.376:697): avc: denied { connect } for pid=6974 comm="syz.8.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 78.495936][ T6978] loop8: detected capacity change from 0 to 1024 [ 78.507979][ T6973] netlink: 'syz.6.1182': attribute type 4 has an invalid length. [ 78.526464][ T6978] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.591201][ T10] IPVS: starting estimator thread 0... [ 78.681202][ T6988] IPVS: using max 1968 ests per chain, 98400 per kthread [ 78.760764][ T6280] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.012607][ T7002] netlink: 'syz.3.1194': attribute type 20 has an invalid length. [ 79.025010][ T7002] netlink: 'syz.3.1194': attribute type 20 has an invalid length. [ 79.113395][ T7010] netlink: zone id is out of range [ 79.119185][ T7010] netlink: zone id is out of range [ 79.125499][ T7010] netlink: zone id is out of range [ 79.144248][ T31] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.145875][ T7010] netlink: del zone limit has 8 unknown bytes [ 79.194677][ T31] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.244315][ T31] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.314178][ T31] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.326638][ T29] audit: type=1400 audit(1770027444.236:698): avc: denied { mount } for pid=7024 comm="syz.7.1203" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 79.425221][ T31] bridge_slave_1: left allmulticast mode [ 79.430911][ T31] bridge_slave_1: left promiscuous mode [ 79.436814][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.461207][ T31] bridge_slave_0: left allmulticast mode [ 79.466876][ T31] bridge_slave_0: left promiscuous mode [ 79.472721][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.578073][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.588823][ T29] audit: type=1400 audit(1770027444.496:699): avc: denied { mount } for pid=7061 comm="syz.6.1211" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 79.613570][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.625127][ T31] bond0 (unregistering): Released all slaves [ 79.648126][ T7065] loop6: detected capacity change from 0 to 1024 [ 79.651232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.683086][ T7065] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.698949][ T31] hsr_slave_0: left promiscuous mode [ 79.705541][ T29] audit: type=1400 audit(1770027444.606:700): avc: denied { write } for pid=7064 comm="syz.6.1212" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.727685][ T29] audit: type=1400 audit(1770027444.606:701): avc: denied { open } for pid=7064 comm="syz.6.1212" path="/171/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.750706][ T29] audit: type=1400 audit(1770027444.606:702): avc: denied { read } for pid=7064 comm="syz.6.1212" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.773168][ T31] hsr_slave_1: left promiscuous mode [ 79.779561][ T4436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.780587][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.796011][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.805741][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.813358][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.829926][ T31] veth1_macvtap: left promiscuous mode [ 79.836352][ T31] veth0_macvtap: left promiscuous mode [ 79.842060][ T31] veth1_vlan: left promiscuous mode [ 79.847931][ T31] veth0_vlan: left promiscuous mode [ 79.928871][ T31] team0 (unregistering): Port device team_slave_1 removed [ 79.938829][ T31] team0 (unregistering): Port device team_slave_0 removed [ 80.013961][ T7016] chnl_net:caif_netlink_parms(): no params data found [ 80.066980][ T7016] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.074105][ T7016] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.081847][ T7016] bridge_slave_0: entered allmulticast mode [ 80.088579][ T7016] bridge_slave_0: entered promiscuous mode [ 80.095975][ T7016] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.103193][ T7016] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.110727][ T7016] bridge_slave_1: entered allmulticast mode [ 80.117435][ T7016] bridge_slave_1: entered promiscuous mode [ 80.136149][ T7016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.146921][ T7016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.168137][ T7016] team0: Port device team_slave_0 added [ 80.174696][ T7016] team0: Port device team_slave_1 added [ 80.190994][ T7016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.198080][ T7016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.224083][ T7016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.243146][ T7016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.250179][ T7016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.276128][ T7016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.301986][ T7115] loop4: detected capacity change from 0 to 128 [ 80.312608][ T7115] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.329632][ T7115] ext4 filesystem being mounted at /232/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.340989][ T7016] hsr_slave_0: entered promiscuous mode [ 80.363360][ T29] audit: type=1400 audit(1770027445.276:703): avc: denied { setattr } for pid=7113 comm="syz.4.1215" path="/232/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.427801][ T29] audit: type=1400 audit(1770027445.326:704): avc: denied { ioctl } for pid=7113 comm="syz.4.1215" path="/232/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop4" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.474842][ T7016] hsr_slave_1: entered promiscuous mode [ 80.480805][ T7016] debugfs: 'hsr0' already exists in 'hsr' [ 80.486618][ T7016] Cannot create hsr debugfs directory [ 80.491794][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.644623][ T7136] __nla_validate_parse: 3 callbacks suppressed [ 80.644651][ T7136] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1219'. [ 80.668996][ T7016] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 80.698835][ T7016] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 80.726876][ T7141] loop4: detected capacity change from 0 to 128 [ 80.737478][ T7016] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 80.746748][ T7016] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 80.816232][ T7141] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.885561][ T7141] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.899410][ T7016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.959028][ T7016] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.991337][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.998533][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.037757][ T1836] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.044933][ T1836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.141602][ T29] audit: type=1326 audit(1770027446.036:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7161 comm="syz.4.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe4d5aeb9 code=0x7ffc0000 [ 81.164986][ T29] audit: type=1326 audit(1770027446.036:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7161 comm="syz.4.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fabe4d5aeb9 code=0x7ffc0000 [ 81.173686][ T7016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.471410][ T7016] veth0_vlan: entered promiscuous mode [ 81.485058][ T7016] veth1_vlan: entered promiscuous mode [ 81.514381][ T7016] veth0_macvtap: entered promiscuous mode [ 81.528266][ T7016] veth1_macvtap: entered promiscuous mode [ 81.552774][ T7016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.578766][ T7016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.658223][ T52] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.756664][ T52] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.766484][ T52] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.777047][ T52] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.093707][ T7222] loop4: detected capacity change from 0 to 2048 [ 82.114373][ T7222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.140144][ T7222] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 82.163357][ T7222] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 82.175742][ T7222] EXT4-fs (loop4): This should not happen!! Data will be lost [ 82.175742][ T7222] [ 82.185631][ T7222] EXT4-fs (loop4): Total free blocks count 0 [ 82.191725][ T7222] EXT4-fs (loop4): Free/Dirty block details [ 82.197666][ T7222] EXT4-fs (loop4): free_blocks=4096 [ 82.202913][ T7222] EXT4-fs (loop4): dirty_blocks=16 [ 82.208063][ T7222] EXT4-fs (loop4): Block reservation details [ 82.214166][ T7222] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 82.248648][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 82.837800][ T7238] loop9: detected capacity change from 0 to 2048 [ 82.859247][ T7238] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.882937][ T7238] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.908079][ T7238] syzkaller1: entered promiscuous mode [ 82.913611][ T7238] syzkaller1: entered allmulticast mode [ 83.539986][ T7277] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 83.539986][ T7277] The task syz.4.1262 (7277) triggered the difference, watch for misbehavior. [ 83.740578][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 83.740664][ T29] audit: type=1400 audit(1770027448.646:710): avc: denied { listen } for pid=7278 comm="syz.6.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.780809][ T29] audit: type=1400 audit(1770027448.686:711): avc: denied { accept } for pid=7278 comm="syz.6.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 84.375434][ T7308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7308 comm=syz.3.1274 [ 84.405096][ T7016] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.440770][ T7314] loop4: detected capacity change from 0 to 512 [ 84.463685][ T7314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.476778][ T7314] ext4 filesystem being mounted at /254/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.492187][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 84.520324][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.753729][ T29] audit: type=1326 audit(1770027449.666:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7335 comm="syz.9.1286" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce40a6aeb9 code=0x0 [ 84.956229][ T7349] VFS: Mount too revealing [ 85.264570][ T7362] gtp0: entered promiscuous mode [ 85.647887][ T29] audit: type=1326 audit(1770027450.556:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.9.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce40a6aeb9 code=0x7ffc0000 [ 85.671382][ T29] audit: type=1326 audit(1770027450.556:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.9.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fce40a6aeb9 code=0x7ffc0000 [ 85.695251][ T29] audit: type=1326 audit(1770027450.556:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.9.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce40a6aeb9 code=0x7ffc0000 [ 85.718657][ T29] audit: type=1326 audit(1770027450.556:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.9.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fce40a6aeb9 code=0x7ffc0000 [ 85.741846][ T29] audit: type=1326 audit(1770027450.556:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.9.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fce40a6aeb9 code=0x7ffc0000 [ 86.096470][ T29] audit: type=1326 audit(1770027450.686:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.9.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce40a6aeb9 code=0x7ffc0000 [ 86.119885][ T29] audit: type=1326 audit(1770027450.686:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.9.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce40a6aeb9 code=0x7ffc0000 [ 86.481634][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888130c32c00: rx timeout, send abort [ 86.535243][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1304'. [ 86.592436][ T7395] xt_hashlimit: size too large, truncated to 1048576 [ 86.981682][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888130c32a00: rx timeout, send abort [ 86.990042][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888130c32c00: abort rx timeout. Force session deactivation [ 87.490006][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888130c32a00: abort rx timeout. Force session deactivation [ 87.813753][ T7454] loop9: detected capacity change from 0 to 512 [ 87.891142][ T7454] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 88.230728][ T7454] EXT4-fs (loop9): 1 truncate cleaned up [ 88.241350][ T7454] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.747418][ T7016] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.875088][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 88.875104][ T29] audit: type=1326 audit(1770027453.786:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7465 comm="syz.9.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce40a6aeb9 code=0x7ffc0000 [ 88.988099][ T29] audit: type=1326 audit(1770027453.826:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7465 comm="syz.9.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce40a2b78e code=0x7ffc0000 [ 89.012073][ T29] audit: type=1326 audit(1770027453.826:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7465 comm="syz.9.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce40a6aeb9 code=0x7ffc0000 [ 89.035401][ T29] audit: type=1326 audit(1770027453.826:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7465 comm="syz.9.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce40a6aeb9 code=0x7ffc0000 [ 89.058732][ T29] audit: type=1326 audit(1770027453.836:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7465 comm="syz.9.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fce40a6aeb9 code=0x7ffc0000 [ 89.082202][ T29] audit: type=1326 audit(1770027453.836:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7465 comm="syz.9.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce40a6aeb9 code=0x7ffc0000 [ 89.105649][ T29] audit: type=1326 audit(1770027453.836:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7465 comm="syz.9.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce40a6aeb9 code=0x7ffc0000 [ 89.599389][ T7483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.760332][ T7483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.033761][ T7483] geneve2: left promiscuous mode [ 90.039445][ T7483] gtp0: left promiscuous mode [ 90.049848][ T7485] ipip1: entered promiscuous mode [ 90.060142][ T41] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.079705][ T41] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.100825][ T41] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.220781][ T7491] loop4: detected capacity change from 0 to 764 [ 90.237533][ T7494] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1344'. [ 90.241261][ T41] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.265941][ T7491] rock: directory entry would overflow storage [ 90.272203][ T7491] rock: sig=0x4654, size=5, remaining=4 [ 90.279029][ T29] audit: type=1400 audit(1770027455.196:729): avc: denied { mount } for pid=7490 comm="syz.4.1342" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 90.285603][ T7494] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.321619][ T29] audit: type=1400 audit(1770027455.236:730): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 90.439422][ T7494] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 90.494265][ T7513] sock: sock_set_timeout: `syz.4.1353' (pid 7513) tries to set negative timeout [ 90.540724][ T29] audit: type=1326 audit(1770027455.446:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.7.1357" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9de86aeb9 code=0x0 [ 90.624379][ T7530] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 90.923692][ T7546] netlink: 'syz.9.1367': attribute type 1 has an invalid length. [ 90.931581][ T7546] netlink: 'syz.9.1367': attribute type 4 has an invalid length. [ 90.939299][ T7546] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.1367'. [ 90.971632][ T7548] netlink: 'syz.3.1368': attribute type 1 has an invalid length. [ 91.021138][ T7548] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.045810][ T7553] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1369'. [ 91.057490][ T7552] bond2: (slave gretap1): making interface the new active one [ 91.077456][ T7552] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 91.475903][ T7583] sctp: [Deprecated]: syz.3.1379 (pid 7583) Use of int in max_burst socket option. [ 91.475903][ T7583] Use struct sctp_assoc_value instead [ 91.818766][ T7615] loop4: detected capacity change from 0 to 512 [ 91.839104][ T7615] EXT4-fs (loop4): orphan cleanup on readonly fs [ 91.863899][ T7615] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1389: bg 0: block 248: padding at end of block bitmap is not set [ 91.907241][ T7615] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1389: Failed to acquire dquot type 1 [ 91.919451][ T7615] EXT4-fs (loop4): 1 truncate cleaned up [ 91.926112][ T7615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.974082][ T7635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1395'. [ 91.984709][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.097483][ T7627] loop9: detected capacity change from 0 to 512 [ 92.199525][ T7627] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 92.240434][ T7627] EXT4-fs (loop9): Errors on filesystem, clearing orphan list. [ 92.264407][ T7627] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.308210][ T7627] EXT4-fs warning (device loop9): dx_probe:837: inode #2: comm syz.9.1393: Unimplemented hash flags: 0x0001 [ 92.322882][ T7627] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1393: Corrupt directory, running e2fsck is recommended [ 92.360822][ T7675] loop4: detected capacity change from 0 to 1024 [ 92.374587][ T7675] EXT4-fs: Ignoring removed nobh option [ 92.380181][ T7675] EXT4-fs: inline encryption not supported [ 92.427726][ T7675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.452462][ T7675] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1405: Allocating blocks 385-513 which overlap fs metadata [ 92.478460][ T7675] EXT4-fs (loop4): pa ffff888107ab51c0: logic 16, phys. 129, len 24 [ 92.486553][ T7675] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 92.654939][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.702269][ T7714] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 92.798723][ T3468] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.821233][ T3468] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.830026][ T3468] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.847640][ T3468] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.848644][ T7016] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.998946][ T7731] netlink: 'syz.4.1421': attribute type 2 has an invalid length. [ 93.083710][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1425'. [ 93.097670][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1425'. [ 93.309863][ T7156] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.330312][ T7156] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 93.348658][ T7768] loop6: detected capacity change from 0 to 4096 [ 93.355533][ T7768] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.362007][ T7768] EXT4-fs: test_dummy_encryption option not supported [ 93.921882][ T7797] netlink: 'syz.9.1446': attribute type 4 has an invalid length. [ 93.940715][ T7797] netlink: 'syz.9.1446': attribute type 4 has an invalid length. [ 94.143076][ T7816] netlink: 'syz.3.1455': attribute type 3 has an invalid length. [ 94.151563][ T7816] netlink: 'syz.3.1455': attribute type 3 has an invalid length. [ 94.201991][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 94.202007][ T29] audit: type=1326 audit(1770027459.116:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.4.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe4d5aeb9 code=0x7ffc0000 [ 94.234968][ T29] audit: type=1326 audit(1770027459.116:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.4.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fabe4d5aeb9 code=0x7ffc0000 [ 94.258342][ T29] audit: type=1400 audit(1770027459.116:740): avc: denied { watch_reads } for pid=7817 comm="syz.4.1456" path="/proc/671/task" dev="proc" ino=23632 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 94.281339][ T29] audit: type=1326 audit(1770027459.116:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.4.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe4d5aeb9 code=0x7ffc0000 [ 94.304763][ T29] audit: type=1326 audit(1770027459.116:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.4.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe4d5aeb9 code=0x7ffc0000 [ 94.328148][ T29] audit: type=1326 audit(1770027459.116:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.4.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fabe4d5aeb9 code=0x7ffc0000 [ 94.351413][ T29] audit: type=1326 audit(1770027459.116:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.4.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe4d5aeb9 code=0x7ffc0000 [ 94.374975][ T29] audit: type=1326 audit(1770027459.116:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.4.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabe4d5aeb9 code=0x7ffc0000 [ 94.398346][ T29] audit: type=1400 audit(1770027459.116:746): avc: denied { read } for pid=7819 comm="syz.7.1457" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.421938][ T7834] loop6: detected capacity change from 0 to 512 [ 94.428511][ T7834] EXT4-fs: Ignoring removed oldalloc option [ 94.448123][ T7834] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.1461: Parent and EA inode have the same ino 15 [ 94.464187][ T7834] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.1461: Parent and EA inode have the same ino 15 [ 94.495345][ T7834] EXT4-fs (loop6): 1 orphan inode deleted [ 94.501731][ T7834] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.535521][ T7843] uprobe: syz.9.1466:7843 failed to unregister, leaking uprobe [ 94.586046][ T29] audit: type=1400 audit(1770027459.496:747): avc: denied { override_creds } for pid=7850 comm="syz.9.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 94.776400][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1475'. [ 95.168133][ T7871] loop4: detected capacity change from 0 to 512 [ 95.189762][ T7886] netlink: 'syz.9.1482': attribute type 13 has an invalid length. [ 95.201386][ T4436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.254031][ T7871] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 95.292840][ T7871] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 95.316628][ T7871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.442187][ T7871] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.1476: Unimplemented hash flags: 0x0001 [ 95.456120][ T7871] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1476: Corrupt directory, running e2fsck is recommended [ 95.956455][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.992317][ T7921] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1494'. [ 96.127740][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1500'. [ 96.136680][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1500'. [ 96.171140][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1500'. [ 96.180049][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1500'. [ 96.273303][ T7156] kernel write not supported for file [eventfd] (pid: 7156 comm: kworker/0:6) [ 96.334458][ T7949] batadv_slave_1: entered promiscuous mode [ 96.369104][ T7949] batadv_slave_1: left promiscuous mode [ 96.386465][ T7955] netlink: 'syz.3.1509': attribute type 1 has an invalid length. [ 96.438693][ T7955] bond3: (slave geneve2): making interface the new active one [ 96.473048][ T7955] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 96.481764][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 96.490775][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 96.510070][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 96.522493][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 96.687611][ T7972] loop4: detected capacity change from 0 to 1024 [ 96.711471][ T7972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.761728][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.865742][ T7991] netlink: 'syz.4.1524': attribute type 12 has an invalid length. [ 96.873596][ T7991] netlink: 'syz.4.1524': attribute type 29 has an invalid length. [ 96.881429][ T7991] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1524'. [ 96.890519][ T7991] netlink: 'syz.4.1524': attribute type 2 has an invalid length. [ 97.408401][ T8013] __nla_validate_parse: 1 callbacks suppressed [ 97.408476][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1530'. [ 97.447035][ T8000] chnl_net:caif_netlink_parms(): no params data found [ 97.466882][ T8018] netlink: 'syz.3.1532': attribute type 2 has an invalid length. [ 97.474709][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1532'. [ 97.542417][ T8018] netlink: 'syz.3.1532': attribute type 2 has an invalid length. [ 97.550237][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1532'. [ 97.569166][ T12] bridge_slave_1: left allmulticast mode [ 97.575259][ T12] bridge_slave_1: left promiscuous mode [ 97.581019][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.621664][ T12] bridge_slave_0: left allmulticast mode [ 97.627474][ T12] bridge_slave_0: left promiscuous mode [ 97.633379][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.653901][ T8034] loop6: detected capacity change from 0 to 1024 [ 97.671061][ T12] ip6gretap0 (unregistering): left promiscuous mode [ 97.698153][ T12] gretap0 (unregistering): left promiscuous mode [ 97.718962][ T8034] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 97.751696][ T8034] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.815662][ T12] bond0 (unregistering): left promiscuous mode [ 97.821963][ T12] bond_slave_0: left promiscuous mode [ 97.827485][ T12] bond_slave_1: left promiscuous mode [ 97.843775][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.862728][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.881623][ T12] bond0 (unregistering): Released all slaves [ 97.894403][ T12] bond1 (unregistering): Released all slaves [ 97.930484][ T8000] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.937603][ T8000] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.965076][ T12] IPVS: stopping master sync thread 4626 ... [ 97.971286][ T8000] bridge_slave_0: entered allmulticast mode [ 97.979275][ T8000] bridge_slave_0: entered promiscuous mode [ 97.991973][ T8000] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.999046][ T8000] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.013230][ T8000] bridge_slave_1: entered allmulticast mode [ 98.020162][ T8000] bridge_slave_1: entered promiscuous mode [ 98.028619][ T12] hsr_slave_0: left promiscuous mode [ 98.034521][ T12] hsr_slave_1: left promiscuous mode [ 98.040256][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.048272][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.087852][ T12] team0 (unregistering): Port device team_slave_1 removed [ 98.099146][ T12] team0 (unregistering): Port device team_slave_0 removed [ 98.146599][ T8076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.155885][ T8076] team0: Failed to send port change of device bond1 via netlink (err -105) [ 98.164663][ T8076] team0: Failed to send options change via netlink (err -105) [ 98.172191][ T8076] team0: Port device bond1 added [ 98.195153][ T8000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.239764][ T8000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.265019][ T8000] team0: Port device team_slave_0 added [ 98.282332][ T8000] team0: Port device team_slave_1 added [ 98.309014][ T8000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.316096][ T8000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.342049][ T8000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.359263][ T8000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.366342][ T8000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.392342][ T8000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.423766][ T8000] hsr_slave_0: entered promiscuous mode [ 98.431563][ T8000] hsr_slave_1: entered promiscuous mode [ 98.437754][ T8000] debugfs: 'hsr0' already exists in 'hsr' [ 98.443525][ T8000] Cannot create hsr debugfs directory [ 98.517690][ T12] IPVS: stop unused estimator thread 0... [ 98.548913][ T52] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm kworker/u8:3: lblock 0 mapped to illegal pblock 0 (length 6) [ 98.563792][ T52] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 98.576180][ T52] EXT4-fs (loop6): This should not happen!! Data will be lost [ 98.576180][ T52] [ 98.601943][ T1836] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 98.635949][ T1836] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 98.648310][ T1836] EXT4-fs (loop6): This should not happen!! Data will be lost [ 98.648310][ T1836] [ 98.843478][ T4436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 98.910646][ T8000] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.928651][ T8000] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.943596][ T8000] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.973819][ T8000] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.999856][ T8155] syz_tun: entered allmulticast mode [ 99.006149][ T8152] syz_tun: left allmulticast mode [ 99.028719][ T8161] netlink: 'syz.9.1566': attribute type 13 has an invalid length. [ 99.036686][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1566'. [ 99.054753][ T52] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.065288][ T52] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.075586][ T8161] netlink: 'syz.9.1566': attribute type 13 has an invalid length. [ 99.083526][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1566'. [ 99.104122][ T52] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.127762][ T52] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.176182][ T8000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.208095][ T8000] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.228370][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.235530][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.251886][ T3468] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.258960][ T3468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.274792][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 99.274806][ T29] audit: type=1400 audit(1770027464.186:777): avc: denied { setopt } for pid=8183 comm="syz.9.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.297749][ T8000] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.311096][ T8000] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.338387][ T29] audit: type=1400 audit(1770027464.246:778): avc: denied { getopt } for pid=8188 comm="syz.6.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.416861][ T8000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.503456][ T29] audit: type=1400 audit(1770027464.416:779): avc: denied { getopt } for pid=8215 comm="syz.6.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.594287][ T8232] syz_tun: entered allmulticast mode [ 99.603234][ T8230] syz_tun: left allmulticast mode [ 99.651678][ T8000] veth0_vlan: entered promiscuous mode [ 99.674583][ T8000] veth1_vlan: entered promiscuous mode [ 99.713264][ T8000] veth0_macvtap: entered promiscuous mode [ 99.730481][ T8000] veth1_macvtap: entered promiscuous mode [ 99.748534][ T8000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.760649][ T8000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.781718][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.800754][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.809842][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.821629][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.924325][ T8259] loop6: detected capacity change from 0 to 512 [ 99.954401][ T8259] EXT4-fs: Ignoring removed i_version option [ 99.960788][ T8259] EXT4-fs: Ignoring removed bh option [ 99.975212][ T8259] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.028845][ T8259] ext4 filesystem being mounted at /231/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.076049][ T4436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.085622][ T29] audit: type=1326 audit(1770027464.966:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.3.1587" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fdae3aeb9 code=0x0 [ 100.257959][ T29] audit: type=1400 audit(1770027465.166:781): avc: denied { name_connect } for pid=8304 comm="syz.9.1589" dest=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=sctp_socket permissive=1 [ 100.925624][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1595'. [ 101.561924][ T29] audit: type=1400 audit(1770027466.456:782): avc: denied { ioctl } for pid=8340 comm="syz.4.1602" path="socket:[26212]" dev="sockfs" ino=26212 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.613049][ T29] audit: type=1400 audit(1770027466.486:783): avc: denied { ioctl } for pid=8340 comm="syz.4.1602" path="socket:[26212]" dev="sockfs" ino=26212 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.638167][ T29] audit: type=1326 audit(1770027466.506:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.3.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fdae3aeb9 code=0x7ffc0000 [ 101.661561][ T29] audit: type=1326 audit(1770027466.506:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.3.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fdae3aeb9 code=0x7ffc0000 [ 101.684959][ T29] audit: type=1326 audit(1770027466.506:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.3.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fdae3aeb9 code=0x7ffc0000 [ 101.807167][ T8358] geneve2: entered promiscuous mode [ 102.217317][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1620'. [ 102.231247][ T8380] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1620'. [ 102.416202][ T8397] netlink: 'syz.7.1627': attribute type 29 has an invalid length. [ 102.425082][ T8397] netlink: 'syz.7.1627': attribute type 29 has an invalid length. [ 102.433843][ T8397] netlink: 'syz.7.1627': attribute type 32 has an invalid length. [ 102.441692][ T8397] netlink: 500 bytes leftover after parsing attributes in process `syz.7.1627'. [ 102.906996][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1638'. [ 102.916091][ T8422] netlink: 'syz.3.1638': attribute type 5 has an invalid length. [ 102.923901][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1638'. [ 102.935580][ T8422] geneve3: entered promiscuous mode [ 102.940821][ T8422] geneve3: entered allmulticast mode [ 102.947839][ T41] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 65535 - 0 [ 102.957108][ T41] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 65535 - 0 [ 102.966490][ T41] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 65535 - 0 [ 102.975792][ T41] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 65535 - 0 [ 103.265365][ T8442] loop4: detected capacity change from 0 to 8192 [ 103.471587][ T8443] ================================================================== [ 103.479374][ T8453] ------------[ cut here ]------------ [ 103.479769][ T8443] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 103.485266][ T8453] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 103.492302][ T8443] [ 103.492315][ T8443] write to 0xffff88812440446a of 2 bytes by task 8442 on cpu 0: [ 103.492332][ T8443] fat16_ent_put+0x28/0x60 [ 103.516838][ T8453] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.6.1651/8453 [ 103.519121][ T8443] fat_ent_write+0x6c/0xe0 [ 103.519154][ T8443] fat_chain_add+0x16c/0x490 [ 103.519175][ T8443] fat_get_block+0x46c/0x5e0 [ 103.519194][ T8443] __block_write_begin_int+0x400/0xf90 [ 103.526934][ T8453] Modules linked in: [ 103.531207][ T8443] cont_write_begin+0x5fe/0x970 [ 103.531240][ T8443] fat_write_begin+0x4f/0xe0 [ 103.542260][ T8453] [ 103.546451][ T8443] generic_perform_write+0x183/0x490 [ 103.551067][ T8453] CPU: 0 UID: 0 PID: 8453 Comm: syz.6.1651 Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.555585][ T8443] __generic_file_write_iter+0x9e/0x120 [ 103.561035][ T8453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.564897][ T8443] generic_file_write_iter+0x8d/0x310 [ 103.569729][ T8453] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 103.574295][ T8443] vfs_write+0x5a6/0x9f0 [ 103.574315][ T8443] ksys_write+0xdc/0x1a0 [ 103.576628][ T8453] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 103.581904][ T8443] __x64_sys_write+0x40/0x50 [ 103.581927][ T8443] x64_sys_call+0x2847/0x3000 [ 103.591687][ T8453] RSP: 0018:ffffc900020c7388 EFLAGS: 00010246 [ 103.597134][ T8443] do_syscall_64+0xc0/0x2a0 [ 103.607214][ T8453] [ 103.612548][ T8443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.612571][ T8443] [ 103.612577][ T8443] read to 0xffff888124404400 of 512 bytes by task 8443 on cpu 1: [ 103.612592][ T8443] fat_mirror_bhs+0x1df/0x320 [ 103.612609][ T8443] fat_ent_write+0xd0/0xe0 [ 103.618850][ T8453] RAX: ffff888103839b10 RBX: 00000000ffffdfcc RCX: 00000000ffffdfcd [ 103.623077][ T8443] fat_chain_add+0x16c/0x490 [ 103.623109][ T8443] fat_get_block+0x46c/0x5e0 [ 103.627334][ T8453] RDX: ffffffff867f0c59 RSI: ffffffff866bba0b RDI: ffffffff86fb97b0 [ 103.647007][ T8443] __block_write_begin_int+0x400/0xf90 [ 103.647038][ T8443] cont_write_begin+0x5fe/0x970 [ 103.651654][ T8453] RBP: ffff88811a583270 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 103.656265][ T8443] fat_write_begin+0x4f/0xe0 [ 103.656289][ T8443] generic_perform_write+0x183/0x490 [ 103.656316][ T8443] __generic_file_write_iter+0x9e/0x120 [ 103.662376][ T8453] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88811a583230 [ 103.666837][ T8443] generic_file_write_iter+0x8d/0x310 [ 103.666866][ T8443] aio_write+0x2fe/0x430 [ 103.666889][ T8443] io_submit_one+0xbc1/0x1350 [ 103.666912][ T8443] __se_sys_io_submit+0xfb/0x280 [ 103.669223][ T8453] R13: 00000000ffffdfcc R14: ffff88811a58327c R15: ffff88811a583268 [ 103.675088][ T8443] __x64_sys_io_submit+0x43/0x50 [ 103.677415][ T8453] FS: 00007fe85f7876c0(0000) GS:ffff8882aeb57000(0000) knlGS:0000000000000000 [ 103.685103][ T8443] x64_sys_call+0x2e40/0x3000 [ 103.685131][ T8443] do_syscall_64+0xc0/0x2a0 [ 103.689796][ T8453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.694187][ T8443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.694211][ T8443] [ 103.702183][ T8453] CR2: 0000200000010000 CR3: 000000012d34a000 CR4: 00000000003506f0 [ 103.706716][ T8443] Reported by Kernel Concurrency Sanitizer on: [ 103.706730][ T8443] CPU: 1 UID: 0 PID: 8443 Comm: syz.4.1647 Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.711299][ T8453] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000 [ 103.719233][ T8443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.724689][ T8453] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 103.729490][ T8443] ================================================================== [ 103.737452][ T8453] Call Trace: [ 103.887322][ T8453] [ 103.890335][ T8453] reg_set_min_max+0x1c8/0x260 [ 103.895257][ T8453] check_cond_jmp_op+0x13bd/0x1a80 [ 103.900399][ T8453] do_check+0x440c/0x9060 [ 103.904871][ T8453] do_check_common+0xd0f/0x1630 [ 103.909742][ T8453] bpf_check+0x2f6d/0xc7e0 [ 103.914226][ T8453] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 103.920250][ T8453] ? alloc_pages_bulk_noprof+0x4a1/0x520 [ 103.925953][ T8453] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 103.931893][ T8453] ? pcpu_block_update+0x24e/0x3b0 [ 103.937032][ T8453] ? _find_next_zero_bit+0x64/0xa0 [ 103.942181][ T8453] ? pcpu_block_refresh_hint+0x157/0x170 [ 103.947912][ T8453] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 103.954018][ T8453] ? css_rstat_updated+0xbb/0x280 [ 103.959056][ T8453] ? mod_memcg_state+0x182/0x260 [ 103.964128][ T8453] ? __rcu_read_unlock+0x4e/0x70 [ 103.969229][ T8453] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 103.975468][ T8453] ? pcpu_alloc_noprof+0xb08/0x1010 [ 103.980771][ T8453] ? should_fail_ex+0x30/0x280 [ 103.985634][ T8453] ? __kmalloc_noprof+0x2a3/0x580 [ 103.990706][ T8453] ? security_bpf_prog_load+0x60/0x140 [ 103.996245][ T8453] ? selinux_bpf_prog_load+0xac/0xd0 [ 104.001563][ T8453] ? security_bpf_prog_load+0x9e/0x140 [ 104.007034][ T8453] bpf_prog_load+0xf76/0x1140 [ 104.011786][ T8453] ? security_bpf+0x2b/0x90 [ 104.016321][ T8453] __sys_bpf+0x469/0x7b0 [ 104.020621][ T8453] __x64_sys_bpf+0x41/0x50 [ 104.025102][ T8453] x64_sys_call+0x28e1/0x3000 [ 104.029798][ T8453] do_syscall_64+0xc0/0x2a0 [ 104.034347][ T8453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.040367][ T8453] RIP: 0033:0x7fe860d2aeb9 [ 104.044930][ T8453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.064604][ T8453] RSP: 002b:00007fe85f787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 104.073117][ T8453] RAX: ffffffffffffffda RBX: 00007fe860fa5fa0 RCX: 00007fe860d2aeb9 [ 104.081310][ T8453] RDX: 0000000000000049 RSI: 0000200000000140 RDI: 0000000000000005 [ 104.089289][ T8453] RBP: 00007fe860d98c1f R08: 0000000000000000 R09: 0000000000000000 [ 104.097317][ T8453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.105311][ T8453] R13: 00007fe860fa6038 R14: 00007fe860fa5fa0 R15: 00007fff5b4e3ea8 [ 104.113323][ T8453] [ 104.116347][ T8453] ---[ end trace 0000000000000000 ]---