last executing test programs: 9.738463701s ago: executing program 4 (id=4690): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x40000) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44814}, 0x2004c8c9) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) setns(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 8.007583846s ago: executing program 3 (id=4695): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x40000) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44814}, 0x2004c8c9) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) setns(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 7.204086754s ago: executing program 4 (id=4700): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) fcntl$setown(r1, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 6.96846717s ago: executing program 3 (id=4701): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x40000) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44814}, 0x2004c8c9) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) setns(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 6.188180924s ago: executing program 3 (id=4705): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) clock_adjtime(0x0, &(0x7f0000000340)={0xffff, 0x0, 0x0, 0x0, 0x6733, 0x401, 0x0, 0x0, 0xab5, 0x0, 0x3b9ac9ff, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfef, 0x0, 0x0, 0x1, 0xe52, 0x6}) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f00000010c0), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000240)=ANY=[], 0x40000) accept4$unix(r3, 0x0, 0x0, 0x80000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) 6.160122348s ago: executing program 0 (id=4706): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus/file0\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x4}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[], 0x438}, 0x0, 0x12f4c4729764eade, 0x1}) io_uring_enter(r4, 0x3516, 0xa000fe, 0x20, 0x0, 0x5a) socket(0x2d, 0x2, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) move_pages(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000002000/0x4000)=nil], &(0x7f0000000000)=[0x5, 0x4, 0x9], 0x0, 0x0) 5.025456055s ago: executing program 3 (id=4710): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus/file0\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x4}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") r0 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) clock_adjtime(0x0, &(0x7f0000000340)={0xffff, 0x0, 0x0, 0x0, 0x6733, 0x401, 0x0, 0x0, 0xab5, 0x0, 0x3b9ac9ff, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfef, 0x0, 0x0, 0x1, 0xe52, 0x6}) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f00000010c0), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) write$binfmt_elf64(r4, &(0x7f0000000240)=ANY=[], 0x40000) r5 = accept4$unix(r3, 0x0, 0x0, 0x80000) recvfrom$unix(r5, &(0x7f0000000140)=""/243, 0x40000, 0x40000000, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) connect$unix(0xffffffffffffffff, 0x0, 0x0) 3.340961958s ago: executing program 1 (id=4714): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x40d, 0x30bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8209}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_MIIMON={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$inet6(0xa, 0x5, 0x5) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000d10ffc)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x938e}, @in={0x2, 0x0, @multicast2}, @in={0x2, 0x4e21, @dev}], 0x3c) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) syz_mount_image$msdos(&(0x7f0000000280), &(0x7f0000000180)='./file0\x00', 0xa1c406, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74730000f5ff522c246d6173a594e5e0ee30303030010000000000400017c3d234e02f30303030302c6e6f646f742c6e66733d6e0973", @ANYRES32=0x0, @ANYRES8], 0x1, 0x2a0, &(0x7f0000001400)="$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") r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) pselect6(0x40, &(0x7f0000000000)={0x3, 0xe, 0x9, 0x7, 0x6, 0xdad, 0x40, 0x80}, &(0x7f0000000240)={0x9, 0x8, 0x100000001, 0x1ff, 0xc02, 0x7, 0x577cc497, 0x8000000000000001}, &(0x7f0000000380)={0x7, 0xfffffffffffffff9, 0x8000, 0xe, 0x0, 0xffffffffffff79e1, 0x110f8000, 0x3}, &(0x7f00000003c0)={0x0, 0x989680}, &(0x7f00000004c0)={&(0x7f0000000400)={[0x7fffffff]}, 0x8}) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r5, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000010c0)="fa", 0x1}], 0x1}}], 0x1, 0x4000000) syz_emit_ethernet(0x4f, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="e894ce", 0x3}], 0x1}}], 0x1, 0x4000000) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000500)='westwood', 0x8) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11129, 0x29020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x40040) 3.331214846s ago: executing program 3 (id=4715): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x62ea0000, 0x0, 0x80000}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xea5bc50b6199d77e) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x3238, 0x400, 0xffffffff, 0x1e5}, &(0x7f0000000140)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[], 0x438}, 0x0, 0x12f4c4729764eade, 0x1}) io_uring_enter(r4, 0x3516, 0xa000fe, 0x20, 0x0, 0x5a) socket(0x2d, 0x2, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) move_pages(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000002000/0x4000)=nil], &(0x7f0000000000)=[0x5, 0x4, 0x9], 0x0, 0x0) 2.717061391s ago: executing program 2 (id=4716): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x40000) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44814}, 0x2004c8c9) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) setns(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 2.436460098s ago: executing program 4 (id=4717): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x80000) pipe2(&(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.381894668s ago: executing program 0 (id=4718): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus/file0\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x4}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="13", 0x1}], 0x1}, 0x4051) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x6047) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r5], 0x30}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) 2.310892795s ago: executing program 1 (id=4721): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus/file0\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x4}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x3, 0x0, 0x4) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001000"/27], 0x50) ioctl$TIOCGPTPEER(r3, 0x5441, 0x8000000000000001) r4 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2bd, &(0x7f0000001c00)="$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") perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0xa4000061) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) read(r4, &(0x7f0000000a40)=""/139, 0x8b) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0xc5, 0x5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 2.149858994s ago: executing program 0 (id=4723): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}], 0x1, 0x48094) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x15, 0x2000000000000216, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r4, &(0x7f0000000600)=""/4099, 0xfdef, 0x110) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x109800, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) ioprio_set$uid(0x3, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000f5f0e86fe542e214767d67ba", @ANYRES16=r7, @ANYBLOB="796100000000fedbdf257e0000000c0099000700000017000000"], 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) socket$kcm(0x25, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x342, &(0x7f0000000680)="$eJzs3E1rK1UYwPEnk5cmKW2yEEVBetCNboY2uhaDtCAGLG0jtoIwbScaMiYlE1oixbYrt+LeleCidNldQf0C3bjTjRt33Qgu7ELvXOatnby1aW5K7m3/Pyhzcs55kjNzTsozQ2YuPv3uq1rF1itGS7S0kpiIyKVIXjQJxYKt5pVTEnUoiaD0UbFUWlxRaqm49k5BKTU79/PefiZoPJuS8/znF38X/jp/+fzViydrX1ZtVbVVvdFShtps/NkyNi1TbVftmq7UsmUatqmqddts+u0Nv71iNXZ22sqob89kd5qmbSuj3lY1s61aDdVqtpXxhVGtK13X1UxWcJvy8cqKURwxeGvMg8E9aTaLRlxEMj0t5eOJDAgAAExUd/6vuSn9nfL/t6f/+f311fUNmfXyf7ezn/8nZW//5I1fW9OfnM4G+f9Zql/+/+4f/nt15P9pERkl//9B7pD/92ZEj0v5ODnpIeBZzaV6qmIdr9z8Pxt8fz1Hn53MewXyfwAAAAAAAAAAAAAAAAAAAAAAXgSXjpNzHCcXbsO/61sIgtd4kAbN/5SIpN3Zd5j/h2x1fUPS3o177hxb3+6Wd8v+1m393/GJKfOSk/+89RDWieOEdx4pV15+sQ6C+IPdctxrKVakKpaYsiA5yXfHO87Sh6XFBeUL4q9uU8pG4wuSk5f6xxc644PPT8lbb0bidcnJb1vSEEu2vXV9Hf/NglIffFzqis94/QAAAAAAeAh0daXv+buuD2r3nzJSrHiXiQZcH/DPr+f7np8ncq8lJr33AAAAAAA8Dnb765phWWbzhkJGbu8zeiExXOdUV03yps7xyB4OO56UdyFDZFCfeJ8jpkm0j9taM34c8qh2FMIfUnQ0pYPK0Q5vuP9jm6/DaI0mQ0Qlugc/51aoO376UbAjVzXhZaPUgOMsy73vo3WshM6jmhzben7l+5/+Hd8X5L3TcAXc3vkoUpMces1blpnuXnVe4YbHQmtj+K8DAAAAYBKuk/6w5v1oc2wigwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4JG5l0f6dRUmvY8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8+JpAAAA///vv/C6") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socket(0x10, 0x803, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r9}}, 0x18) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r10, 0x8008f512, &(0x7f0000000180)) 2.058730737s ago: executing program 1 (id=4724): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus/file0\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x4}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") r0 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x3, 0x0, 0x4) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001000"/27], 0x50) ioctl$TIOCGPTPEER(r3, 0x5441, 0x8000000000000001) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000a40)=""/139, 0x8b) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0xc5, 0x5, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 1.245077234s ago: executing program 2 (id=4727): open_tree(0xffffffffffffff9c, 0x0, 0x88d01) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24040840) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3f6}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) r3 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1cb201, 0x0) ioctl$SNAPSHOT_FREE(r3, 0x3305) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) open_by_handle_at(r4, 0x0, 0x71d73e48) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) 1.238027513s ago: executing program 1 (id=4728): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x40000) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44814}, 0x2004c8c9) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) setns(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 1.103962918s ago: executing program 3 (id=4729): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) fcntl$setown(r2, 0x8, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.092739365s ago: executing program 2 (id=4730): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x80000) pipe2(&(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 978.912954ms ago: executing program 2 (id=4731): mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x200000, 0x0, 0xc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x3, 0x0, 0x4) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001000"/27], 0x50) ioctl$TIOCGPTPEER(r3, 0x5441, 0x8000000000000001) r4 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2bd, &(0x7f0000001c00)="$eJzs3LFrE2EYx/HHpDZpSpsIIiioD7roEto4OGqQFsSAUpuiDsLVXjTkTMpdqETEZhFX/47i6Cao/0AXcXF3K4Lg0kE86d2lvbRpm7ZJk9rvB8r75p73x71NruVJILfy4N3zUsFJF4yqROIqEZG6rIqk1maBE8EY8eaDElaXq8O/v5+///DRnWwuNzGlOpmdvpZR1dGLn168en/pS3V45sPox5gspx6v/Mr8WB5cPrvyd/pZ0dGio+VKVQ2drVSqxqxl6lzRKaVV71mm4ZhaLDum3VQvWJX5+Zoa5bmRxLxtOo4a5ZqWzJpWK1q1a2o8NYplTafTOpKQYywiMtDGsvzS1JSR3bbsRju6KXTdUKuDtp2tty7mlw5hTwAAoM/s3P/7vf72/X9uxh/30v+f2b3/F6H/75J606Nd+n8cVdfDV79tZ41E8PfbjP4fAAAAAAAAAAAAAAAAAAAAAICjYNV1k67rJtfG4JD3OCYicRFxg3qPt4kuCb/+buhnl9f/Ro+2iw4LfXEvLmK9Xcgv5P3Rr2cLUhRLTBmTpPzxroeAP5+8nZsYU09KPluLQX5xIR+VWCPfkGqVv3Bq3M9rc/6kJMLnz0hSTrc+f6ZlflCuXA7l05KUr0+kIpbMedf1Rv71uOqtu7lN+SFvHQAAAAAA/4O0rtvy/t2rewvisrXu50OfD7iuu7jT5wOb3l8PyLl2blEJAAAAAAAOzKm9LBmWZdr7mMRE5ADxzk9cV6T324hKfzwbzZObItIH2zisSVxE/CO6n/jP9XhbKbeNNQMi0vOnZQ+TXv9nAgAAANBpG03/HkLf3nRxRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD/t3g+ssX5LqVHYIR46XfTQf0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgj/wLAAD//7KDHOI=") perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xa4000061) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) read(r4, &(0x7f0000000a40)=""/139, 0x8b) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0xc5, 0x5, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 135.463426ms ago: executing program 4 (id=4732): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf4, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0xb, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x800000, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x8, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x6, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0x1000, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0xfffffffe, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x123dc9b, 0x0, 0x5, 0x0, &(0x7f0000000240)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x4200, 0x4) r3 = dup(r2) sendmmsg$inet(r3, &(0x7f000000d4c0)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000380)="9e3b074a8988e293861a347e432f5979dc366a208834c6d2a000bc8c67a48d77135afb45fe124800911b188a404dbb73455a75862204ea9a0fedea6988408c58e85ba4d1a4e491a6de5c60edba18f1b7ea7a08a5561df73ef826a79dfde7e6cc23a80962e8d56d361457f106add67ca5afe80d98e7c92de1156ebb", 0x7b}, {0x0}, {&(0x7f00000005c0)="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", 0x1c6}], 0x3}}], 0x1, 0x400d5) r4 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r4, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[], 0xff2e) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="12de000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') close(0x3) preadv(r7, &(0x7f0000000100)=[{&(0x7f0000000040)=""/178, 0xb2}], 0x1, 0x8, 0xffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r8, 0x1) recvmmsg(r8, &(0x7f0000005000), 0x0, 0x60, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) 135.045695ms ago: executing program 0 (id=4733): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x62ea0000, 0x0, 0x80000}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xea5bc50b6199d77e) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000004c0)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x18, 0x0, 0xcb, r4}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x3238, 0x400, 0xffffffff, 0x1e5}, &(0x7f0000000140)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[], 0x438}, 0x0, 0x12f4c4729764eade, 0x1}) io_uring_enter(r5, 0x3516, 0xa000fe, 0x20, 0x0, 0x5a) socket(0x2d, 0x2, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) move_pages(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000002000/0x4000)=nil], &(0x7f0000000000)=[0x5, 0x4, 0x9], 0x0, 0x0) 0s ago: executing program 2 (id=4734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="13", 0x1}], 0x1}, 0x4051) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x6047) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r5], 0x30}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): 596519][ T28] audit: type=1326 audit(2000000674.925:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21795 comm="syz.0.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 408.649587][T21801] bond7: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6) [ 408.693124][T21801] bond7 (unregistering): Released all slaves [ 408.729689][ T28] audit: type=1326 audit(2000000674.925:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21795 comm="syz.0.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 408.780553][ T28] audit: type=1326 audit(2000000674.925:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21795 comm="syz.0.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 408.857065][T21819] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 408.923218][T21823] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2761'. [ 408.958361][T21827] netlink: 'syz.3.2763': attribute type 19 has an invalid length. [ 409.101669][T21850] program syz.4.2772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 409.144202][T21858] loop4: detected capacity change from 0 to 512 [ 409.156628][T21858] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 409.180076][T21853] bond5: entered allmulticast mode [ 409.185538][T21858] System zones: 1-12 [ 409.192120][T21853] 8021q: adding VLAN 0 to HW filter on device bond5 [ 409.199281][T21858] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2773: error while reading EA inode 32 err=-116 [ 409.227075][T21858] loop4: lost filesystem error report for type 5 error -117 [ 409.227356][T21858] EXT4-fs (loop4): Remounting filesystem read-only [ 409.241319][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 409.241342][ C1] EXT4-fs (loop4): initial error at time 2000000675: ext4_xattr_inode_iget:446 [ 409.241367][ C1] EXT4-fs (loop4): last error at time 2000000675: ext4_xattr_inode_iget:446 [ 409.291662][T21858] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -30) [ 409.329682][T21858] EXT4-fs (loop4): 1 orphan inode deleted [ 409.336232][T21858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.377248][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.398820][T21885] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2774'. [ 409.420951][T21885] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 409.436636][T21885] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 409.820015][T21926] xt_hashlimit: max too large, truncated to 1048576 [ 409.988689][T21957] netlink: 'syz.2.2780': attribute type 27 has an invalid length. [ 410.010154][T21957] bond5: left allmulticast mode [ 410.031549][T21957] bond6: left allmulticast mode [ 410.068900][T21967] xt_addrtype: ipv6 does not support BROADCAST matching [ 410.126424][T21973] bond7: entered allmulticast mode [ 410.151629][T21973] 8021q: adding VLAN 0 to HW filter on device bond7 [ 410.199118][T21995] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2792'. [ 410.327332][T22017] loop2: detected capacity change from 0 to 128 [ 410.703088][T22068] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 410.714302][T22068] bond7 (unregistering): Released all slaves [ 411.285808][T22137] Q6`Ҙ speed is unknown, defaulting to 1000 [ 411.292844][T22137] xfrm0 speed is unknown, defaulting to 1000 [ 411.462082][T22148] bridge0: entered allmulticast mode [ 411.471486][T22148] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 412.174318][T22226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2830'. [ 412.319697][T22226] bond4: option lacp_active: invalid value (5) [ 412.326905][T22226] bond4 (unregistering): Released all slaves [ 412.418438][T22245] loop2: detected capacity change from 0 to 128 [ 412.425748][T22245] ext4: Unknown parameter 'smackfshat' [ 412.468114][T22245] netlink: 'syz.2.2828': attribute type 1 has an invalid length. [ 413.629616][ T7692] kernel read not supported for file /newroot/543 (pid: 7692 comm: kworker/0:10) [ 413.875324][T22406] netlink: 'syz.2.2855': attribute type 41 has an invalid length. [ 413.894102][T22410] netlink: 'syz.1.2858': attribute type 21 has an invalid length. [ 413.902079][T22410] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2858'. [ 414.010973][T22412] loop2: detected capacity change from 0 to 512 [ 414.202709][T22435] Q6`Ҙ speed is unknown, defaulting to 1000 [ 414.212838][T22412] EXT4-fs (loop2): 1 orphan inode deleted [ 414.224574][T22435] xfrm0 speed is unknown, defaulting to 1000 [ 414.233401][ T5042] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 414.258020][ T5042] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:26: Failed to release dquot type 1 [ 414.259635][T22412] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.283447][T22412] ext4 filesystem being mounted at /521/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.868341][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.061008][ T7692] kernel read not supported for file /newroot/656 (pid: 7692 comm: kworker/0:10) [ 415.151009][ T28] audit: type=1400 audit(2000000681.336:883): avc: denied { setattr } for pid=22531 comm="syz.4.2875" name="secretmem" dev="secretmem" ino=39576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 415.341003][T22559] xt_CT: No such helper "pptp" [ 415.371696][T22569] netlink: 'syz.4.2884': attribute type 1 has an invalid length. [ 415.493327][T22588] usb usb1: usbfs: process 22588 (syz.4.2889) did not claim interface 0 before use [ 415.970656][T22650] Cannot find del_set index 3 as target [ 416.854219][T22774] loop4: detected capacity change from 0 to 256 [ 416.864905][T22774] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 417.253599][T22819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2917'. [ 417.367075][T22826] bond7: entered allmulticast mode [ 417.377487][T22826] 8021q: adding VLAN 0 to HW filter on device bond7 [ 418.201262][T22862] 9p: Bad value for 'rfdno' [ 418.359030][T22879] Q6`Ҙ speed is unknown, defaulting to 1000 [ 418.366165][T22879] xfrm0 speed is unknown, defaulting to 1000 [ 418.495230][T22890] loop2: detected capacity change from 0 to 1024 [ 418.507343][T22890] EXT4-fs: Ignoring removed orlov option [ 418.574459][T22890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.625142][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.737946][T22920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2957'. [ 418.827802][T22927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2959'. [ 419.315326][T22965] rdma_op ffff88811c076580 conn xmit_rdma 0000000000000000 [ 419.427977][T22975] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2969'. [ 419.494914][T22982] tipc: Enabling of bearer rejected, failed to enable media [ 419.656065][T22989] loop4: detected capacity change from 0 to 512 [ 419.747804][T22989] EXT4-fs (loop4): 1 orphan inode deleted [ 419.760438][ T5353] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 419.785683][T22989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.799987][ T5353] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:30: Failed to release dquot type 1 [ 419.822809][ T5353] loop4: lost filesystem error report for type 5 error -117 [ 419.832297][T22989] ext4 filesystem being mounted at /571/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.946345][T23033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2972'. [ 419.988683][ T28] audit: type=1400 audit(2000000685.865:884): avc: denied { connect } for pid=23034 comm="syz.3.2973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 420.038038][ T28] audit: type=1400 audit(2000000685.912:885): avc: denied { getopt } for pid=23039 comm="syz.2.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 420.175135][T23057] Q6`Ҙ speed is unknown, defaulting to 1000 [ 420.206187][T23057] xfrm0 speed is unknown, defaulting to 1000 [ 420.501899][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.728505][T23113] loop4: detected capacity change from 0 to 1024 [ 420.783779][T23113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.835003][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.939269][ T28] audit: type=1326 audit(2000000686.754:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23130 comm="syz.4.2985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237e34c629 code=0x7ffc0000 [ 421.004865][ T28] audit: type=1326 audit(2000000686.754:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23130 comm="syz.4.2985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f237e34c629 code=0x7ffc0000 [ 421.129005][ T28] audit: type=1326 audit(2000000686.754:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23130 comm="syz.4.2985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237e34c629 code=0x7ffc0000 [ 421.187229][ T28] audit: type=1400 audit(2000000686.951:889): avc: denied { getattr } for pid=23163 comm="syz.2.2990" name="[io_uring]" dev="anon_inodefs" ino=40825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 421.259496][T23142] loop4: detected capacity change from 0 to 512 [ 421.358008][T23142] EXT4-fs (loop4): 1 orphan inode deleted [ 421.370528][T23142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.383543][ T4997] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 421.383601][ T4997] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 1 [ 421.383622][ T4997] loop4: lost filesystem error report for type 5 error -117 [ 421.408239][T23142] ext4 filesystem being mounted at /579/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.516753][T23188] Q6`Ҙ speed is unknown, defaulting to 1000 [ 421.545815][T23188] xfrm0 speed is unknown, defaulting to 1000 [ 422.119027][T23207] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3003'. [ 422.132364][T23207] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 422.210038][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.280283][T23209] loop2: detected capacity change from 0 to 2048 [ 422.400200][T23209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.413099][T23209] ext4 filesystem being mounted at /547/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.468988][T23215] netlink: 'syz.3.3006': attribute type 12 has an invalid length. [ 422.492579][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.552619][T23219] tipc: Enabling of bearer rejected, already enabled [ 422.588570][T23221] loop2: detected capacity change from 0 to 512 [ 422.608285][T23221] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 422.805823][T23230] loop4: detected capacity change from 0 to 512 [ 422.893576][T23230] EXT4-fs (loop4): 1 orphan inode deleted [ 422.902200][T23230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.923711][T23230] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.955411][ T4997] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 422.965490][ T4997] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 1 [ 423.466375][T23260] xt_connbytes: Forcing CT accounting to be enabled [ 423.468947][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.473324][T23260] Cannot find set identified by id 0 to match [ 423.530110][T23266] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 423.575762][T23272] Q6`Ҙ speed is unknown, defaulting to 1000 [ 423.582668][T23272] xfrm0 speed is unknown, defaulting to 1000 [ 423.644104][T23274] loop4: detected capacity change from 0 to 512 [ 423.680290][T23274] EXT4-fs (loop4): 1 orphan inode deleted [ 423.690625][T23274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.710660][ T5036] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 423.712995][T23274] ext4 filesystem being mounted at /588/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.720582][ T5036] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:23: Failed to release dquot type 1 [ 423.808015][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.907855][T23299] loop2: detected capacity change from 0 to 512 [ 423.913038][T23301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3041'. [ 423.932600][T23299] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 423.960548][T23299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.982127][T23291] loop4: detected capacity change from 0 to 512 [ 423.988949][T23299] ext4 filesystem being mounted at /553/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 424.041933][T23299] SELinux: Context system_u:object_r:initrc_var_run_t:s0 is not valid (left unmapped). [ 424.074168][T23299] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3040: bg 0: block 217: padding at end of block bitmap is not set [ 424.091808][T23291] EXT4-fs (loop4): 1 orphan inode deleted [ 424.104989][T23299] EXT4-fs (loop2): Remounting filesystem read-only [ 424.111768][ T5036] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:23: Failed to release dquot type 1 [ 424.123779][T23291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.124713][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.143012][ T5036] loop4: lost filesystem error report for type 5 error -117 [ 424.146728][T23291] ext4 filesystem being mounted at /589/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.245268][T23328] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3051'. [ 424.500790][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.564159][T23359] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3063'. [ 424.619068][T23370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3069'. [ 424.648494][T23375] netlink: 'syz.4.3072': attribute type 13 has an invalid length. [ 424.688214][T23375] gretap0: refused to change device tx_queue_len [ 424.698706][T23375] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 424.714595][ T3374] IPVS: starting estimator thread 0... [ 424.720466][ T7692] Q6`Ҙ speed is unknown, defaulting to 1000 [ 424.735088][T23377] loop2: detected capacity change from 0 to 512 [ 424.744962][ T7692] syz0: Port: 1 Link DOWN [ 424.796043][T23392] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3080'. [ 424.825923][T23377] EXT4-fs (loop2): 1 orphan inode deleted [ 424.846159][ T5032] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:21: Failed to release dquot type 1 [ 424.852106][T23377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.857917][T23381] IPVS: using max 2592 ests per chain, 129600 per kthread [ 424.882735][T23377] ext4 filesystem being mounted at /563/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.894478][T23403] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 424.927285][T23403] ext4 filesystem being mounted at /594/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.976595][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 425.027281][T23412] set_capacity_and_notify: 1 callbacks suppressed [ 425.027302][T23412] loop4: detected capacity change from 0 to 128 [ 425.206244][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 425.206260][ T28] audit: type=1400 audit(2000000690.751:894): avc: denied { setopt } for pid=23428 comm="syz.4.3093" lport=55891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 425.413311][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.032013][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 427.965155][T23540] loop4: detected capacity change from 0 to 2048 [ 428.215793][T23566] loop4: detected capacity change from 0 to 128 [ 428.285678][T23573] syz.4.3118: attempt to access beyond end of device [ 428.285678][T23573] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 428.326613][ T28] audit: type=1400 audit(2000000693.671:895): avc: denied { mount } for pid=23576 comm="syz.1.3124" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 428.377935][ T5013] kworker/u8:12: attempt to access beyond end of device [ 428.377935][ T5013] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 428.404798][ T5013] kworker/u8:12: attempt to access beyond end of device [ 428.404798][ T5013] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 428.444519][ T5013] kworker/u8:12: attempt to access beyond end of device [ 428.444519][ T5013] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 428.479062][ T5013] kworker/u8:12: attempt to access beyond end of device [ 428.479062][ T5013] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 428.500759][ T5013] kworker/u8:12: attempt to access beyond end of device [ 428.500759][ T5013] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 428.529391][ T5013] kworker/u8:12: attempt to access beyond end of device [ 428.529391][ T5013] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 428.564452][ T5013] kworker/u8:12: attempt to access beyond end of device [ 428.564452][ T5013] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 428.596216][ T5013] kworker/u8:12: attempt to access beyond end of device [ 428.596216][ T5013] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 428.610415][ T5013] kworker/u8:12: attempt to access beyond end of device [ 428.610415][ T5013] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 428.690658][T23591] loop4: detected capacity change from 0 to 512 [ 428.703650][T23591] EXT4-fs: Ignoring removed nobh option [ 428.729200][T23591] EXT4-fs (loop4): 1 orphan inode deleted [ 428.735519][T23591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.809026][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.867885][T23602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3131'. [ 428.947941][T23602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3131'. [ 428.984064][ T28] audit: type=1400 audit(2000000694.242:896): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 429.087004][T23615] Q6`Ҙ speed is unknown, defaulting to 1000 [ 429.141590][T23615] xfrm0 speed is unknown, defaulting to 1000 [ 429.379659][T23629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3140'. [ 429.431448][T23635] bond5: entered allmulticast mode [ 429.436890][T23635] 8021q: adding VLAN 0 to HW filter on device bond5 [ 429.751415][T23662] loop2: detected capacity change from 0 to 512 [ 429.845960][T23662] EXT4-fs (loop2): 1 orphan inode deleted [ 429.877979][ T4997] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 429.926629][T23662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.945113][ T4997] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 1 [ 429.967422][ T4997] loop2: lost filesystem error report for type 5 error -117 [ 429.971202][T23662] ext4 filesystem being mounted at /577/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.291473][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.403626][T23702] netlink: 'syz.0.3167': attribute type 3 has an invalid length. [ 430.561089][T23713] loop2: detected capacity change from 0 to 512 [ 430.597567][T23713] EXT4-fs (loop2): 1 orphan inode deleted [ 430.605915][T23713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.619314][ T5353] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 430.630216][T23713] ext4 filesystem being mounted at /586/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.638233][ T5353] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:30: Failed to release dquot type 1 [ 430.657997][T23719] bond8: entered allmulticast mode [ 430.663798][T23719] 8021q: adding VLAN 0 to HW filter on device bond8 [ 430.851167][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.944380][T23737] loop2: detected capacity change from 0 to 512 [ 431.009572][T23737] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 431.043039][T23737] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 431.051901][T23737] System zones: 1-2, 4-12, 8-8 [ 431.067646][T23737] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.3178: iget: bad i_size value: 38620345925642 [ 431.080637][T23737] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 431.086614][T23737] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3178: couldn't read orphan inode 15 (err -117) [ 431.095887][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 431.095909][ C1] EXT4-fs (loop2): initial error at time 2000000001: ext4_orphan_get:1391: inode 15 [ 431.095940][ C1] EXT4-fs (loop2): last error at time 2000000001: ext4_orphan_get:1391: inode 15 [ 431.135168][T23747] netlink: 'syz.1.3183': attribute type 1 has an invalid length. [ 431.138013][T23737] loop2: lost filesystem error report for type 5 error -117 [ 431.146420][T23737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.416926][ T28] audit: type=1400 audit(2000000001.702:897): avc: denied { ioctl } for pid=23756 comm="syz.1.3187" path="socket:[41743]" dev="sockfs" ino=41743 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 431.586122][ T5353] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:30: bg 0: block 5: invalid block bitmap [ 431.605176][ T5353] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 431.618080][ T5353] EXT4-fs (loop2): This should not happen!! Data will be lost [ 431.618080][ T5353] [ 431.634767][ T5353] EXT4-fs (loop2): Total free blocks count 0 [ 431.634788][T23770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3191'. [ 431.640783][ T5353] EXT4-fs (loop2): Free/Dirty block details [ 431.640801][ T5353] EXT4-fs (loop2): free_blocks=0 [ 431.661705][ T5353] EXT4-fs (loop2): dirty_blocks=16008 [ 431.670031][ T5353] EXT4-fs (loop2): Block reservation details [ 431.676437][ T5353] EXT4-fs (loop2): i_reserved_data_blocks=16008 [ 431.718864][ T5044] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 432.072109][T23833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3204'. [ 432.156710][T23844] netlink: 'syz.1.3205': attribute type 4 has an invalid length. [ 432.240969][T23855] loop2: detected capacity change from 0 to 512 [ 432.286471][T23855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.300586][T23855] ext4 filesystem being mounted at /590/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.321819][T23855] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 432.333470][T23855] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 432.351687][T23855] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.3208: Failed to acquire dquot type 1 [ 432.396091][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.865534][T23931] process '/newroot/649/file0' started with executable stack [ 433.159234][T23949] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 433.202752][T23949] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 433.331743][T23953] loop4: detected capacity change from 0 to 512 [ 433.403927][T23953] EXT4-fs (loop4): 1 orphan inode deleted [ 433.417566][ T4997] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 433.443414][T23953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.463816][ T4997] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 1 [ 433.508408][ T4997] loop4: lost filesystem error report for type 5 error -117 [ 433.510901][T23953] ext4 filesystem being mounted at /612/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.550278][ T28] audit: type=1326 audit(2000000003.704:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23968 comm="syz.1.3234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33aae1c629 code=0x0 [ 433.912482][T24001] loop2: detected capacity change from 0 to 8192 [ 433.929689][T24001] loop7: detected capacity change from 0 to 4 [ 433.936417][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.459167][T24049] Q6`Ҙ speed is unknown, defaulting to 1000 [ 434.465827][T24049] xfrm0 speed is unknown, defaulting to 1000 [ 434.533527][ T28] audit: type=1400 audit(2000000004.620:899): avc: denied { remount } for pid=24054 comm="syz.0.3263" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 435.064180][ T28] audit: type=1400 audit(2000000005.116:900): avc: denied { listen } for pid=24091 comm="syz.4.3280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 435.092817][T24095] netlink: 'syz.3.3282': attribute type 4 has an invalid length. [ 435.111158][ T28] audit: type=1326 audit(2000000005.163:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24089 comm="syz.2.3278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f780f57c629 code=0x0 [ 435.435522][T24113] tipc: Resetting bearer [ 435.601082][T24133] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3295'. [ 435.670430][T24139] Q6`Ҙ speed is unknown, defaulting to 1000 [ 435.679881][T24139] xfrm0 speed is unknown, defaulting to 1000 [ 436.032360][T24176] loop4: detected capacity change from 0 to 128 [ 436.190136][T24192] loop4: detected capacity change from 0 to 256 [ 436.224911][T24192] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 436.241434][T24192] FAT-fs (loop4): Filesystem has been set read-only [ 436.248521][T24192] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 436.257739][T24192] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 436.267530][T24192] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 436.276498][T24192] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 436.285717][T24199] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 436.307421][T24199] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 436.330771][T24199] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 436.339850][T24199] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 436.348962][T24192] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 436.600088][T24218] loop2: detected capacity change from 0 to 128 [ 436.952057][T24226] Q6`Ҙ speed is unknown, defaulting to 1000 [ 436.982349][T24226] xfrm0 speed is unknown, defaulting to 1000 [ 437.135892][T24237] loop4: detected capacity change from 0 to 256 [ 437.162400][T24237] FAT-fs (loop4): Directory bread(block 64) failed [ 437.178691][T24237] FAT-fs (loop4): Directory bread(block 65) failed [ 437.180061][T24239] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3339'. [ 437.185511][T24237] FAT-fs (loop4): Directory bread(block 66) failed [ 437.206701][T24237] FAT-fs (loop4): Directory bread(block 67) failed [ 437.213587][T24237] FAT-fs (loop4): Directory bread(block 68) failed [ 437.220163][T24237] FAT-fs (loop4): Directory bread(block 69) failed [ 437.226978][T24237] FAT-fs (loop4): Directory bread(block 70) failed [ 437.233541][T24237] FAT-fs (loop4): Directory bread(block 71) failed [ 437.244344][T24237] FAT-fs (loop4): Directory bread(block 72) failed [ 437.251187][T24237] FAT-fs (loop4): Directory bread(block 73) failed [ 437.265770][T24237] bio_check_eod: 102 callbacks suppressed [ 437.265788][T24237] syz.4.3338: attempt to access beyond end of device [ 437.265788][T24237] loop4: rw=8912896, sector=1192, nr_sectors = 4 limit=256 [ 437.287515][T24237] syz.4.3338: attempt to access beyond end of device [ 437.287515][T24237] loop4: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 437.303314][T24237] syz.4.3338: attempt to access beyond end of device [ 437.303314][T24237] loop4: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 437.317489][T24237] syz.4.3338: attempt to access beyond end of device [ 437.317489][T24237] loop4: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 437.331747][T24237] syz.4.3338: attempt to access beyond end of device [ 437.331747][T24237] loop4: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 437.360066][T24237] syz.4.3338: attempt to access beyond end of device [ 437.360066][T24237] loop4: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 437.375344][T24237] syz.4.3338: attempt to access beyond end of device [ 437.375344][T24237] loop4: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 437.389351][T24237] syz.4.3338: attempt to access beyond end of device [ 437.389351][T24237] loop4: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 437.413038][T24237] syz.4.3338: attempt to access beyond end of device [ 437.413038][T24237] loop4: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 437.427186][T24237] syz.4.3338: attempt to access beyond end of device [ 437.427186][T24237] loop4: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 437.689798][T24265] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3350'. [ 438.101119][T24294] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3363'. [ 438.124259][T24294] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 438.141979][T24294] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 438.199091][T24298] Q6`Ҙ speed is unknown, defaulting to 1000 [ 438.213414][T24298] xfrm0 speed is unknown, defaulting to 1000 [ 438.220240][T24302] syzkaller1: entered promiscuous mode [ 438.225718][T24302] syzkaller1: entered allmulticast mode [ 438.497315][T24341] loop2: detected capacity change from 0 to 512 [ 438.511958][T24341] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 438.525414][T24341] EXT4-fs (loop2): 1 truncate cleaned up [ 438.531998][T24341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.566658][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.702840][T24350] IPv4: Oversized IP packet from 127.202.26.0 [ 438.721514][ T28] audit: type=1326 audit(2000000008.549:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24351 comm="syz.0.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 438.745375][ T28] audit: type=1326 audit(2000000008.549:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24351 comm="syz.0.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 438.769055][ T28] audit: type=1326 audit(2000000008.549:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24351 comm="syz.0.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 438.792974][ T28] audit: type=1326 audit(2000000008.549:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24351 comm="syz.0.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 438.816451][ T28] audit: type=1326 audit(2000000008.549:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24351 comm="syz.0.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 438.839959][ T28] audit: type=1326 audit(2000000008.549:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24351 comm="syz.0.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 438.863759][ T28] audit: type=1326 audit(2000000008.549:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24351 comm="syz.0.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 438.889342][ T28] audit: type=1326 audit(2000000008.549:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24351 comm="syz.0.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 438.913464][ T28] audit: type=1326 audit(2000000008.549:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24351 comm="syz.0.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 438.937495][ T28] audit: type=1326 audit(2000000008.549:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24351 comm="syz.0.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 439.564855][T24424] loop2: detected capacity change from 0 to 1024 [ 439.589459][T24424] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 439.610593][T24424] System zones: 0-1, 3-36 [ 439.620287][T24424] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3395: bad orphan inode 134217728 [ 439.631512][T24424] loop2: lost filesystem error report for type 5 error -117 [ 439.632966][T24424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.700045][T24424] EXT4-fs (loop2): shut down requested (1) [ 439.728782][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.135286][T24493] bond4: entered allmulticast mode [ 440.153970][T24493] 8021q: adding VLAN 0 to HW filter on device bond4 [ 440.333609][T24526] loop4: detected capacity change from 0 to 128 [ 440.993568][T24600] 9p: Bad value for 'rfdno' [ 442.286780][T24790] loop4: detected capacity change from 0 to 256 [ 442.309362][T24790] FAT-fs (loop4): Directory bread(block 64) failed [ 442.316316][T24790] FAT-fs (loop4): Directory bread(block 65) failed [ 442.323145][T24790] FAT-fs (loop4): Directory bread(block 66) failed [ 442.329850][T24790] FAT-fs (loop4): Directory bread(block 67) failed [ 442.336606][T24790] FAT-fs (loop4): Directory bread(block 68) failed [ 442.343346][T24790] FAT-fs (loop4): Directory bread(block 69) failed [ 442.350157][T24790] FAT-fs (loop4): Directory bread(block 70) failed [ 442.356861][T24790] FAT-fs (loop4): Directory bread(block 71) failed [ 442.363563][T24790] FAT-fs (loop4): Directory bread(block 72) failed [ 442.370380][T24790] FAT-fs (loop4): Directory bread(block 73) failed [ 442.449804][T24797] netlink: 'syz.2.3436': attribute type 1 has an invalid length. [ 442.462667][T24797] netlink: 'syz.2.3436': attribute type 2 has an invalid length. [ 442.955679][T24841] loop4: detected capacity change from 0 to 128 [ 442.989442][T24841] bio_check_eod: 10989 callbacks suppressed [ 442.989544][T24841] syz.4.3451: attempt to access beyond end of device [ 442.989544][T24841] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 443.009699][T24841] syz.4.3451: attempt to access beyond end of device [ 443.009699][T24841] loop4: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 443.023819][T24841] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 443.040249][T24841] syz.4.3451: attempt to access beyond end of device [ 443.040249][T24841] loop4: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 443.054738][T24841] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 443.064379][T24841] syz.4.3451: attempt to access beyond end of device [ 443.064379][T24841] loop4: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 443.078714][T24841] Buffer I/O error on dev loop4, logical block 77, lost async page write [ 443.087418][T24841] syz.4.3451: attempt to access beyond end of device [ 443.087418][T24841] loop4: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 443.109226][T24841] Buffer I/O error on dev loop4, logical block 78, lost async page write [ 443.118034][T24841] syz.4.3451: attempt to access beyond end of device [ 443.118034][T24841] loop4: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 443.132057][T24841] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 443.140816][T24841] syz.4.3451: attempt to access beyond end of device [ 443.140816][T24841] loop4: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 443.162450][T24841] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 443.188463][T24840] syz.4.3451: attempt to access beyond end of device [ 443.188463][T24840] loop4: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 443.203472][T24840] Buffer I/O error on dev loop4, logical block 77, lost async page write [ 443.219530][T24840] syz.4.3451: attempt to access beyond end of device [ 443.219530][T24840] loop4: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 443.233910][T24840] Buffer I/O error on dev loop4, logical block 78, lost async page write [ 443.242694][T24840] syz.4.3451: attempt to access beyond end of device [ 443.242694][T24840] loop4: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 443.264036][T24840] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 443.272819][T24840] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 443.860086][T24953] bond10: entered allmulticast mode [ 443.865527][T24953] 8021q: adding VLAN 0 to HW filter on device bond10 [ 443.948586][T24963] loop2: detected capacity change from 0 to 512 [ 443.961037][T24963] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 443.969195][T24963] EXT4-fs (loop2): orphan cleanup on readonly fs [ 443.977303][T24963] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.3464: corrupted inode contents [ 443.989263][T24963] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 443.989454][T24963] EXT4-fs (loop2): Remounting filesystem read-only [ 443.998599][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 443.998622][ C1] EXT4-fs (loop2): initial error at time 2000000013: ext4_do_update_inode:5569: inode 16 [ 443.998664][ C1] EXT4-fs (loop2): last error at time 2000000013: ext4_do_update_inode:5569: inode 16 [ 444.031472][T24963] EXT4-fs (loop2): 1 truncate cleaned up [ 444.037245][ T5009] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 444.058839][ T5009] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 444.110838][ T5009] __quota_error: 35 callbacks suppressed [ 444.110855][ T5009] Quota error (device loop2): write_blk: dquota write failed [ 444.146003][ T5009] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 444.169547][ T5009] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 444.190528][ T5009] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 444.204537][ T5009] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 444.225854][T24963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 444.480639][T24982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3469'. [ 444.507113][T24982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3469'. [ 444.793617][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.901344][T25042] Q6`Ҙ speed is unknown, defaulting to 1000 [ 444.908092][T25042] xfrm0 speed is unknown, defaulting to 1000 [ 445.002361][T25060] loop2: detected capacity change from 0 to 764 [ 445.013696][T25060] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 445.059073][T25068] loop2: detected capacity change from 0 to 128 [ 445.066392][T25068] EXT4-fs: Ignoring removed nobh option [ 445.075527][T25068] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 445.088439][T25068] ext4 filesystem being mounted at /642/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 445.105111][T25068] ieee802154 phy1 wpan1: encryption failed: -90 [ 445.122929][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 445.174938][T25081] bond8: entered allmulticast mode [ 445.180560][T25081] 8021q: adding VLAN 0 to HW filter on device bond8 [ 445.311219][T25111] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 445.330305][T25113] loop2: detected capacity change from 0 to 128 [ 445.439829][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 445.561041][T25141] Q6`Ҙ speed is unknown, defaulting to 1000 [ 445.594418][T25141] xfrm0 speed is unknown, defaulting to 1000 [ 445.620079][T25153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3487'. [ 445.643065][T25153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3487'. [ 446.765682][ T28] audit: type=1400 audit(2000000016.060:945): avc: denied { override_creds } for pid=25312 comm="syz.0.3502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 447.337190][T25323] loop2: detected capacity change from 0 to 32768 [ 447.390483][ T3304] loop2: p1 p3 < > [ 447.403102][T25323] loop2: p1 p3 < > [ 447.582501][ T3521] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 447.887287][T25384] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 448.623778][T25483] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3532'. [ 449.338768][T25524] loop4: detected capacity change from 0 to 512 [ 449.371579][T25524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.406334][T25524] xt_hashlimit: size too large, truncated to 1048576 [ 449.453155][T25537] netlink: 'syz.0.3539': attribute type 4 has an invalid length. [ 449.768833][T25591] netlink: 399 bytes leftover after parsing attributes in process `syz.0.3545'. [ 449.795595][T25591] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 449.804396][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.939198][T25608] tipc: Enabling of bearer rejected, failed to enable media [ 449.995556][T25612] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3552'. [ 450.453993][T25644] loop4: detected capacity change from 0 to 512 [ 450.520080][T25644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.534150][T25644] ext4 filesystem being mounted at /644/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.567917][T25644] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 450.617803][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.810168][T25708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3563'. [ 450.941073][T25712] loop4: detected capacity change from 0 to 512 [ 451.009089][ T28] audit: type=1400 audit(2000000020.036:946): avc: denied { setopt } for pid=25740 comm="syz.2.3568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 451.091104][T25712] EXT4-fs (loop4): 1 orphan inode deleted [ 451.110507][ T5038] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 451.118821][T25712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.137597][T25712] ext4 filesystem being mounted at /648/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.141725][ T5038] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:24: Failed to release dquot type 1 [ 451.486951][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.234560][T25895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3579'. [ 452.326196][T25916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3581'. [ 452.486142][T25936] loop2: detected capacity change from 0 to 512 [ 452.520499][T25950] netlink: 'syz.3.3585': attribute type 9 has an invalid length. [ 452.528784][T25950] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3585'. [ 452.560969][T25936] EXT4-fs (loop2): 1 orphan inode deleted [ 452.569630][T25936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.582927][ T4997] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 452.595056][T25936] ext4 filesystem being mounted at /667/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.605906][ T4997] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 1 [ 452.903585][T26000] IPv6: NLM_F_CREATE should be specified when creating new route [ 452.913740][T26000] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 452.922492][T26000] IPv6: NLM_F_CREATE should be set when creating new route [ 452.964903][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.160070][T26052] netlink: 'syz.2.3598': attribute type 4 has an invalid length. [ 453.169553][T26052] netlink: 'syz.2.3598': attribute type 4 has an invalid length. [ 453.366784][T26072] Q6`Ҙ speed is unknown, defaulting to 1000 [ 453.376059][T26072] xfrm0 speed is unknown, defaulting to 1000 [ 453.509006][T26078] loop2: detected capacity change from 0 to 512 [ 453.556892][T26084] netlink: 'syz.0.3610': attribute type 3 has an invalid length. [ 453.570072][T26082] loop4: detected capacity change from 0 to 2048 [ 453.585091][T26078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.600521][T26078] ext4 filesystem being mounted at /677/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.621222][T26082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.641909][T26078] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 453.709869][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.015079][T26097] Q6`Ҙ speed is unknown, defaulting to 1000 [ 454.041181][T26097] xfrm0 speed is unknown, defaulting to 1000 [ 454.095609][T26100] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3613'. [ 454.105925][T26095] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3613'. [ 454.133110][T26099] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3613'. [ 454.363211][ T28] audit: type=1326 audit(2000000023.179:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26105 comm="syz.1.3617" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33aae1c629 code=0x0 [ 454.479073][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.590783][T26118] Q6`Ҙ speed is unknown, defaulting to 1000 [ 454.606617][T26118] xfrm0 speed is unknown, defaulting to 1000 [ 455.068130][T26137] loop4: detected capacity change from 0 to 512 [ 455.096689][T26137] EXT4-fs (loop4): 1 orphan inode deleted [ 455.105876][T26137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.118933][ T5034] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 455.126934][T26137] ext4 filesystem being mounted at /655/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.128816][ T5034] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:22: Failed to release dquot type 1 [ 455.389233][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.503199][T26161] syzkaller0: entered promiscuous mode [ 455.509027][T26161] syzkaller0: entered allmulticast mode [ 455.528399][T26163] netlink: 'syz.3.3633': attribute type 4 has an invalid length. [ 457.919112][ T28] audit: type=1400 audit(2000000026.490:948): avc: denied { name_bind } for pid=26236 comm="syz.4.3652" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 457.997393][ T28] audit: type=1400 audit(2000000026.527:949): avc: denied { name_connect } for pid=26236 comm="syz.4.3652" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 458.157607][T26241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3654'. [ 458.184500][T26241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3654'. [ 458.231783][T26241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3654'. [ 458.267743][T26241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3654'. [ 458.414975][T26241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3654'. [ 459.144047][T26278] loop4: detected capacity change from 0 to 512 [ 459.182235][T26278] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 459.229282][T26278] EXT4-fs (loop4): 1 truncate cleaned up [ 459.237879][T26278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.734069][T26340] Q6`Ҙ speed is unknown, defaulting to 1000 [ 459.785519][T26340] xfrm0 speed is unknown, defaulting to 1000 [ 459.820037][ T28] audit: type=1326 audit(2000000028.258:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26334 comm="syz.2.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 460.020703][ T28] audit: type=1326 audit(2000000028.258:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26334 comm="syz.2.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 460.172239][ T28] audit: type=1326 audit(2000000028.258:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26334 comm="syz.2.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 460.188768][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.205255][ T28] audit: type=1326 audit(2000000028.258:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26334 comm="syz.2.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f780f57c392 code=0x7ffc0000 [ 460.233375][ T28] audit: type=1326 audit(2000000028.258:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26334 comm="syz.2.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f780f57c392 code=0x7ffc0000 [ 460.257403][ T28] audit: type=1326 audit(2000000028.267:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26334 comm="syz.2.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 460.281216][ T28] audit: type=1326 audit(2000000028.267:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26334 comm="syz.2.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 460.289804][T26352] netlink: 'syz.4.3672': attribute type 4 has an invalid length. [ 460.304841][ T28] audit: type=1326 audit(2000000028.267:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26334 comm="syz.2.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 460.607042][T26356] syzkaller0: entered promiscuous mode [ 460.653320][T26356] syzkaller0: entered allmulticast mode [ 460.682078][T26352] netlink: 'syz.4.3672': attribute type 4 has an invalid length. [ 460.721839][ T7705] Q6`Ҙ speed is unknown, defaulting to 1000 [ 460.728389][ T7705] syz0: Port: 1 Link ACTIVE [ 461.061039][T26381] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 461.078823][T26381] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 461.354011][T26410] ip6_vti0 speed is unknown, defaulting to 1000 [ 461.361133][T26410] ip6_vti0 speed is unknown, defaulting to 1000 [ 461.368195][T26410] ip6_vti0 speed is unknown, defaulting to 1000 [ 461.406180][T26410] infiniband syz2: set down [ 461.410769][ T7694] ip6_vti0 speed is unknown, defaulting to 1000 [ 461.413544][T26410] infiniband syz2: added ip6_vti0 [ 461.454152][T26410] RDS/IB: syz2: added [ 461.458685][T26410] smc: adding ib device syz2 with port count 1 [ 461.465592][T26410] smc: ib device syz2 port 1 has no pnetid [ 461.472388][ T7694] ip6_vti0 speed is unknown, defaulting to 1000 [ 461.512133][T26410] ip6_vti0 speed is unknown, defaulting to 1000 [ 461.696585][T26410] ip6_vti0 speed is unknown, defaulting to 1000 [ 462.437843][T26410] ip6_vti0 speed is unknown, defaulting to 1000 [ 462.606744][T26410] ip6_vti0 speed is unknown, defaulting to 1000 [ 462.713742][T26410] ip6_vti0 speed is unknown, defaulting to 1000 [ 462.887383][T26480] tipc: Enabling of bearer rejected, failed to enable media [ 463.310049][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 463.310063][ T28] audit: type=1400 audit(2000000031.541:961): avc: denied { map } for pid=26536 comm="syz.4.3697" path="socket:[47404]" dev="sockfs" ino=47404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 463.340183][T26548] hub 8-0:1.0: USB hub found [ 463.340424][ T28] audit: type=1400 audit(2000000031.541:962): avc: denied { accept } for pid=26536 comm="syz.4.3697" path="socket:[47404]" dev="sockfs" ino=47404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 463.344999][T26548] hub 8-0:1.0: 8 ports detected [ 463.661256][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 463.751356][T26613] tipc: Enabling of bearer rejected, failed to enable media [ 464.820372][T26685] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3707'. [ 465.314883][T26698] Q6`Ҙ speed is unknown, defaulting to 1000 [ 465.331165][T26698] xfrm0 speed is unknown, defaulting to 1000 [ 465.379552][T26698] ip6_vti0 speed is unknown, defaulting to 1000 [ 465.466821][T26712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3712'. [ 465.484257][T26712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3712'. [ 465.496746][T26712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3712'. [ 465.519173][T26712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3712'. [ 465.536960][T26712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3712'. [ 467.889069][T26794] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 469.842315][T26824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3726'. [ 469.857102][T26824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3726'. [ 469.884516][T26831] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 469.885662][T26824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3726'. [ 469.891895][T26831] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 469.918476][T26824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3726'. [ 470.451418][T26899] bond8: entered allmulticast mode [ 470.456945][T26899] 8021q: adding VLAN 0 to HW filter on device bond8 [ 470.837063][ T28] audit: type=1400 audit(2000000038.585:963): avc: denied { view } for pid=26964 comm="syz.4.3736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 471.238127][T26984] Q6`Ҙ speed is unknown, defaulting to 1000 [ 471.244858][T26984] xfrm0 speed is unknown, defaulting to 1000 [ 471.285675][T26984] ip6_vti0 speed is unknown, defaulting to 1000 [ 471.700300][T26991] loop2: detected capacity change from 0 to 512 [ 471.787947][T26991] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 471.879494][T26991] EXT4-fs (loop2): 1 truncate cleaned up [ 471.898992][T26991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.019758][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.977926][T27148] __nla_validate_parse: 1 callbacks suppressed [ 473.977954][T27148] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3754'. [ 474.008176][T27148] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3754'. [ 474.018529][T27148] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3754'. [ 474.028484][T27148] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3754'. [ 474.832112][T27161] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3758'. [ 474.875015][T27162] Q6`Ҙ speed is unknown, defaulting to 1000 [ 474.904565][T27162] xfrm0 speed is unknown, defaulting to 1000 [ 475.033967][T27172] hub 8-0:1.0: USB hub found [ 475.039835][T27172] hub 8-0:1.0: 8 ports detected [ 475.180199][T27162] ip6_vti0 speed is unknown, defaulting to 1000 [ 476.460993][T27249] loop4: detected capacity change from 0 to 512 [ 476.476499][T27267] bond11: entered allmulticast mode [ 476.595229][T27267] 8021q: adding VLAN 0 to HW filter on device bond11 [ 476.852042][T27249] EXT4-fs (loop4): 1 orphan inode deleted [ 476.876461][ T4997] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 476.926118][T27249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.962508][ T4997] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 1 [ 476.975257][T27249] ext4 filesystem being mounted at /682/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.053739][T27285] syzkaller0: entered promiscuous mode [ 477.099320][T27285] syzkaller0: entered allmulticast mode [ 477.485734][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.542663][T27313] loop4: detected capacity change from 0 to 512 [ 477.581526][T27313] EXT4-fs: Ignoring removed i_version option [ 477.598071][T27313] EXT4-fs: Ignoring removed bh option [ 477.629055][T27314] loop2: detected capacity change from 0 to 128 [ 477.640717][T27314] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 477.702229][T27314] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 477.970579][T27313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.989042][T27313] ext4 filesystem being mounted at /683/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 478.011379][T27320] Q6`Ҙ speed is unknown, defaulting to 1000 [ 478.025722][T27320] xfrm0 speed is unknown, defaulting to 1000 [ 478.085616][T27320] ip6_vti0 speed is unknown, defaulting to 1000 [ 478.284831][T27335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3777'. [ 478.703860][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.715449][T27349] loop2: detected capacity change from 0 to 512 [ 478.727592][T27349] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 478.739605][T27349] EXT4-fs (loop2): 1 truncate cleaned up [ 478.755117][T27349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.854791][T27366] Q6`Ҙ speed is unknown, defaulting to 1000 [ 478.861722][T27366] xfrm0 speed is unknown, defaulting to 1000 [ 478.926642][T27366] ip6_vti0 speed is unknown, defaulting to 1000 [ 478.932760][T27378] Q6`Ҙ speed is unknown, defaulting to 1000 [ 478.947556][T27378] xfrm0 speed is unknown, defaulting to 1000 [ 478.964668][T27382] netlink: 'syz.1.3780': attribute type 32 has an invalid length. [ 478.979805][T27382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3780'. [ 479.014399][T27382] bond9: option coupled_control: invalid value (77) [ 479.028133][T27382] bond9 (unregistering): Released all slaves [ 479.048134][T27378] ip6_vti0 speed is unknown, defaulting to 1000 [ 479.252984][T27422] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3783'. [ 479.290988][T27422] 8021q: adding VLAN 0 to HW filter on device bond5 [ 479.311731][T27422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3783'. [ 479.323728][T27422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3783'. [ 481.852830][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.279121][T27449] Q6`Ҙ speed is unknown, defaulting to 1000 [ 482.376478][T27449] xfrm0 speed is unknown, defaulting to 1000 [ 482.588282][T27452] loop2: detected capacity change from 0 to 512 [ 482.955842][T27450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3788'. [ 482.974797][T27458] loop4: detected capacity change from 0 to 1024 [ 483.133452][T27458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.142249][T27449] ip6_vti0 speed is unknown, defaulting to 1000 [ 483.698563][T27458] Q6`Ҙ speed is unknown, defaulting to 1000 [ 483.719415][T27458] xfrm0 speed is unknown, defaulting to 1000 [ 484.302119][T27458] ip6_vti0 speed is unknown, defaulting to 1000 [ 484.901044][T27539] Q6`Ҙ speed is unknown, defaulting to 1000 [ 484.933777][T27539] xfrm0 speed is unknown, defaulting to 1000 [ 485.025395][T27539] ip6_vti0 speed is unknown, defaulting to 1000 [ 485.279912][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.418692][T27548] loop4: detected capacity change from 0 to 512 [ 485.429387][ T28] audit: type=1400 audit(2000000052.232:964): avc: denied { bind } for pid=27552 comm="syz.2.3805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 485.449590][ T28] audit: type=1400 audit(2000000052.232:965): avc: denied { write } for pid=27552 comm="syz.2.3805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 485.514740][T27548] EXT4-fs (loop4): 1 orphan inode deleted [ 485.523717][T27548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.537699][ T5011] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 485.548690][ T5011] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:11: Failed to release dquot type 1 [ 485.566337][T27548] ext4 filesystem being mounted at /689/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.274406][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.493075][T27588] netlink: 'syz.0.3815': attribute type 11 has an invalid length. [ 486.501106][T27588] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3815'. [ 486.580150][T27592] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 487.684668][T27619] netlink: 'syz.4.3826': attribute type 16 has an invalid length. [ 487.692559][T27619] netlink: 'syz.4.3826': attribute type 17 has an invalid length. [ 488.070055][T27595] Q6`Ҙ speed is unknown, defaulting to 1000 [ 488.090313][T27634] hub 8-0:1.0: USB hub found [ 488.095152][T27634] hub 8-0:1.0: 8 ports detected [ 488.130787][T27634] ------------[ cut here ]------------ [ 488.136461][T27634] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000) [ 488.156254][T27634] WARNING: kernel/bpf/verifier.c:2769 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.4.3831/27634 [ 488.167256][T27634] Modules linked in: [ 488.171164][T27634] CPU: 1 UID: 0 PID: 27634 Comm: syz.4.3831 Tainted: G W syzkaller #0 PREEMPT(full) [ 488.182179][T27634] Tainted: [W]=WARN [ 488.186109][T27634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 488.196202][T27634] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 488.202472][T27634] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 488.222356][T27634] RSP: 0018:ffffc90002edb368 EFLAGS: 00010246 [ 488.228581][T27634] RAX: ffff88812dd05cf8 RBX: 00000000ffffffff RCX: 0000000000000000 [ 488.236723][T27634] RDX: ffffffff868172a3 RSI: ffffffff8682b815 RDI: ffffffff871d3f90 [ 488.244777][T27634] RBP: ffff88812d229040 R08: 0000007800000000 R09: 0000000000000000 [ 488.252850][T27634] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88812d229000 [ 488.260867][T27634] R13: 0000000000000000 R14: ffff88812d22904c R15: ffff88812d229038 [ 488.268898][T27634] FS: 00007f237cd656c0(0000) GS:ffff8882ae9dd000(0000) knlGS:0000000000000000 [ 488.277949][T27634] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 488.284621][T27634] CR2: 0000000000000000 CR3: 000000016cbcc000 CR4: 00000000003506f0 [ 488.292653][T27634] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 488.300755][T27634] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 488.308767][T27634] Call Trace: [ 488.312044][T27634] [ 488.315155][T27634] reg_set_min_max+0x1f2/0x260 [ 488.320027][T27634] check_cond_jmp_op+0x13b0/0x1ab0 [ 488.325200][T27634] do_check+0x4a9b/0x9860 [ 488.329571][T27634] do_check_common+0xd0b/0x1630 [ 488.334530][T27634] bpf_check+0x2f78/0xcc30 [ 488.339020][T27634] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 488.345150][T27634] ? alloc_pages_bulk_noprof+0x4aa/0x530 [ 488.350846][T27634] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 488.356879][T27634] ? css_rstat_updated+0xbb/0x280 [ 488.361909][T27634] ? try_charge_memcg+0x215/0xa10 [ 488.367149][T27634] ? pcpu_block_refresh_hint+0x10b/0x170 [ 488.372830][T27634] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 488.378959][T27634] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 488.385307][T27634] ? css_rstat_updated+0xbb/0x280 [ 488.390433][T27634] ? mod_memcg_state+0x182/0x270 [ 488.395432][T27634] ? __rcu_read_unlock+0x4e/0x70 [ 488.400420][T27634] ? avc_has_perm_noaudit+0xab/0x130 [ 488.405724][T27634] ? avc_has_perm+0x101/0x190 [ 488.410440][T27634] ? selinux_bpf_prog_load+0x197/0x1c0 [ 488.415926][T27634] ? security_bpf_prog_load+0x9e/0x140 [ 488.421578][T27634] bpf_prog_load+0xf76/0x1140 [ 488.426280][T27634] ? security_bpf+0x2b/0x90 [ 488.430983][T27634] __sys_bpf+0x505/0x7e0 [ 488.435277][T27634] __x64_sys_bpf+0x41/0x50 [ 488.439800][T27634] x64_sys_call+0x10cb/0x3020 [ 488.444549][T27634] do_syscall_64+0x12c/0x370 [ 488.449259][T27634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.455315][T27634] RIP: 0033:0x7f237e34c629 [ 488.459763][T27634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.479861][T27634] RSP: 002b:00007f237cd65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 488.488330][T27634] RAX: ffffffffffffffda RBX: 00007f237e5c6180 RCX: 00007f237e34c629 [ 488.496417][T27634] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 488.504412][T27634] RBP: 00007f237e3e2b39 R08: 0000000000000000 R09: 0000000000000000 [ 488.512888][T27634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.520928][T27634] R13: 00007f237e5c6218 R14: 00007f237e5c6180 R15: 00007ffe64fcfa38 [ 488.529212][T27634] [ 488.532288][T27634] ---[ end trace 0000000000000000 ]--- [ 488.687162][T27595] xfrm0 speed is unknown, defaulting to 1000 [ 488.930913][T27595] ip6_vti0 speed is unknown, defaulting to 1000 [ 489.056109][T27649] Q6`Ҙ speed is unknown, defaulting to 1000 [ 489.066010][T27649] xfrm0 speed is unknown, defaulting to 1000 [ 489.140437][T27649] ip6_vti0 speed is unknown, defaulting to 1000 [ 489.455734][T27667] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3844'. [ 490.772799][T27720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3847'. [ 490.877961][T27732] bond6: entered promiscuous mode [ 490.883119][T27732] bond6: entered allmulticast mode [ 490.888438][T27732] 8021q: adding VLAN 0 to HW filter on device bond6 [ 490.888867][T27720] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3847'. [ 490.896336][T27732] A link change request failed with some changes committed already. Interface bond6 may have been left with an inconsistent configuration, please check. [ 491.043566][T27738] loop4: detected capacity change from 0 to 1024 [ 491.050356][T27738] EXT4-fs: test_dummy_encryption option not supported [ 493.772382][T27765] : port 2(gretap0) entered blocking state [ 493.810717][T27765] : port 2(gretap0) entered disabled state [ 493.829486][T27765] gretap0: entered allmulticast mode [ 493.853520][T27765] gretap0: entered promiscuous mode [ 494.043182][T27725] syz.1.3848 (27725) used greatest stack depth: 5720 bytes left [ 494.226904][T27779] Q6`Ҙ speed is unknown, defaulting to 1000 [ 494.259919][T27779] xfrm0 speed is unknown, defaulting to 1000 [ 494.285139][T27781] netlink: 'syz.3.3863': attribute type 32 has an invalid length. [ 494.335029][T27781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3863'. [ 494.554014][T27781] bond12: option coupled_control: invalid value (77) [ 494.620418][T27781] bond12 (unregistering): Released all slaves [ 494.795694][T27779] ip6_vti0 speed is unknown, defaulting to 1000 [ 494.831292][T27757] Q6`Ҙ speed is unknown, defaulting to 1000 [ 494.853790][T27757] xfrm0 speed is unknown, defaulting to 1000 [ 494.994109][T27757] ip6_vti0 speed is unknown, defaulting to 1000 [ 498.049453][T28039] netlink: 'syz.3.3905': attribute type 16 has an invalid length. [ 498.087296][T28039] netlink: 'syz.3.3905': attribute type 17 has an invalid length. [ 498.140335][T28050] netlink: 'syz.2.3907': attribute type 16 has an invalid length. [ 498.148468][T28050] netlink: 'syz.2.3907': attribute type 17 has an invalid length. [ 498.977552][T28057] Set syz1 is full, maxelem 65536 reached [ 498.997480][T28082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3916'. [ 499.863457][T28125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3921'. [ 500.550437][T28171] netlink: 'syz.3.3928': attribute type 16 has an invalid length. [ 500.605836][T28174] netlink: 'syz.4.3929': attribute type 16 has an invalid length. [ 500.626634][T28171] netlink: 'syz.3.3928': attribute type 17 has an invalid length. [ 500.645888][T28174] netlink: 'syz.4.3929': attribute type 17 has an invalid length. [ 501.137719][T28194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3933'. [ 502.665888][T28282] bond6: entered allmulticast mode [ 502.671934][T28282] 8021q: adding VLAN 0 to HW filter on device bond6 [ 503.073772][T28309] netlink: 'syz.2.3951': attribute type 16 has an invalid length. [ 503.084170][T28309] netlink: 'syz.2.3951': attribute type 17 has an invalid length. [ 504.070673][T28382] loop4: detected capacity change from 0 to 512 [ 504.143096][T28382] EXT4-fs (loop4): 1 orphan inode deleted [ 504.155495][T28382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.174010][ T50] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 504.185019][ T50] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:3: Failed to release dquot type 1 [ 504.197010][ T50] loop4: lost filesystem error report for type 5 error -117 [ 504.198010][T28382] ext4 filesystem being mounted at /715/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.647019][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.669351][T28477] loop4: detected capacity change from 0 to 128 [ 508.943949][T28883] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4035'. [ 508.972069][T28883] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 508.987347][T28883] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 509.450197][T28952] netlink: 'syz.3.4047': attribute type 16 has an invalid length. [ 509.469931][T28952] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4047'. [ 509.827125][T28970] loop4: detected capacity change from 0 to 512 [ 509.872639][T28970] EXT4-fs (loop4): 1 orphan inode deleted [ 509.887720][T28970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.900883][ T50] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 509.911452][T28970] ext4 filesystem being mounted at /728/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.914047][ T50] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:3: Failed to release dquot type 1 [ 510.265436][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.516760][T29205] loop4: detected capacity change from 0 to 128 [ 512.530090][T29205] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 512.546039][T29205] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 513.339404][T29222] netlink: 'syz.3.4081': attribute type 16 has an invalid length. [ 513.347415][T29222] netlink: 'syz.3.4081': attribute type 17 has an invalid length. [ 515.636779][T29282] bond9: entered allmulticast mode [ 515.644220][T29282] 8021q: adding VLAN 0 to HW filter on device bond9 [ 516.897265][T29315] Q6`Ҙ speed is unknown, defaulting to 1000 [ 516.904021][T29315] xfrm0 speed is unknown, defaulting to 1000 [ 516.952711][T29315] ip6_vti0 speed is unknown, defaulting to 1000 [ 517.133710][ T28] audit: type=1326 audit(2000000081.884:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29322 comm="syz.0.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 517.190478][ T28] audit: type=1326 audit(2000000081.884:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29322 comm="syz.0.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 517.215785][ T28] audit: type=1326 audit(2000000081.884:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29322 comm="syz.0.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 517.401974][ T28] audit: type=1326 audit(2000000082.137:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29322 comm="syz.0.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 517.436084][ T28] audit: type=1326 audit(2000000082.165:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29322 comm="syz.0.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 518.646006][T29452] Q6`Ҙ speed is unknown, defaulting to 1000 [ 518.669611][T29452] xfrm0 speed is unknown, defaulting to 1000 [ 518.836948][T29452] ip6_vti0 speed is unknown, defaulting to 1000 [ 519.855652][T29490] loop4: detected capacity change from 0 to 128 [ 519.868619][T29490] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 519.888980][T29490] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 520.576447][T29510] Q6`Ҙ speed is unknown, defaulting to 1000 [ 520.583162][T29510] xfrm0 speed is unknown, defaulting to 1000 [ 520.619530][T29510] ip6_vti0 speed is unknown, defaulting to 1000 [ 521.380456][ T28] audit: type=1326 audit(2000000085.851:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29522 comm="syz.2.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 521.405646][ T28] audit: type=1326 audit(2000000085.869:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29522 comm="syz.2.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 521.434040][ T28] audit: type=1326 audit(2000000085.869:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29522 comm="syz.2.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 521.465920][ T28] audit: type=1326 audit(2000000085.869:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29522 comm="syz.2.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 521.494523][ T28] audit: type=1326 audit(2000000085.888:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29522 comm="syz.2.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 522.409571][T29551] Q6`Ҙ speed is unknown, defaulting to 1000 [ 522.417131][T29551] xfrm0 speed is unknown, defaulting to 1000 [ 522.453951][T29551] ip6_vti0 speed is unknown, defaulting to 1000 [ 522.577020][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 522.590623][ T28] audit: type=1326 audit(2000000086.973:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29554 comm="syz.2.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 522.614779][ T28] audit: type=1326 audit(2000000086.973:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29554 comm="syz.2.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 522.658296][ T28] audit: type=1326 audit(2000000086.973:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29554 comm="syz.2.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 522.691503][ T28] audit: type=1326 audit(2000000086.973:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29554 comm="syz.2.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 522.709993][T29563] Q6`Ҙ speed is unknown, defaulting to 1000 [ 522.717550][ T28] audit: type=1326 audit(2000000086.973:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29554 comm="syz.2.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 522.725353][T29563] xfrm0 speed is unknown, defaulting to 1000 [ 522.746233][ T28] audit: type=1326 audit(2000000086.973:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29554 comm="syz.2.4169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 522.790318][T29561] Q6`Ҙ speed is unknown, defaulting to 1000 [ 522.890171][T29561] xfrm0 speed is unknown, defaulting to 1000 [ 522.927569][T29561] ip6_vti0 speed is unknown, defaulting to 1000 [ 522.968650][T29563] ip6_vti0 speed is unknown, defaulting to 1000 [ 523.156657][ T28] audit: type=1326 audit(2000000087.516:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29573 comm="syz.1.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aae1c629 code=0x7ffc0000 [ 523.251859][ T28] audit: type=1326 audit(2000000087.525:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29573 comm="syz.1.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aae1c629 code=0x7ffc0000 [ 523.313042][ T28] audit: type=1326 audit(2000000087.525:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29573 comm="syz.1.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f33aae1c629 code=0x7ffc0000 [ 523.357600][ T28] audit: type=1326 audit(2000000087.525:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29573 comm="syz.1.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aae1c629 code=0x7ffc0000 [ 524.529024][T29716] loop4: detected capacity change from 0 to 512 [ 524.687233][T29716] EXT4-fs (loop4): 1 orphan inode deleted [ 524.714263][T29716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.778603][T29716] ext4 filesystem being mounted at /743/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.928545][ T5036] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:23: Failed to release dquot type 1 [ 525.304799][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.476808][T29781] Q6`Ҙ speed is unknown, defaulting to 1000 [ 525.483525][T29781] xfrm0 speed is unknown, defaulting to 1000 [ 525.598953][T29781] ip6_vti0 speed is unknown, defaulting to 1000 [ 526.852709][T29926] loop4: detected capacity change from 0 to 512 [ 527.343445][T29926] EXT4-fs (loop4): 1 orphan inode deleted [ 527.356106][ T5047] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:29: Failed to release dquot type 1 [ 527.398577][ T5047] loop4: lost filesystem error report for type 5 error -117 [ 527.409293][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 527.423122][ C0] EXT4-fs (loop4): initial error at time 2000000091: ext4_release_dquot:7037 [ 527.432021][ C0] EXT4-fs (loop4): last error at time 2000000091: ext4_release_dquot:7037 [ 527.457761][T29926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.524133][T29926] ext4 filesystem being mounted at /746/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.695561][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.881775][T29981] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 527.897599][T29981] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 528.380379][T30026] Q6`Ҙ speed is unknown, defaulting to 1000 [ 528.396374][T30026] xfrm0 speed is unknown, defaulting to 1000 [ 528.405598][T30033] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 528.412955][T30033] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 528.487695][T30026] ip6_vti0 speed is unknown, defaulting to 1000 [ 528.614311][T30043] Q6`Ҙ speed is unknown, defaulting to 1000 [ 528.744289][T30043] xfrm0 speed is unknown, defaulting to 1000 [ 528.804162][T30043] ip6_vti0 speed is unknown, defaulting to 1000 [ 529.467568][T30105] Q6`Ҙ speed is unknown, defaulting to 1000 [ 529.498263][T30105] xfrm0 speed is unknown, defaulting to 1000 [ 529.587561][T30105] ip6_vti0 speed is unknown, defaulting to 1000 [ 530.499246][T30145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4222'. [ 530.886016][T30178] Q6`Ҙ speed is unknown, defaulting to 1000 [ 530.896768][T30178] xfrm0 speed is unknown, defaulting to 1000 [ 530.967372][T30178] ip6_vti0 speed is unknown, defaulting to 1000 [ 531.036095][T30203] bond9: entered allmulticast mode [ 531.055199][T30203] 8021q: adding VLAN 0 to HW filter on device bond9 [ 531.444401][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 531.444415][ T28] audit: type=1326 audit(2000000095.279:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30230 comm="syz.3.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6b2fc629 code=0x7ffc0000 [ 531.512739][ T28] audit: type=1326 audit(2000000095.307:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30230 comm="syz.3.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6b2fc629 code=0x7ffc0000 [ 531.564867][ T28] audit: type=1326 audit(2000000095.307:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30230 comm="syz.3.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3d6b2fc629 code=0x7ffc0000 [ 531.717910][ T28] audit: type=1326 audit(2000000095.523:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30230 comm="syz.3.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6b2fc629 code=0x7ffc0000 [ 531.748157][ T28] audit: type=1326 audit(2000000095.551:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30230 comm="syz.3.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6b2fc629 code=0x7ffc0000 [ 531.844412][T30261] Q6`Ҙ speed is unknown, defaulting to 1000 [ 531.852335][T30261] xfrm0 speed is unknown, defaulting to 1000 [ 531.901209][T30263] Q6`Ҙ speed is unknown, defaulting to 1000 [ 531.969320][T30261] ip6_vti0 speed is unknown, defaulting to 1000 [ 531.983554][T30263] xfrm0 speed is unknown, defaulting to 1000 [ 532.126366][T30263] ip6_vti0 speed is unknown, defaulting to 1000 [ 532.422038][ T28] audit: type=1326 audit(2000000096.187:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30283 comm="syz.0.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 532.484946][ T28] audit: type=1326 audit(2000000096.224:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30283 comm="syz.0.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 532.539509][ T28] audit: type=1326 audit(2000000096.224:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30283 comm="syz.0.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 532.593885][ T28] audit: type=1326 audit(2000000096.224:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30283 comm="syz.0.4242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 532.649605][ T28] audit: type=1326 audit(2000000096.243:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30285 comm="syz.3.4243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6b2fc629 code=0x7ffc0000 [ 532.756458][T30295] bond12: entered allmulticast mode [ 532.761986][T30295] 8021q: adding VLAN 0 to HW filter on device bond12 [ 532.954804][T30306] loop4: detected capacity change from 0 to 4096 [ 533.002888][T30306] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 533.032873][T30306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.691426][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.791322][T30332] Q6`Ҙ speed is unknown, defaulting to 1000 [ 533.852358][T30332] xfrm0 speed is unknown, defaulting to 1000 [ 533.901671][T30332] ip6_vti0 speed is unknown, defaulting to 1000 [ 534.205634][T30344] Q6`Ҙ speed is unknown, defaulting to 1000 [ 534.228771][T30344] xfrm0 speed is unknown, defaulting to 1000 [ 534.317743][T30344] ip6_vti0 speed is unknown, defaulting to 1000 [ 534.586819][T30350] Q6`Ҙ speed is unknown, defaulting to 1000 [ 534.598188][T30350] xfrm0 speed is unknown, defaulting to 1000 [ 534.678211][T30350] ip6_vti0 speed is unknown, defaulting to 1000 [ 536.425531][T30463] netlink: 20 bytes leftover after parsing attributes in process `wޣ'. [ 537.401460][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 537.401473][ T28] audit: type=1326 audit(2000000100.845:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30483 comm="syz.1.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aae1c629 code=0x7ffc0000 [ 537.415967][T30486] loop4: detected capacity change from 0 to 128 [ 537.479863][ T28] audit: type=1326 audit(2000000100.845:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30483 comm="syz.1.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aae1c629 code=0x7ffc0000 [ 537.491188][T30486] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 537.535308][ T28] audit: type=1326 audit(2000000100.845:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30483 comm="syz.1.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aae1c629 code=0x7ffc0000 [ 537.580765][T30486] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 537.593437][ T28] audit: type=1326 audit(2000000100.845:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30483 comm="syz.1.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f33aae1c629 code=0x7ffc0000 [ 537.619348][ T28] audit: type=1326 audit(2000000100.901:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30483 comm="syz.1.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aae1c629 code=0x7ffc0000 [ 537.650632][ T28] audit: type=1326 audit(2000000100.901:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30483 comm="syz.1.4280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aae1c629 code=0x7ffc0000 [ 537.799287][ T28] audit: type=1326 audit(2000000101.219:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30492 comm="syz.1.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aae1c629 code=0x7ffc0000 [ 537.829713][T30503] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 537.846112][T30503] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 537.858575][ T28] audit: type=1326 audit(2000000101.219:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30492 comm="syz.1.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aae1c629 code=0x7ffc0000 [ 538.110891][ T28] audit: type=1326 audit(2000000101.219:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30492 comm="syz.1.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f33aae1c629 code=0x7ffc0000 [ 538.149165][ T28] audit: type=1326 audit(2000000101.490:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30492 comm="syz.1.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aae1c629 code=0x7ffc0000 [ 539.107972][T30599] Q6`Ҙ speed is unknown, defaulting to 1000 [ 539.125526][T30599] xfrm0 speed is unknown, defaulting to 1000 [ 539.241559][T30599] ip6_vti0 speed is unknown, defaulting to 1000 [ 541.069545][T30741] Q6`Ҙ speed is unknown, defaulting to 1000 [ 541.257622][T30741] xfrm0 speed is unknown, defaulting to 1000 [ 541.517093][T30741] ip6_vti0 speed is unknown, defaulting to 1000 [ 543.573474][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 543.573491][ T28] audit: type=1326 audit(2000000106.607:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30818 comm="syz.3.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6b2fc629 code=0x7ffc0000 [ 543.626957][ T28] audit: type=1326 audit(2000000106.607:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30818 comm="syz.3.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6b2fc629 code=0x7ffc0000 [ 544.090112][ T28] audit: type=1326 audit(2000000107.103:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30842 comm="syz.3.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6b2fc629 code=0x7ffc0000 [ 544.199893][ T28] audit: type=1326 audit(2000000107.131:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30842 comm="syz.3.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6b2fc629 code=0x7ffc0000 [ 544.269503][ T28] audit: type=1326 audit(2000000107.131:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30842 comm="syz.3.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6b2fc629 code=0x7ffc0000 [ 544.343808][ T28] audit: type=1326 audit(2000000107.140:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30842 comm="syz.3.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6b2fc629 code=0x7ffc0000 [ 544.436861][ T28] audit: type=1326 audit(2000000107.140:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30842 comm="syz.3.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3d6b2fc629 code=0x7ffc0000 [ 544.466000][ T28] audit: type=1326 audit(2000000107.365:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30842 comm="syz.3.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6b2fc629 code=0x7ffc0000 [ 544.489755][ T28] audit: type=1326 audit(2000000107.365:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30842 comm="syz.3.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6b2fc629 code=0x7ffc0000 [ 545.080954][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 546.286155][T30880] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4339'. [ 546.605255][ T28] audit: type=1326 audit(2000000109.451:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30882 comm="syz.1.4340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aae1c629 code=0x7ffc0000 [ 547.036248][T30896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4344'. [ 548.300778][T30910] Q6`Ҙ speed is unknown, defaulting to 1000 [ 548.329366][T30910] xfrm0 speed is unknown, defaulting to 1000 [ 548.876858][T30910] ip6_vti0 speed is unknown, defaulting to 1000 [ 549.342283][T30928] Q6`Ҙ speed is unknown, defaulting to 1000 [ 549.349090][T30928] xfrm0 speed is unknown, defaulting to 1000 [ 550.027872][T30928] ip6_vti0 speed is unknown, defaulting to 1000 [ 550.035691][T30927] Q6`Ҙ speed is unknown, defaulting to 1000 [ 550.077070][T30927] xfrm0 speed is unknown, defaulting to 1000 [ 550.163027][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 550.163042][ T28] audit: type=1326 audit(2000000112.781:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30939 comm="syz.0.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 550.255264][ T28] audit: type=1326 audit(2000000112.818:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30939 comm="syz.0.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 550.300314][ T28] audit: type=1326 audit(2000000112.827:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30939 comm="syz.0.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 550.333365][T30927] ip6_vti0 speed is unknown, defaulting to 1000 [ 550.624470][ T28] audit: type=1326 audit(2000000113.211:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30939 comm="syz.0.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 550.675524][ T28] audit: type=1326 audit(2000000113.258:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30939 comm="syz.0.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 552.283959][ T28] audit: type=1326 audit(2000000114.764:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30977 comm="syz.0.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 552.346250][ T28] audit: type=1326 audit(2000000114.792:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30977 comm="syz.0.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 552.370387][ T28] audit: type=1326 audit(2000000114.792:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30977 comm="syz.0.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 552.396816][ T28] audit: type=1326 audit(2000000114.792:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30977 comm="syz.0.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 552.571099][ T28] audit: type=1326 audit(2000000115.035:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30977 comm="syz.0.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e609c629 code=0x7ffc0000 [ 552.907858][T31040] loop4: detected capacity change from 0 to 4096 [ 552.917836][T31040] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 552.945620][T31044] Q6`Ҙ speed is unknown, defaulting to 1000 [ 552.974312][T31040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.981887][T31044] xfrm0 speed is unknown, defaulting to 1000 [ 553.122192][T31044] ip6_vti0 speed is unknown, defaulting to 1000 [ 553.760148][T31063] Q6`Ҙ speed is unknown, defaulting to 1000 [ 553.799532][T31063] xfrm0 speed is unknown, defaulting to 1000 [ 554.299646][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.594099][T31063] ip6_vti0 speed is unknown, defaulting to 1000 [ 554.634039][T31080] loop4: detected capacity change from 0 to 4096 [ 554.658148][T31080] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 554.682823][T31080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.109026][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.186669][T31119] Q6`Ҙ speed is unknown, defaulting to 1000 [ 555.198240][T31119] xfrm0 speed is unknown, defaulting to 1000 [ 555.270169][T31119] ip6_vti0 speed is unknown, defaulting to 1000 [ 556.387196][T31213] loop4: detected capacity change from 0 to 4096 [ 556.466827][T31213] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 556.744965][T31213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.803956][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 556.803972][ T28] audit: type=1326 audit(2000000118.992:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31217 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6b2fc629 code=0x7ffc0000 [ 556.884070][T31223] bond10: entered allmulticast mode [ 556.889855][T31223] 8021q: adding VLAN 0 to HW filter on device bond10 [ 557.036716][ T28] audit: type=1326 audit(2000000119.029:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31217 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6b2fc629 code=0x7ffc0000 [ 557.112813][ T28] audit: type=1326 audit(2000000119.029:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31217 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3d6b2fc629 code=0x7ffc0000 [ 557.505890][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.525848][ T28] audit: type=1326 audit(2000000119.048:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31212 comm="syz.4.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237e34c629 code=0x7ffc0000 [ 557.588991][ T28] audit: type=1326 audit(2000000119.048:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31212 comm="syz.4.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237e34c629 code=0x7ffc0000 [ 557.613102][ T28] audit: type=1326 audit(2000000119.048:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31212 comm="syz.4.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f237e34c629 code=0x7ffc0000 [ 557.902960][T31252] loop4: detected capacity change from 0 to 128 [ 557.917507][T31252] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 558.108805][T31252] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 558.525615][T31267] Q6`Ҙ speed is unknown, defaulting to 1000 [ 558.548000][T31267] xfrm0 speed is unknown, defaulting to 1000 [ 558.860809][T31267] ip6_vti0 speed is unknown, defaulting to 1000 [ 559.675932][T31336] Q6`Ҙ speed is unknown, defaulting to 1000 [ 559.697310][T31336] xfrm0 speed is unknown, defaulting to 1000 [ 559.793471][ T28] audit: type=1326 audit(2000000121.789:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31342 comm="syz.2.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 559.808436][T31336] ip6_vti0 speed is unknown, defaulting to 1000 [ 559.823576][ T28] audit: type=1326 audit(2000000121.789:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31342 comm="syz.2.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 559.857070][ T28] audit: type=1326 audit(2000000121.798:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31342 comm="syz.2.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 559.945235][ T28] audit: type=1326 audit(2000000121.798:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31342 comm="syz.2.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 560.026616][T31357] Q6`Ҙ speed is unknown, defaulting to 1000 [ 560.041076][T31357] xfrm0 speed is unknown, defaulting to 1000 [ 560.092840][T31358] Q6`Ҙ speed is unknown, defaulting to 1000 [ 560.131872][T31358] xfrm0 speed is unknown, defaulting to 1000 [ 560.215998][T31357] ip6_vti0 speed is unknown, defaulting to 1000 [ 560.800292][T31358] ip6_vti0 speed is unknown, defaulting to 1000 [ 561.035454][T31426] Q6`Ҙ speed is unknown, defaulting to 1000 [ 561.059736][T31426] xfrm0 speed is unknown, defaulting to 1000 [ 561.161536][T31439] Q6`Ҙ speed is unknown, defaulting to 1000 [ 561.204976][T31439] xfrm0 speed is unknown, defaulting to 1000 [ 561.301082][T31426] ip6_vti0 speed is unknown, defaulting to 1000 [ 561.357386][T31439] ip6_vti0 speed is unknown, defaulting to 1000 [ 562.275038][T31515] Q6`Ҙ speed is unknown, defaulting to 1000 [ 562.302631][T31515] xfrm0 speed is unknown, defaulting to 1000 [ 562.343659][T31523] Q6`Ҙ speed is unknown, defaulting to 1000 [ 562.449903][T31523] xfrm0 speed is unknown, defaulting to 1000 [ 562.458273][T31515] ip6_vti0 speed is unknown, defaulting to 1000 [ 562.535408][T31533] loop4: detected capacity change from 0 to 4096 [ 562.566219][T31533] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 562.590066][T31533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.629876][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 562.629900][ T28] audit: type=1326 audit(2000000124.445:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31532 comm="syz.4.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237e34c629 code=0x7ffc0000 [ 562.660373][ T28] audit: type=1326 audit(2000000124.464:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31532 comm="syz.4.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237e34c629 code=0x7ffc0000 [ 562.685457][ T28] audit: type=1326 audit(2000000124.483:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31532 comm="syz.4.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237e34c629 code=0x7ffc0000 [ 562.703707][T31523] ip6_vti0 speed is unknown, defaulting to 1000 [ 562.709132][ T28] audit: type=1326 audit(2000000124.483:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31532 comm="syz.4.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237e34c629 code=0x7ffc0000 [ 562.747670][ T28] audit: type=1326 audit(2000000124.483:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31534 comm="syz.2.4421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 562.798395][ T28] audit: type=1326 audit(2000000124.483:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31534 comm="syz.2.4421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 562.831972][ T28] audit: type=1326 audit(2000000124.483:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31534 comm="syz.2.4421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 562.866583][ T28] audit: type=1326 audit(2000000124.483:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31534 comm="syz.2.4421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 562.901027][ T28] audit: type=1326 audit(2000000124.539:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31532 comm="syz.4.4420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f237e34c629 code=0x7ffc0000 [ 562.976592][ T28] audit: type=1326 audit(2000000124.557:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31534 comm="syz.2.4421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 563.307745][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.880636][T31593] Q6`Ҙ speed is unknown, defaulting to 1000 [ 563.909675][T31593] xfrm0 speed is unknown, defaulting to 1000 [ 563.959156][T31593] ip6_vti0 speed is unknown, defaulting to 1000 [ 564.601583][T31646] loop4: detected capacity change from 0 to 512 [ 564.615203][T31649] Q6`Ҙ speed is unknown, defaulting to 1000 [ 564.631266][T31649] xfrm0 speed is unknown, defaulting to 1000 [ 564.708166][T31649] ip6_vti0 speed is unknown, defaulting to 1000 [ 564.882444][T31654] Q6`Ҙ speed is unknown, defaulting to 1000 [ 564.901391][T31654] xfrm0 speed is unknown, defaulting to 1000 [ 565.056721][T31661] Q6`Ҙ speed is unknown, defaulting to 1000 [ 565.260363][T31661] xfrm0 speed is unknown, defaulting to 1000 [ 565.302579][T31661] ip6_vti0 speed is unknown, defaulting to 1000 [ 565.363211][T31654] ip6_vti0 speed is unknown, defaulting to 1000 [ 565.371131][T31666] Q6`Ҙ speed is unknown, defaulting to 1000 [ 565.393591][T31666] xfrm0 speed is unknown, defaulting to 1000 [ 565.503816][T31666] ip6_vti0 speed is unknown, defaulting to 1000 [ 565.740858][T31674] Q6`Ҙ speed is unknown, defaulting to 1000 [ 565.789868][T31674] xfrm0 speed is unknown, defaulting to 1000 [ 565.852173][T31674] ip6_vti0 speed is unknown, defaulting to 1000 [ 566.875918][T31753] Q6`Ҙ speed is unknown, defaulting to 1000 [ 566.900989][T31753] xfrm0 speed is unknown, defaulting to 1000 [ 566.911239][T31752] Q6`Ҙ speed is unknown, defaulting to 1000 [ 566.964221][T31753] ip6_vti0 speed is unknown, defaulting to 1000 [ 566.971166][T31752] xfrm0 speed is unknown, defaulting to 1000 [ 567.106167][T31752] ip6_vti0 speed is unknown, defaulting to 1000 [ 567.117061][T31758] Q6`Ҙ speed is unknown, defaulting to 1000 [ 567.123742][T31758] xfrm0 speed is unknown, defaulting to 1000 [ 567.240229][T31758] ip6_vti0 speed is unknown, defaulting to 1000 [ 567.342652][T31766] Q6`Ҙ speed is unknown, defaulting to 1000 [ 567.370888][T31766] xfrm0 speed is unknown, defaulting to 1000 [ 567.469541][T31766] ip6_vti0 speed is unknown, defaulting to 1000 [ 567.731024][T31774] Q6`Ҙ speed is unknown, defaulting to 1000 [ 567.774044][T31774] xfrm0 speed is unknown, defaulting to 1000 [ 568.243476][T31774] ip6_vti0 speed is unknown, defaulting to 1000 [ 568.284226][T31780] Q6`Ҙ speed is unknown, defaulting to 1000 [ 568.313060][T31780] xfrm0 speed is unknown, defaulting to 1000 [ 568.384329][T31780] ip6_vti0 speed is unknown, defaulting to 1000 [ 569.193270][T31803] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 569.297842][T31817] netlink: 20 bytes leftover after parsing attributes in process `wޣ'. [ 569.311644][T31811] Q6`Ҙ speed is unknown, defaulting to 1000 [ 569.332840][T31811] xfrm0 speed is unknown, defaulting to 1000 [ 569.344228][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 569.344287][ T28] audit: type=1326 audit(2000000130.722:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31806 comm="syz.2.4462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 569.426638][ T28] audit: type=1326 audit(2000000130.768:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31806 comm="syz.2.4462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 569.506349][ T28] audit: type=1326 audit(2000000130.768:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31806 comm="syz.2.4462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 569.618369][T31811] ip6_vti0 speed is unknown, defaulting to 1000 [ 569.727749][T31833] Q6`Ҙ speed is unknown, defaulting to 1000 [ 569.740447][T31833] xfrm0 speed is unknown, defaulting to 1000 [ 569.770495][ T28] audit: type=1326 audit(2000000131.124:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31806 comm="syz.2.4462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 569.831536][ T28] audit: type=1326 audit(2000000131.152:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31806 comm="syz.2.4462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780f57c629 code=0x7ffc0000 [ 569.926665][T31833] ip6_vti0 speed is unknown, defaulting to 1000 [ 571.248678][T31908] Q6`Ҙ speed is unknown, defaulting to 1000 [ 571.283997][T31908] xfrm0 speed is unknown, defaulting to 1000 [ 571.283999][T31916] Q6`Ҙ speed is unknown, defaulting to 1000 [ 571.520864][T31908] ip6_vti0 speed is unknown, defaulting to 1000 [ 571.578688][T31921] Q6`Ҙ speed is unknown, defaulting to 1000 [ 571.621789][T31921] xfrm0 speed is unknown, defaulting to 1000 [ 571.807825][T31916] xfrm0 speed is unknown, defaulting to 1000 [ 571.914288][T31921] ip6_vti0 speed is unknown, defaulting to 1000 [ 572.118260][T31916] ip6_vti0 speed is unknown, defaulting to 1000 [ 572.410072][T31939] Q6`Ҙ speed is unknown, defaulting to 1000 [ 572.437139][T31939] xfrm0 speed is unknown, defaulting to 1000 [ 572.571017][T31939] ip6_vti0 speed is unknown, defaulting to 1000 [ 572.586201][T31947] loop4: detected capacity change from 0 to 512 [ 572.725092][T31947] loop4: detected capacity change from 0 to 256 [ 573.075274][T31960] loop4: detected capacity change from 0 to 512 [ 573.222244][T31965] loop4: detected capacity change from 0 to 256 [ 573.242738][T31964] Q6`Ҙ speed is unknown, defaulting to 1000 [ 573.257355][T31964] xfrm0 speed is unknown, defaulting to 1000 [ 573.352695][T31964] ip6_vti0 speed is unknown, defaulting to 1000 [ 573.520127][T31969] Q6`Ҙ speed is unknown, defaulting to 1000 [ 573.585108][T31969] xfrm0 speed is unknown, defaulting to 1000 [ 573.724294][T31969] ip6_vti0 speed is unknown, defaulting to 1000 [ 573.831566][T31970] Q6`Ҙ speed is unknown, defaulting to 1000 [ 574.450750][T31970] xfrm0 speed is unknown, defaulting to 1000 [ 574.614330][T31998] Q6`Ҙ speed is unknown, defaulting to 1000 [ 574.621150][T31998] xfrm0 speed is unknown, defaulting to 1000 [ 574.631658][T31970] ip6_vti0 speed is unknown, defaulting to 1000 [ 574.701307][T32016] Q6`Ҙ speed is unknown, defaulting to 1000 [ 574.718544][T32016] xfrm0 speed is unknown, defaulting to 1000 [ 575.458200][T31998] ip6_vti0 speed is unknown, defaulting to 1000 [ 575.693410][T32016] ip6_vti0 speed is unknown, defaulting to 1000 [ 576.795220][T32076] Q6`Ҙ speed is unknown, defaulting to 1000 [ 576.820694][T32076] xfrm0 speed is unknown, defaulting to 1000 [ 577.759789][T32076] ip6_vti0 speed is unknown, defaulting to 1000 [ 577.996582][T32099] Q6`Ҙ speed is unknown, defaulting to 1000 [ 578.006736][T32099] xfrm0 speed is unknown, defaulting to 1000 [ 578.070152][T32099] ip6_vti0 speed is unknown, defaulting to 1000 [ 578.336739][T32109] Q6`Ҙ speed is unknown, defaulting to 1000 [ 578.347117][T32109] xfrm0 speed is unknown, defaulting to 1000 [ 578.436046][T32109] ip6_vti0 speed is unknown, defaulting to 1000 [ 578.553222][ T28] audit: type=1400 audit(2000000139.337:1137): avc: denied { audit_write } for pid=32117 comm="syz.4.4522" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 578.626592][ T28] audit: type=1107 audit(2000000139.337:1138): pid=32117 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 579.261212][T32134] Q6`Ҙ speed is unknown, defaulting to 1000 [ 579.318024][T32134] xfrm0 speed is unknown, defaulting to 1000 [ 579.574704][T32134] ip6_vti0 speed is unknown, defaulting to 1000 [ 579.895986][ T28] audit: type=1107 audit(2000000140.590:1139): pid=32153 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 580.854522][T32177] loop4: detected capacity change from 0 to 512 [ 580.960860][T32177] loop4: detected capacity change from 0 to 256 [ 581.010584][T32179] Q6`Ҙ speed is unknown, defaulting to 1000 [ 581.058829][T32179] xfrm0 speed is unknown, defaulting to 1000 [ 581.679170][T32179] ip6_vti0 speed is unknown, defaulting to 1000 [ 582.571712][T32227] loop4: detected capacity change from 0 to 512 [ 582.691218][T32227] loop4: detected capacity change from 0 to 256 [ 582.738680][T32234] Q6`Ҙ speed is unknown, defaulting to 1000 [ 582.746148][T32234] xfrm0 speed is unknown, defaulting to 1000 [ 582.821814][T32234] ip6_vti0 speed is unknown, defaulting to 1000 [ 582.907412][T32240] Q6`Ҙ speed is unknown, defaulting to 1000 [ 582.914027][T32240] xfrm0 speed is unknown, defaulting to 1000 [ 583.119394][T32240] ip6_vti0 speed is unknown, defaulting to 1000 [ 583.952350][T32312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4563'. [ 584.171030][T32324] Q6`Ҙ speed is unknown, defaulting to 1000 [ 584.180028][T32324] xfrm0 speed is unknown, defaulting to 1000 [ 584.340315][T32324] ip6_vti0 speed is unknown, defaulting to 1000 [ 585.018237][T32339] Q6`Ҙ speed is unknown, defaulting to 1000 [ 585.059294][T32339] xfrm0 speed is unknown, defaulting to 1000 [ 585.262336][T32339] ip6_vti0 speed is unknown, defaulting to 1000 [ 585.375103][T32358] loop4: detected capacity change from 0 to 128 [ 585.386955][T32358] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 585.482728][T32358] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 586.374017][T32456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4577'. [ 587.385260][T32485] loop4: detected capacity change from 0 to 512 [ 587.539247][T32485] loop4: detected capacity change from 0 to 256 [ 588.757493][T32501] Q6`Ҙ speed is unknown, defaulting to 1000 [ 588.773886][T32501] xfrm0 speed is unknown, defaulting to 1000 [ 588.922246][T32511] Q6`Ҙ speed is unknown, defaulting to 1000 [ 588.928867][T32501] ip6_vti0 speed is unknown, defaulting to 1000 [ 588.935722][T32511] xfrm0 speed is unknown, defaulting to 1000 [ 589.308336][T32511] ip6_vti0 speed is unknown, defaulting to 1000 [ 589.420446][T32520] Q6`Ҙ speed is unknown, defaulting to 1000 [ 589.460944][T32520] xfrm0 speed is unknown, defaulting to 1000 [ 589.571630][T32520] ip6_vti0 speed is unknown, defaulting to 1000 [ 589.806943][T32530] Q6`Ҙ speed is unknown, defaulting to 1000 [ 589.846192][T32530] xfrm0 speed is unknown, defaulting to 1000 [ 590.420450][T32547] loop4: detected capacity change from 0 to 128 [ 590.430898][T32547] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 590.444286][T32547] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 590.516637][T32530] ip6_vti0 speed is unknown, defaulting to 1000 [ 590.869222][T32596] loop4: detected capacity change from 0 to 512 [ 591.441443][T32609] loop4: detected capacity change from 0 to 512 [ 591.735869][T32612] loop4: detected capacity change from 0 to 256 [ 591.868986][T32616] Q6`Ҙ speed is unknown, defaulting to 1000 [ 591.880681][T32616] xfrm0 speed is unknown, defaulting to 1000 [ 591.921363][T32616] ip6_vti0 speed is unknown, defaulting to 1000 [ 592.547063][T32623] Q6`Ҙ speed is unknown, defaulting to 1000 [ 592.601298][T32623] xfrm0 speed is unknown, defaulting to 1000 [ 592.713976][T32623] ip6_vti0 speed is unknown, defaulting to 1000 [ 593.880896][T32662] Q6`Ҙ speed is unknown, defaulting to 1000 [ 593.901820][T32662] xfrm0 speed is unknown, defaulting to 1000 [ 593.908118][T32661] Q6`Ҙ speed is unknown, defaulting to 1000 [ 594.006566][ T28] audit: type=1400 audit(2000000155.802:1140): avc: denied { write } for pid=32667 comm="syz.4.4622" path="socket:[57118]" dev="sockfs" ino=57118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 594.057772][T32661] xfrm0 speed is unknown, defaulting to 1000 [ 594.064417][T32662] ip6_vti0 speed is unknown, defaulting to 1000 [ 594.461550][T32661] ip6_vti0 speed is unknown, defaulting to 1000 [ 594.556582][T32672] Q6`Ҙ speed is unknown, defaulting to 1000 [ 594.604592][T32672] xfrm0 speed is unknown, defaulting to 1000 [ 594.611909][T32676] Q6`Ҙ speed is unknown, defaulting to 1000 [ 594.663074][T32676] xfrm0 speed is unknown, defaulting to 1000 [ 594.669359][T32672] ip6_vti0 speed is unknown, defaulting to 1000 [ 594.761461][T32676] ip6_vti0 speed is unknown, defaulting to 1000 [ 594.954436][T32688] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 594.972333][T32688] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 596.195441][T32749] Q6`Ҙ speed is unknown, defaulting to 1000 [ 596.203681][T32749] xfrm0 speed is unknown, defaulting to 1000 [ 596.697083][T32749] ip6_vti0 speed is unknown, defaulting to 1000 [ 597.778897][ T305] bond11: entered allmulticast mode [ 597.784374][ T305] 8021q: adding VLAN 0 to HW filter on device bond11 [ 597.822116][ T303] Q6`Ҙ speed is unknown, defaulting to 1000 [ 597.840310][ T303] xfrm0 speed is unknown, defaulting to 1000 [ 597.969366][ T303] ip6_vti0 speed is unknown, defaulting to 1000 [ 598.364140][ T361] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 598.371427][ T361] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 600.080930][ T428] loop4: detected capacity change from 0 to 128 [ 600.093229][ T428] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 600.108229][ T428] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 602.387640][ T452] Q6`Ҙ speed is unknown, defaulting to 1000 [ 602.415856][ T452] xfrm0 speed is unknown, defaulting to 1000 [ 602.468355][ T452] ip6_vti0 speed is unknown, defaulting to 1000 [ 604.201988][ T570] loop4: detected capacity change from 0 to 512 [ 604.513932][ T574] Q6`Ҙ speed is unknown, defaulting to 1000 [ 604.555569][ T574] xfrm0 speed is unknown, defaulting to 1000 [ 604.694612][ T579] loop4: detected capacity change from 0 to 256 [ 604.834951][ T574] ip6_vti0 speed is unknown, defaulting to 1000 [ 605.089908][ T594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4670'. [ 606.727441][ T662] Q6`Ҙ speed is unknown, defaulting to 1000 [ 606.734082][ T662] xfrm0 speed is unknown, defaulting to 1000 [ 606.896669][ T662] ip6_vti0 speed is unknown, defaulting to 1000 [ 607.306001][ T684] bond12: entered allmulticast mode [ 607.365798][ T684] 8021q: adding VLAN 0 to HW filter on device bond12 [ 610.032199][ T724] Q6`Ҙ speed is unknown, defaulting to 1000 [ 610.039532][ T724] xfrm0 speed is unknown, defaulting to 1000 [ 610.104027][ T785] Q6`Ҙ speed is unknown, defaulting to 1000 [ 610.118463][ T785] xfrm0 speed is unknown, defaulting to 1000 [ 610.124810][ T724] ip6_vti0 speed is unknown, defaulting to 1000 [ 610.265563][ T785] ip6_vti0 speed is unknown, defaulting to 1000 [ 610.480432][ T795] bond13: entered allmulticast mode [ 610.494017][ T795] 8021q: adding VLAN 0 to HW filter on device bond13 [ 611.142386][ T811] Q6`Ҙ speed is unknown, defaulting to 1000 [ 611.158032][ T811] xfrm0 speed is unknown, defaulting to 1000 [ 611.260842][ T811] ip6_vti0 speed is unknown, defaulting to 1000 [ 614.771463][ T908] bond10: entered allmulticast mode [ 614.789278][ T908] 8021q: adding VLAN 0 to HW filter on device bond10 [ 615.391673][ T919] Q6`Ҙ speed is unknown, defaulting to 1000 [ 615.398495][ T919] xfrm0 speed is unknown, defaulting to 1000 [ 615.534127][ T919] ip6_vti0 speed is unknown, defaulting to 1000 [ 615.727248][ T28] audit: type=1107 audit(2000000189.119:1141): pid=928 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 615.815488][ T938] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 615.822874][ T938] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 616.500747][ T963] Q6`Ҙ speed is unknown, defaulting to 1000 [ 616.520271][ T963] xfrm0 speed is unknown, defaulting to 1000 [ 616.564427][ T963] ip6_vti0 speed is unknown, defaulting to 1000 [ 616.898954][ T28] audit: type=1107 audit(2000000190.204:1142): pid=1005 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 616.910637][ T1009] Q6`Ҙ speed is unknown, defaulting to 1000 [ 617.604120][ T1009] xfrm0 speed is unknown, defaulting to 1000 [ 617.962930][ T1009] ip6_vti0 speed is unknown, defaulting to 1000 [ 618.360530][ T1058] ================================================================== [ 618.368644][ T1058] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 618.376357][ T1058] [ 618.378687][ T1058] write to 0xffff888237c26668 of 1 bytes by task 1059 on cpu 0: [ 618.386328][ T1058] folios_put_refs+0x285/0x2d0 [ 618.391102][ T1058] folio_batch_move_lru+0x247/0x270 [ 618.396319][ T1058] folio_add_lru+0x149/0x1e0 [ 618.400907][ T1058] folio_add_lru_vma+0x49/0x70 [ 618.405689][ T1058] set_pte_range+0x235/0x4f0 [ 618.410299][ T1058] finish_fault+0x937/0xaf0 [ 618.414822][ T1058] handle_mm_fault+0x1dd5/0x3020 [ 618.419779][ T1058] do_user_addr_fault+0x62f/0x1050 [ 618.424906][ T1058] exc_page_fault+0x62/0xa0 [ 618.429416][ T1058] asm_exc_page_fault+0x26/0x30 [ 618.434267][ T1058] [ 618.436582][ T1058] read to 0xffff888237c26668 of 1 bytes by task 1058 on cpu 1: [ 618.444206][ T1058] __lru_add_drain_all+0x17e/0x450 [ 618.449324][ T1058] lru_cache_disable+0x1f/0x30 [ 618.454109][ T1058] __se_sys_move_pages+0x2c0/0x1420 [ 618.459311][ T1058] __x64_sys_move_pages+0x78/0x90 [ 618.464349][ T1058] x64_sys_call+0x1d35/0x3020 [ 618.469042][ T1058] do_syscall_64+0x12c/0x370 [ 618.473649][ T1058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.479561][ T1058] [ 618.481883][ T1058] value changed: 0x0c -> 0x01 [ 618.486555][ T1058] [ 618.488878][ T1058] Reported by Kernel Concurrency Sanitizer on: [ 618.495125][ T1058] CPU: 1 UID: 0 PID: 1058 Comm: syz.0.4733 Tainted: G W syzkaller #0 PREEMPT(full) [ 618.505989][ T1058] Tainted: [W]=WARN [ 618.509782][ T1058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 618.519924][ T1058] ==================================================================