last executing test programs: 2m38.820927147s ago: executing program 32 (id=492): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0xc014) 2m12.641110656s ago: executing program 33 (id=1122): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 2m10.781881659s ago: executing program 34 (id=1147): r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000040)={r2, @in={{0x2, 0x4e24, @multicast1}}, [0x2, 0x1, 0x7fff, 0x2399, 0x8000000000000001, 0x8000000000000000, 0xb, 0x7, 0x100000000, 0x2, 0x46, 0xb5, 0x10, 0x7ff, 0xc388]}, &(0x7f0000000140)=0x100) 2m10.415887202s ago: executing program 35 (id=1153): socket$nl_route(0x10, 0x3, 0x0) unshare(0x400) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33) 1m28.515016764s ago: executing program 36 (id=1816): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) 1m4.919985796s ago: executing program 6 (id=2678): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffff7ffffd, 0x0, 0x0, 0x403, 0x0, 0x2, 0x0, 0x4}) 1m4.697824623s ago: executing program 6 (id=2685): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x440088c4) 1m4.337616115s ago: executing program 6 (id=2692): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x21b7, 0x800, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x6000, @fd=r0, 0xfffffffffffffff6, 0x0, 0x0, 0x19, 0x1, {0x1, r4}}) setreuid(0xffffffffffffffff, 0xee01) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 1m4.303111457s ago: executing program 6 (id=2693): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901) mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x1000, &(0x7f0000000200)={0x84, 0x70, 0x0, {r0}}, 0x20) 1m4.255624278s ago: executing program 6 (id=2696): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feffe0ff64000200475400f6a13bb1000000080088484803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1m4.151927841s ago: executing program 6 (id=2699): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1m4.151854082s ago: executing program 37 (id=2699): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 55.472062936s ago: executing program 5 (id=2888): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) close_range(r0, 0xffffffffffffffff, 0x0) 55.413719078s ago: executing program 5 (id=2892): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x80071c, &(0x7f00000000c0), 0xff, 0x4ea, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4000000000000, 0xffffffffffbffffe, 0x7f}, 0x0) io_setup(0x81, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 55.089442619s ago: executing program 5 (id=2898): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000540)={r1, 0x1, 0xff80}, 0x8) 54.957339734s ago: executing program 5 (id=2899): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 54.898307726s ago: executing program 5 (id=2900): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000140)=0x400030, 0x3) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 54.279883077s ago: executing program 5 (id=2914): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000000340)=""/170, 0xaa) 54.255565627s ago: executing program 38 (id=2914): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000000340)=""/170, 0xaa) 44.105149862s ago: executing program 9 (id=3151): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)='\b', 0x1}], 0x1}, 0x24008004) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x4}, 0x8}, 0x94) syz_emit_ethernet(0x32, &(0x7f00000036c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x801, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x8, 0x100, @val=0x80}}}}}}}, 0x0) 43.215330133s ago: executing program 9 (id=3178): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x0, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@resuid}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100030000000000040001000000000020"], 0x1c, 0x2) 42.938604952s ago: executing program 9 (id=3182): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x28000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) memfd_create(0x0, 0x0) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000, 0x6040000}], 0x0) 42.598165184s ago: executing program 9 (id=3185): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x510, &(0x7f0000001a00)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0xe, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f283597399229a4c66810000000005683ae6d602000000000000000000000001", [0x8]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) 42.432840409s ago: executing program 9 (id=3190): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)=':', 0x1, 0x24044013, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000840)='|', 0x1, 0x80009, 0x0, 0x0) shutdown(r0, 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='^', 0xfe6b}], 0x1) 42.270961334s ago: executing program 9 (id=3193): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x121d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e00000000000000f8ff070008"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000080)=""/89}, 0x20) 42.215411936s ago: executing program 39 (id=3193): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x121d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e00000000000000f8ff070008"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000080)=""/89}, 0x20) 41.289577718s ago: executing program 4 (id=3209): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, 0x0, 0xf10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20) 41.204903851s ago: executing program 4 (id=3210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004340)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xffe0}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3ff, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x9}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24041884}, 0x4880) 40.833504323s ago: executing program 4 (id=3213): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x3, 0x0, 0x7ffc0003}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 39.932795794s ago: executing program 4 (id=3220): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x510, &(0x7f0000001a00)="$eJzs3c9vG1kdAPDvOHGSzbqbLvQACNiyLBRU1fnR3agqB9oLCFWVEBUnDm1I3CiKXUdxUprQQ3rkjkQlTvAncOOA1BNI3LjBjUuRQCpQgRokDl7NeJq4SdykbRI39ucjTWbem0m+72X63vO8xn4B9K2zEbEREUMRcSsixvL8JN/iSmtLr3v29P7s5tP7s0k0mzf+lWTn07xo+57Uu/nPHImIH3w34sfJ7riNtfXFmWq1spynx1dqS+ONtfULC4U8Z2p6cnri0sVPpg6trh/UfvPkOwvXfvi7337p8Z82vvnTtFiln53KzrXX4zC1ql6MUlveYERcO4pgXTKY//vh5Elb22ci4sOs/Y/FQHY3AYBe1myORXOsPQ0A9Lr0+b8USaGczwWUolAol1tzeGditFCtN1bOj9VX78xFNod1OoqF2wvVykQ+V3g6ikmansyOt9NTO9IXI+L9iPj58DtZujxbr85184UPAPSxd3eM//8dbo3/AECPG3nF6/2JAACcfK86/gMAJ5/xHwD6zyuM/6b+AaBHeP4HgP5j/AeA/rPv+P/geMoBAByL71+/nm7Nzfzzr+furq1+q3T3wlylsViurc6WZ+vLS+X5en2+WinPNpv7/bxqvb40+fFWsrG2frNWX72zcnOhNjNfuVkpHnF9AID9vf/Bo78kEbFx+Z1si7a1HIzV0NsKr/VdZ8b/8PdDLwpwzAa6XQCga/Z+P88eC/YBPecAz/imAaDH7Tfid/wToYcWf4WT6tznzf9Dv3q9+X+gF7ze/P+3D70cwPHzeV7Qv5rNxJr/ANBnzPEDb/T//wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCnStmWFMrZWuAb6ddCuRxxKiJORzG5vVCtTETEexHx5+HicJqe7HahAYA3VPhHkq//dW7so9LOs0PJ/4azfUT85Jc3fnFvZmVleTLN//dW/srDPH9qqBsVAADaXdmd1Rqn833bg/yzp/dnn2/HWcQnV1uLi6ZxN/OtdWYwBrP9SBQjYvQ/SZ5uSV+vDBxC/I0HEfG57frfa4tQyuZAWiuf7oyfxj51BPG3f/874xdeiF/IzqX7Yva7+OwhlAX6zaOrrX4yb3tpE8vbXyHOZvu92/9I1kO9uef93+au/q+w1f8N7IqfZG3+7Fb65SV58vHvv7crsznWOvcg4guDe8VPtuInHfrfjw5Yx79+8csfdjrX/FXEudg7fkst62bHV2pL44219QsLtZn5ynzlztTU9OT0xKWLn0yNZ3PUra9/3CvGPy+ff69T/LT+ox3ij+xT/68dsP6//v+tH33lJfG/8dW97/+Zl8RPx8SvHzD+zOiVjst3p/HnOtT/hfsfu+t//oDxH/9tfe6AlwIAx6Cxtr44U61Wlvc5SF9r7ndNDx4Mvx3FONqD2Ih4C4qRHwzFW1GMfj4YTG9Bt3sm4KhtN/pulwQAAAAAAAAAAAAAAOiksba+OBxH+3aibtcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3vVpAAAA//9gQM2x") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0xe, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f283597399229a4c66810000000005683ae6d602000000000000000000000001", [0x8]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) 39.688441412s ago: executing program 4 (id=3222): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x5, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0xffff7fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 39.319864745s ago: executing program 4 (id=3233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 39.319767325s ago: executing program 40 (id=3233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 22.37074982s ago: executing program 7 (id=3550): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x4, 0x4, 0x2008, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x800000, 0x4}, 0x50) 22.107948569s ago: executing program 7 (id=3557): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x1, 0x21, 0x1, 0x0, 0x0) 21.992261663s ago: executing program 7 (id=3559): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) unshare(0x2a000600) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8005d}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) 21.948284765s ago: executing program 7 (id=3561): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8b101e, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_rdma(0x0, &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x20000, 0x0) 21.867826057s ago: executing program 7 (id=3564): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = gettid() tkill(r2, 0x16) 21.78117813s ago: executing program 7 (id=3567): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_clone3(&(0x7f00000006c0)={0x20040080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0], 0x1}, 0x58) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) 21.727166262s ago: executing program 41 (id=3567): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_clone3(&(0x7f00000006c0)={0x20040080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0], 0x1}, 0x58) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) 3.54201789s ago: executing program 1 (id=3831): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x800004, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) io_setup(0x3, &(0x7f0000000100)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f0000000340)=[{}, {}], 0x0) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000240)=[{}, {}], 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) io_submit(r0, 0x2, &(0x7f0000000180)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xfff, r1, 0x0, 0x0, 0x5}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x9, r1, 0x0, 0x0, 0x6}]) 2.580221002s ago: executing program 1 (id=3845): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 2.372042449s ago: executing program 0 (id=3848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000002200)={@val={0x0, 0x88ca}, @void, @eth={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @val={@void}, {@ipv6={0x86dd, @tcp={0x5, 0x6, '\x00', 0x14, 0x6, 0x1, @mcast2, @remote, {[], {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x379, 0x20, 0xfffe, 0x0, 0x7}}}}}}}}, 0x52) 2.263952823s ago: executing program 3 (id=3850): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$unix(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\t', 0x1}], 0x1, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x20008000}, 0x4000080) 2.252009214s ago: executing program 3 (id=3851): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) 2.181080595s ago: executing program 0 (id=3853): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}], 0x1c) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, 0x0, 0x8814) listen(r0, 0xfff) accept$inet6(r0, 0x0, 0x0) 2.107714829s ago: executing program 3 (id=3856): socket$inet_tcp(0x2, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x5}, 0x80, 0x91d, 0xf, 0x0, 0x6, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1e0411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x3, 0x80, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 1.942905373s ago: executing program 2 (id=3858): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(r1, &(0x7f00000102c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40}}], 0x1, 0x4004080) 1.847969947s ago: executing program 2 (id=3859): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000032090000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="06000000040000007c0500000a"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r2, 0x0, 0x1ba8847c99}, 0x38) 1.76171403s ago: executing program 1 (id=3860): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffe84, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a00d000000020006fb0a0002000a0ada1b40d805481100c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 1.641371724s ago: executing program 1 (id=3861): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="c2", 0x1}], 0x1, 0x3) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000380)={0x18, 0x0, {0x2, @empty, 'gretap0\x00'}}, 0x1e) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 1.541845667s ago: executing program 1 (id=3862): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.526737068s ago: executing program 8 (id=3864): sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x20000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x20973, 0x1c080, 0x0, 0x201}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x1a, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xfffffffffffffffc, 0x41100, 0x19, '\x00', 0x0, 0x38}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.508204628s ago: executing program 2 (id=3865): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000e40)={@val={0x0, 0x8863}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x2, 0x0, 0x1}}, {@generic={0x892f}}}}, 0x1a) 1.379932433s ago: executing program 3 (id=3866): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) socket$nl_route(0x10, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 1.361028434s ago: executing program 2 (id=3867): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f00000002c0)=ANY=[], 0xfc, 0x1f5, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.307561015s ago: executing program 8 (id=3868): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xfffffffffffffdff, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x200c0800}, 0x20040040) 1.307096856s ago: executing program 3 (id=3869): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x5, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) 1.252121917s ago: executing program 0 (id=3870): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0xd, 0x0, 0x5, 0xffffffff, 0xfffffffd}) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESTART(r1, 0x1261, 0x0) 1.136854291s ago: executing program 0 (id=3871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024001000000080001400000000014000000110001"], 0x68}}, 0x4000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}}, 0x0) close(r0) 1.106458632s ago: executing program 8 (id=3872): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000100)=0x3) 1.084327783s ago: executing program 8 (id=3873): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000480000000820000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd364158a4591c559f76c0130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce74c4dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f00c484d339c480f70006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08ef74c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d3287a7b01ab84d336f3c0f45a0642d6f2c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe91ff799a11d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d253e8778e6e8ffe4ea50b076446f35efffc806b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd3153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b58fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be15579518540000bc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e99948a9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676080000007229e0237c1e34641848531712ff09e89fb062a3e66f4f3c9d7a7fc9aab1ced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a690bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b270a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcc1f594ecfaff9a79b56f8b380380020000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f065584c", 0x0, 0x1c4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.057735434s ago: executing program 0 (id=3874): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") pread64(0xffffffffffffffff, 0x0, 0x0, 0x3c) syz_emit_ethernet(0x0, 0x0, 0x0) mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1e0) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 935.889998ms ago: executing program 8 (id=3875): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file1\x00', 0x1000000, &(0x7f0000000b40)=ANY=[], 0xfe, 0x121c, &(0x7f00000024c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000005880)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000005840)={r1, 0x58, &(0x7f00000001c0)}, 0x10) 913.031999ms ago: executing program 1 (id=3876): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x5}, 0x1160bb, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8031, 0xffffffffffffffff, 0xa9525000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) 879.01532ms ago: executing program 0 (id=3877): bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 610.939469ms ago: executing program 3 (id=3878): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 214.003503ms ago: executing program 2 (id=3879): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) socket$nl_route(0x10, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 65.500017ms ago: executing program 2 (id=3880): r0 = eventfd2(0x1020006, 0x800) io_setup(0x3ff, &(0x7f0000000500)=0x0) r2 = epoll_create1(0x0) io_pgetevents(r1, 0x6, 0x6, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x80000000}) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x200, r0, 0x0, 0x0, 0x4, 0x0, 0x1, r0}]) 0s ago: executing program 8 (id=3881): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x33, &(0x7f0000000080)={0xe, 0x0, 0x4}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r2, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) kernel console output (not intermixed with test programs): [ 153.881383][T10775] EXT4-fs error (device loop9): ext4_acquire_dquot:7026: comm syz.9.2731: Failed to acquire dquot type 0 [ 153.903017][T10775] loop9: lost filesystem error report for type 5 error -117 [ 153.903158][T10775] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 153.921568][ T28] audit: type=1400 audit(1775151835.648:1885): avc: denied { write } for pid=10783 comm="syz.7.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 153.945645][T10775] loop9: lost filesystem error report for type 5 error -117 [ 153.945837][T10775] EXT4-fs error (device loop9): ext4_evict_inode:265: inode #11: comm syz.9.2731: mark_inode_dirty error [ 153.970011][T10775] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 153.974809][T10775] EXT4-fs warning (device loop9): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 154.007756][T10775] EXT4-fs (loop9): 1 orphan inode deleted [ 154.019204][T10775] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.031893][ T50] EXT4-fs error (device loop9): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 154.051228][ T50] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 154.051381][ T50] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 154.078485][ T50] EXT4-fs error (device loop9): ext4_release_dquot:7062: comm kworker/u8:3: Failed to release dquot type 0 [ 154.094010][T10775] EXT4-fs (loop9): shut down requested (2) [ 154.123332][T10797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2737'. [ 154.133535][ T8993] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.144514][ T367] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 154.224405][T10805] veth1_macvtap: left promiscuous mode [ 154.235505][T10805] macsec0: entered promiscuous mode [ 154.280866][T10805] veth1_macvtap: entered promiscuous mode [ 154.304069][T10811] loop5: detected capacity change from 0 to 1024 [ 154.312420][T10805] macsec0: entered allmulticast mode [ 154.328956][T10805] veth1_macvtap: entered allmulticast mode [ 154.350097][T10811] ext4 filesystem being mounted at /511/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.371055][T10811] EXT4-fs error (device loop5): ext4_map_blocks:828: inode #15: block 3: comm syz.5.2742: lblock 3 mapped to illegal pblock 3 (length 3) [ 154.447874][T10669] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 154.471674][T10669] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 154.479289][ T28] audit: type=1400 audit(1775151836.198:1886): avc: denied { accept } for pid=10819 comm="syz.9.2743" path="socket:[29836]" dev="sockfs" ino=29836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 154.504695][T10811] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 154.527208][T10830] loop1: detected capacity change from 0 to 512 [ 154.535935][T10669] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 154.543042][T10811] EXT4-fs (loop5): This should not happen!! Data will be lost [ 154.543042][T10811] [ 154.566975][T10669] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 154.574674][T10811] EXT4-fs error (device loop5): ext4_map_blocks:828: inode #15: block 8: comm syz.5.2742: lblock 8 mapped to illegal pblock 8 (length 8) [ 154.595606][T10830] ext4 filesystem being mounted at /538/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.607648][T10811] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 154.659977][T10811] EXT4-fs (loop5): This should not happen!! Data will be lost [ 154.659977][T10811] [ 154.718526][T10669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.737042][T10669] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.745945][ T28] audit: type=1400 audit(1775151836.458:1887): avc: denied { setattr } for pid=10829 comm="syz.1.2746" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.752434][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.776914][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.792686][ T4760] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 154.842736][ T3980] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.849987][ T3980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.927652][T10866] loop9: detected capacity change from 0 to 128 [ 155.054044][T10881] loop9: detected capacity change from 0 to 128 [ 155.112380][T10669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.425761][T10669] veth0_vlan: entered promiscuous mode [ 155.459274][T10669] veth1_vlan: entered promiscuous mode [ 155.513155][T10669] veth0_macvtap: entered promiscuous mode [ 155.540268][T10669] veth1_macvtap: entered promiscuous mode [ 155.571243][T10669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.611855][T10669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.661145][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.670381][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.691842][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.715669][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.767271][T10948] loop9: detected capacity change from 0 to 256 [ 155.815929][T10955] loop1: detected capacity change from 0 to 2048 [ 155.905577][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2768'. [ 156.059201][T10975] ext4 filesystem being mounted at /544/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.087168][T10987] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 156.217538][T10991] FAT-fs (loop9): Directory bread(block 64) failed [ 156.241502][T10991] FAT-fs (loop9): Directory bread(block 65) failed [ 156.275113][T10991] FAT-fs (loop9): Directory bread(block 66) failed [ 156.283987][T10991] FAT-fs (loop9): Directory bread(block 67) failed [ 156.301258][T10991] FAT-fs (loop9): Directory bread(block 68) failed [ 156.308090][T10991] FAT-fs (loop9): Directory bread(block 69) failed [ 156.323697][T10991] FAT-fs (loop9): Directory bread(block 70) failed [ 156.332325][T10991] FAT-fs (loop9): Directory bread(block 71) failed [ 156.339131][T10991] FAT-fs (loop9): Directory bread(block 72) failed [ 156.372776][T10991] FAT-fs (loop9): Directory bread(block 73) failed [ 156.868479][T11079] SELinux: failed to load policy [ 156.882661][ T29] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 157.115126][T11109] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 157.134302][T11109] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 157.154132][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 157.160690][ C1] EXT4-fs (loop4): initial error at time 1775151838: ext4_mb_generate_buddy:1317 [ 157.170072][ C1] EXT4-fs (loop4): last error at time 1775151838: ext4_mb_generate_buddy:1317 [ 157.180579][T11109] EXT4-fs (loop4): 1 truncate cleaned up [ 157.293278][T11129] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #12: block 7: comm syz.4.2804: bad entry in directory: directory entry overrun - offset=16, inode=327694, rec_len=1024, size=56 fake=0 [ 157.921123][T11197] set_capacity_and_notify: 6 callbacks suppressed [ 157.921175][T11197] loop4: detected capacity change from 0 to 512 [ 157.949071][T11197] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 157.963344][T11197] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2819: bg 0: block 104: invalid block bitmap [ 157.982604][T11197] loop4: lost filesystem error report for type 5 error -117 [ 157.982814][T11197] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 157.990477][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 157.990498][ C0] EXT4-fs (loop4): initial error at time 1775151839: ext4_validate_block_bitmap:432 [ 157.990531][ C0] EXT4-fs (loop4): last error at time 1775151839: ext4_validate_block_bitmap:432 [ 158.028592][T11197] loop4: lost filesystem error report for type 5 error -117 [ 158.028925][T11197] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2819: invalid indirect mapped block 1 (level 1) [ 158.050657][T11197] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 158.055127][T11197] EXT4-fs (loop4): 1 truncate cleaned up [ 158.213248][T11207] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 158.229846][T11207] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 158.530405][T11230] loop1: detected capacity change from 0 to 1764 [ 158.556755][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 158.556789][ T28] audit: type=1400 audit(1775151840.288:1901): avc: denied { mount } for pid=11229 comm="syz.1.2832" name="/" dev="loop1" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 158.634615][ T28] audit: type=1400 audit(1775151840.368:1902): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 158.738334][ T28] audit: type=1400 audit(1775151840.468:1903): avc: denied { setopt } for pid=11243 comm="syz.9.2838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 158.761281][T11246] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2839'. [ 158.966819][T11266] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2857'. [ 158.983588][T11266] bond1: option primary_reselect: invalid value (8) [ 158.991474][T11266] bond1 (unregistering): Released all slaves [ 159.243331][T11285] loop9: detected capacity change from 0 to 128 [ 159.285851][T11285] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 159.308766][ T28] audit: type=1400 audit(1775151841.038:1904): avc: denied { setattr } for pid=11284 comm="syz.9.2853" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 159.355286][T11294] loop9: detected capacity change from 0 to 128 [ 159.389961][T11294] syz.9.2856: attempt to access beyond end of device [ 159.389961][T11294] loop9: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 159.404455][T11294] syz.9.2856: attempt to access beyond end of device [ 159.404455][T11294] loop9: rw=2049, sector=170, nr_sectors = 16 limit=128 [ 159.418480][T11294] syz.9.2856: attempt to access beyond end of device [ 159.418480][T11294] loop9: rw=2049, sector=202, nr_sectors = 16 limit=128 [ 159.432708][T11294] syz.9.2856: attempt to access beyond end of device [ 159.432708][T11294] loop9: rw=2049, sector=234, nr_sectors = 16 limit=128 [ 159.447850][T11294] syz.9.2856: attempt to access beyond end of device [ 159.447850][T11294] loop9: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 159.477113][ T28] audit: type=1400 audit(1775151841.208:1905): avc: denied { create } for pid=11296 comm="syz.4.2858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 159.500779][ T29] kworker/u8:1: attempt to access beyond end of device [ 159.500779][ T29] loop9: rw=1, sector=138, nr_sectors = 2 limit=128 [ 159.500817][ T28] audit: type=1400 audit(1775151841.208:1906): avc: denied { write } for pid=11296 comm="syz.4.2858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 159.570342][T11302] loop9: detected capacity change from 0 to 512 [ 159.592945][T11302] EXT4-fs: Mount option(s) incompatible with ext2 [ 159.605687][T11304] loop1: detected capacity change from 0 to 128 [ 159.719281][ T3424] Process accounting resumed [ 159.734960][ T28] audit: type=1400 audit(1775151841.458:1907): avc: denied { execute_no_trans } for pid=11312 comm="syz.1.2865" path="/557/file0" dev="tmpfs" ino=2902 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 159.766500][T11315] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2866'. [ 159.901529][ T28] audit: type=1400 audit(1775151841.628:1908): avc: denied { read } for pid=11330 comm="syz.1.2873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 159.983235][ T28] audit: type=1400 audit(1775151841.708:1909): avc: denied { ioctl } for pid=11330 comm="syz.1.2873" path="socket:[31345]" dev="sockfs" ino=31345 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 160.100271][T11341] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 160.107385][T11341] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 160.120971][T11342] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=11342 comm=syz.7.2877 [ 160.182423][T11344] loop5: detected capacity change from 0 to 512 [ 160.226128][T11344] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 160.235962][T11344] System zones: 0-2, 18-18, 34-34 [ 160.239336][T11346] syzkaller1: entered promiscuous mode [ 160.247818][T11344] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 160.269323][T11346] syzkaller1: entered allmulticast mode [ 160.279572][T11344] EXT4-fs (loop5): Remounting filesystem read-only [ 160.286244][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 160.286263][ C1] EXT4-fs (loop5): initial error at time 1775151842: ext4_mb_generate_buddy:1317 [ 160.286299][ C1] EXT4-fs (loop5): last error at time 1775151842: ext4_mb_generate_buddy:1317 [ 160.318619][T11349] loop7: detected capacity change from 0 to 4096 [ 160.328811][ T28] audit: type=1400 audit(1775151842.058:1910): avc: denied { read write } for pid=11333 comm="syz.9.2874" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 160.365096][T11344] EXT4-fs (loop5): 1 truncate cleaned up [ 160.371557][T11344] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.399556][ T3980] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 160.425018][ T3980] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 160.467417][ T3980] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 160.810621][T11384] loop5: detected capacity change from 0 to 512 [ 160.854245][T11384] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.2892: inode has both inline data and extents flags [ 160.884385][T11384] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 160.884526][T11384] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2892: couldn't read orphan inode 15 (err -117) [ 160.905999][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 160.906022][ C0] EXT4-fs (loop5): initial error at time 1775151842: ext4_orphan_get:1397: inode 15 [ 160.906055][ C0] EXT4-fs (loop5): last error at time 1775151842: ext4_orphan_get:1397: inode 15 [ 160.947674][T11390] loop9: detected capacity change from 0 to 1024 [ 160.991967][T11390] EXT4-fs (loop9): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 161.004244][T11384] loop5: lost filesystem error report for type 5 error -117 [ 161.064459][T11390] EXT4-fs error (device loop9): ext4_map_blocks:786: inode #3: block 2: comm syz.9.2894: lblock 2 mapped to illegal pblock 2 (length 1) [ 161.114570][T11390] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 161.118788][T11390] EXT4-fs error (device loop9): ext4_map_blocks:786: inode #3: block 48: comm syz.9.2894: lblock 0 mapped to illegal pblock 48 (length 1) [ 161.128120][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 161.128146][ C1] EXT4-fs (loop9): initial error at time 1775151842: ext4_map_blocks:786: inode 3: block 2 [ 161.128197][ C1] EXT4-fs (loop9): last error at time 1775151842: ext4_map_blocks:786: inode 3: block 2 [ 161.202565][T11390] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 161.212238][T11390] EXT4-fs error (device loop9): ext4_acquire_dquot:7026: comm syz.9.2894: Failed to acquire dquot type 0 [ 161.250926][T11390] loop9: lost filesystem error report for type 5 error -117 [ 161.253808][T11390] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 161.273435][T11390] loop9: lost filesystem error report for type 5 error -117 [ 161.283165][T11390] EXT4-fs error (device loop9): ext4_evict_inode:265: inode #11: comm syz.9.2894: mark_inode_dirty error [ 161.303210][T11390] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 161.304006][T11390] EXT4-fs warning (device loop9): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 161.324598][T11390] EXT4-fs (loop9): 1 orphan inode deleted [ 161.344368][ T3980] EXT4-fs error (device loop9): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 161.368670][ T3980] EXT4-fs error (device loop9): ext4_release_dquot:7062: comm kworker/u8:8: Failed to release dquot type 0 [ 161.461518][ T8993] EXT4-fs error (device loop9): __ext4_get_inode_loc:4797: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 161.486303][ T8993] loop9: lost filesystem error report for type 5 error -117 [ 161.486472][ T8993] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 161.513987][ T8993] loop9: lost filesystem error report for type 5 error -117 [ 161.514212][ T8993] EXT4-fs error (device loop9): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 161.574244][ T8993] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 161.742545][T11422] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 161.832487][T11422] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.884351][ T367] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.931484][T11436] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 161.986757][T11436] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.2913: Invalid inode bitmap blk 4 in block_group 0 [ 162.041624][T11436] loop1: lost filesystem error report for type 5 error -117 [ 162.043261][T11436] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 162.197953][T11458] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 162.203897][T11458] syzkaller0: ignored: set checksum disabled [ 162.258638][T11462] syzkaller0: tun_chr_ioctl cmd 35111 [ 162.360124][T11468] syz.4.2925: attempt to access beyond end of device [ 162.360124][T11468] loop4: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 162.395413][T11468] syz.4.2925: attempt to access beyond end of device [ 162.395413][T11468] loop4: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 162.434206][T11470] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 162.459101][ T3984] bridge_slave_1: left allmulticast mode [ 162.471862][T11470] System zones: 0-2 [ 162.471859][ T367] kworker/u8:6: attempt to access beyond end of device [ 162.471859][ T367] loop4: rw=1, sector=138, nr_sectors = 2 limit=128 [ 162.477571][T11470] , 18-18, 34-34 [ 162.494233][ T3984] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.517299][T11470] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 162.534113][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 162.540587][ C1] EXT4-fs (loop9): initial error at time 1775151844: ext4_mb_generate_buddy:1317 [ 162.550585][ C1] EXT4-fs (loop9): last error at time 1775151844: ext4_mb_generate_buddy:1317 [ 162.560292][T11470] EXT4-fs (loop9): Remounting filesystem read-only [ 162.575805][T11470] EXT4-fs (loop9): 1 truncate cleaned up [ 162.584540][T11470] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.595401][ T29] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 162.614147][ T29] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 162.629932][ T29] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 162.679249][ T3984] bridge_slave_0: left allmulticast mode [ 162.695891][ T3984] bridge_slave_0: left promiscuous mode [ 162.701674][ T3984] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.877857][ T3984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.887589][ T3984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.898113][ T3984] bond0 (unregistering): Released all slaves [ 162.926449][ T3984] tipc: Left network mode [ 162.976198][ T3984] hsr_slave_0: left promiscuous mode [ 162.985046][ T3984] hsr_slave_1: left promiscuous mode [ 162.998395][ T3984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.036673][ T3984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.072514][T11515] set_capacity_and_notify: 5 callbacks suppressed [ 163.072535][T11515] loop7: detected capacity change from 0 to 2048 [ 163.091638][T11514] loop1: detected capacity change from 0 to 1024 [ 163.098989][T11514] EXT4-fs: Ignoring removed i_version option [ 163.106056][T11514] EXT4-fs: Ignoring removed bh option [ 163.112148][T11514] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 163.125324][T11514] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (56422!=35945) [ 163.137676][ C1] sd 0:0:1:0: [sda] tag#4124 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 163.148329][ C1] sd 0:0:1:0: [sda] tag#4124 CDB: Read(6) 08 00 00 00 00 00 [ 163.162423][T11514] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 163.174575][T11514] EXT4-fs (loop1): orphan cleanup on readonly fs [ 163.185046][T11514] EXT4-fs warning (device loop1): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 163.219868][T11514] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 163.221913][ T3980] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 163.232412][T11514] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.2936: bad orphan inode 11 [ 163.252011][T11514] loop1: lost filesystem error report for type 5 error -117 [ 163.253540][ T3980] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 83 with error 28 [ 163.257224][T11514] ext4_test_bit(bit=10, block=1) = 0 [ 163.261143][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 163.275238][ T3984] team0 (unregistering): Port device team_slave_1 removed [ 163.279670][ C0] EXT4-fs (loop1): initial error at time 1775151844: ext4_orphan_get:1423 [ 163.303428][ C0] EXT4-fs (loop1): last error at time 1775151844: ext4_orphan_get:1423 [ 163.312117][ T3980] EXT4-fs (loop7): This should not happen!! Data will be lost [ 163.312117][ T3980] [ 163.313763][ T3984] team0 (unregistering): Port device team_slave_0 removed [ 163.321976][ T3980] EXT4-fs (loop7): Total free blocks count 0 [ 163.321996][ T3980] EXT4-fs (loop7): Free/Dirty block details [ 163.341267][ T3980] EXT4-fs (loop7): free_blocks=2415919104 [ 163.347268][ T3980] EXT4-fs (loop7): dirty_blocks=96 [ 163.352504][ T3980] EXT4-fs (loop7): Block reservation details [ 163.359009][ T3980] EXT4-fs (loop7): i_reserved_data_blocks=6 [ 163.367293][ T6471] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 163.442545][T11443] chnl_net:caif_netlink_parms(): no params data found [ 163.493303][T11443] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.501129][T11443] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.509427][T11443] bridge_slave_0: entered allmulticast mode [ 163.517031][T11443] bridge_slave_0: entered promiscuous mode [ 163.525874][T11443] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.533663][T11443] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.541255][T11443] bridge_slave_1: entered allmulticast mode [ 163.548604][T11443] bridge_slave_1: entered promiscuous mode [ 163.570424][T11443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.582429][T11443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.608295][T11443] team0: Port device team_slave_0 added [ 163.615736][T11443] team0: Port device team_slave_1 added [ 163.641263][T11443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.648550][T11443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.675154][T11443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.689050][T11443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.696809][T11443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.723859][T11443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.755129][T11443] hsr_slave_0: entered promiscuous mode [ 163.769539][T11443] hsr_slave_1: entered promiscuous mode [ 163.783060][T11443] debugfs: 'hsr0' already exists in 'hsr' [ 163.789572][T11443] Cannot create hsr debugfs directory [ 163.860854][T11443] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.872436][T11443] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.926645][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 163.926664][ T28] audit: type=1400 audit(1775151845.658:1926): avc: denied { mounton } for pid=11560 comm="syz.9.2950" path="/155/file1" dev="tmpfs" ino=825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 163.963166][T11563] loop4: detected capacity change from 0 to 512 [ 163.969289][T11443] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.982353][T11443] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.005216][T11563] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 164.013541][T11563] System zones: 0-2, 18-18, 34-34 [ 164.021037][T11563] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 164.035836][T11563] EXT4-fs (loop4): Remounting filesystem read-only [ 164.042868][T11563] EXT4-fs (loop4): 1 truncate cleaned up [ 164.048590][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 164.048612][ C1] EXT4-fs (loop4): initial error at time 1775151845: ext4_mb_generate_buddy:1317 [ 164.048637][ C1] EXT4-fs (loop4): last error at time 1775151845: ext4_mb_generate_buddy:1317 [ 164.080457][T11443] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.091910][T11443] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.103397][T11563] EXT4-fs mount: 32 callbacks suppressed [ 164.103411][T11563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.122519][ T12] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 164.136401][ T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 164.149291][ T12] Quota error (device loop4): write_blk: dquota write failed [ 164.157065][ T12] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 164.168162][T11563] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.179378][ T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 164.195534][T11563] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.207245][T11443] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.217817][ T12] Quota error (device loop4): write_blk: dquota write failed [ 164.225918][T11443] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.237194][ T12] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 164.248639][ T12] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 164.285209][ T12] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 164.296447][ T12] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 164.309653][ T12] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 164.365263][T11443] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 164.392432][T11443] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 164.413568][T11443] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 164.425098][T11443] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 164.469815][T11443] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.478445][T11443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.486850][T11443] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.494208][T11443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.634854][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.643230][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.715951][T11443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.728698][T11443] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.752881][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.760363][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.773820][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.781049][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.823598][ T28] audit: type=1326 audit(1775151846.548:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11614 comm="syz.9.2952" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd2846c819 code=0x0 [ 164.932037][ T3424] hid_parser_main: 9 callbacks suppressed [ 164.932137][ T3424] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 164.963308][T11443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.975353][ T3424] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 165.112104][T11443] veth0_vlan: entered promiscuous mode [ 165.124194][T11443] veth1_vlan: entered promiscuous mode [ 165.161983][T11443] veth0_macvtap: entered promiscuous mode [ 165.194723][T11443] veth1_macvtap: entered promiscuous mode [ 165.215114][T11647] loop1: detected capacity change from 0 to 2048 [ 165.237281][T11443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.248435][T11443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.258129][T11647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.286272][T11646] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 165.322035][ T3984] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.331528][ T3984] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.347674][ T3984] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.352405][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.364706][ T3984] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.416386][T11658] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2964'. [ 165.442287][T11658] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2964'. [ 165.455194][T11660] loop3: detected capacity change from 0 to 256 [ 165.498719][T11664] loop7: detected capacity change from 0 to 512 [ 165.533177][T11664] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 165.554470][T11664] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 165.575855][T11664] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.2965: bad orphan inode 4 [ 165.587537][T11664] loop7: lost filesystem error report for type 5 error -117 [ 165.587732][T11664] EXT4-fs (loop7): Remounting filesystem read-only [ 165.602180][T11664] EXT4-fs (loop7): 1 orphan inode deleted [ 165.604176][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 165.610416][T11664] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.614793][ C1] EXT4-fs (loop7): initial error at time 1775151847: ext4_orphan_get:1423 [ 165.614822][ C1] EXT4-fs (loop7): last error at time 1775151847: ext4_orphan_get:1423 [ 165.718143][T11681] loop9: detected capacity change from 0 to 512 [ 165.745122][T11681] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.758595][ T6471] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.771323][T11681] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.822065][T11689] netlink: 64859 bytes leftover after parsing attributes in process `syz.7.2974'. [ 165.862608][ T8993] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.879150][T11691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2976'. [ 165.895163][T11691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.060207][T11708] loop9: detected capacity change from 0 to 512 [ 166.072424][T11708] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 166.157079][T11708] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.164273][T11710] tipc: Started in network mode [ 166.183105][T11708] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.203107][T11710] tipc: Node identity ac14140f, cluster identity 4711 [ 166.244829][T11710] tipc: New replicast peer: 255.255.255.255 [ 166.276774][T11710] tipc: Enabled bearer , priority 10 [ 166.303215][ T8993] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.245276][T11804] batadv_slave_1: entered promiscuous mode [ 167.251987][T11803] batadv_slave_1: left promiscuous mode [ 167.394238][ T7944] tipc: Node number set to 2886997007 [ 167.426036][T11822] loop1: detected capacity change from 0 to 2048 [ 167.525313][T11822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.705362][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.763437][ T8201] udevd[8201]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 167.769670][T11842] loop7: detected capacity change from 0 to 1024 [ 167.805016][T11842] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 167.837441][T11842] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.3035: Invalid block bitmap block 0 in block_group 0 [ 167.853879][T11842] loop7: lost filesystem error report for type 5 error -117 [ 167.854116][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 167.868360][ C0] EXT4-fs (loop7): initial error at time 1775151849: ext4_read_block_bitmap_nowait:483 [ 167.878342][ C0] EXT4-fs (loop7): last error at time 1775151849: ext4_read_block_bitmap_nowait:483 [ 167.889184][T11842] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.3035: Failed to acquire dquot type 0 [ 167.901351][T11842] loop7: lost filesystem error report for type 5 error -117 [ 167.911515][T11842] EXT4-fs error (device loop7): ext4_free_blocks:6724: comm syz.7.3035: Freeing blocks not in datazone - block = 0, count = 4096 [ 167.942940][T11842] loop7: lost filesystem error report for type 5 error -117 [ 167.943201][T11842] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.3035: Invalid inode bitmap blk 0 in block_group 0 [ 167.964192][T11842] loop7: lost filesystem error report for type 5 error -117 [ 167.972320][T11842] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 167.989267][T11842] loop7: lost filesystem error report for type 5 error -117 [ 167.989321][ T29] EXT4-fs error (device loop7): ext4_release_dquot:7062: comm kworker/u8:1: Failed to release dquot type 0 [ 168.017474][T11842] EXT4-fs (loop7): 1 orphan inode deleted [ 168.023821][T11842] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.041676][T11857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.057280][T11859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.074265][T11857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.083624][T11859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.100735][T11842] syz.7.3035 (11842) used greatest stack depth: 8248 bytes left [ 168.115742][ T6471] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.275989][T11875] FAT-fs (loop15): unable to read boot sector [ 168.661038][T11912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3060'. [ 169.004906][T11946] loop1: detected capacity change from 0 to 256 [ 169.220805][T11973] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3077'. [ 169.320004][T11984] loop4: detected capacity change from 0 to 1024 [ 169.332169][T11984] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.349704][T11984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.441861][T10669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.489048][T11993] netlink: 'syz.7.3085': attribute type 3 has an invalid length. [ 169.497632][T11993] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3085'. [ 169.554358][T11999] netlink: 'syz.3.3087': attribute type 12 has an invalid length. [ 169.562507][T11999] netlink: 'syz.3.3087': attribute type 29 has an invalid length. [ 169.593217][T11999] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3087'. [ 169.657295][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 169.657333][ T28] audit: type=1400 audit(1775151851.388:1951): avc: denied { create } for pid=12005 comm="syz.3.3090" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 169.754802][ T28] audit: type=1326 audit(1775151851.478:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12008 comm="syz.7.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7b80c819 code=0x7ffc0000 [ 169.807571][ T28] audit: type=1326 audit(1775151851.478:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12008 comm="syz.7.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7b80c819 code=0x7ffc0000 [ 169.833261][ T28] audit: type=1326 audit(1775151851.478:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12008 comm="syz.7.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7ffa7b80c819 code=0x7ffc0000 [ 169.858554][ T28] audit: type=1326 audit(1775151851.478:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12008 comm="syz.7.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7b80c819 code=0x7ffc0000 [ 169.885249][ T28] audit: type=1326 audit(1775151851.478:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12008 comm="syz.7.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa7b80c819 code=0x7ffc0000 [ 169.910257][ T28] audit: type=1326 audit(1775151851.528:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12015 comm="syz.1.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5698c819 code=0x7ffc0000 [ 169.948219][ T28] audit: type=1326 audit(1775151851.528:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12015 comm="syz.1.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5698c819 code=0x7ffc0000 [ 170.059408][ T28] audit: type=1326 audit(1775151851.538:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12015 comm="syz.1.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fab5698c819 code=0x7ffc0000 [ 170.083716][ T28] audit: type=1326 audit(1775151851.528:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12015 comm="syz.1.3093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5698c819 code=0x7ffc0000 [ 170.183038][T12032] loop7: detected capacity change from 0 to 512 [ 170.234691][T12032] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 170.267078][T12032] EXT4-fs (loop7): 1 orphan inode deleted [ 170.275148][T12032] EXT4-fs (loop7): 1 truncate cleaned up [ 170.281365][T12032] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.315319][T12032] EXT4-fs error (device loop7): ext4_search_dir:1474: inode #12: block 7: comm syz.7.3099: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 170.388482][T12046] SELinux: policydb magic number 0xbb9b4302 does not match expected magic number 0xf97cff8c [ 170.407152][T12046] SELinux: failed to load policy [ 170.414562][T12032] EXT4-fs (loop7): Remounting filesystem read-only [ 170.453340][ T10] kernel read not supported for file /member (pid: 10 comm: kworker/0:1) [ 170.466931][ T6471] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.557199][T12058] loop4: detected capacity change from 0 to 128 [ 170.576056][T12058] FAT-fs (loop4): bogus logical sector size 759 [ 170.585970][T12058] FAT-fs (loop4): Can't find a valid FAT filesystem [ 170.689499][T12070] netlink: 'syz.1.3115': attribute type 4 has an invalid length. [ 170.698503][T12070] netlink: 'syz.1.3115': attribute type 4 has an invalid length. [ 171.076176][T12088] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 171.263787][T12112] loop7: detected capacity change from 0 to 512 [ 171.335069][T12112] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.358679][T12120] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3134'. [ 171.368927][T12112] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.543067][ T6471] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.568086][T12129] loop4: detected capacity change from 0 to 512 [ 171.593915][T12129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.619525][T12129] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.619585][T12136] loop1: detected capacity change from 0 to 256 [ 171.624432][T12138] loop7: detected capacity change from 0 to 128 [ 171.646273][T12136] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.685293][T10669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.715969][T12142] loop9: detected capacity change from 0 to 256 [ 171.770408][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264) [ 171.802724][T12145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.818455][T12143] FAT-fs (loop1): Filesystem has been set read-only [ 171.861352][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 171.880081][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 171.897461][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 171.948605][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 171.960436][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 171.969280][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 171.977405][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 171.985806][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 171.994566][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 172.002888][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 172.049613][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 172.087043][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 172.102631][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 172.111663][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 172.125217][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 172.143606][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 172.151975][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 172.172535][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 172.181968][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 172.191474][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 172.202267][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 172.211147][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 172.219602][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 172.238114][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 172.246321][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 172.266248][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 172.299277][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 172.308357][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 172.316989][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 172.328030][T12143] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 172.412774][T12172] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 172.423344][T12172] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0005 l2 [ 172.650111][T12192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.664590][T12192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.755236][ T29] bridge_slave_1: left allmulticast mode [ 172.773250][ T29] bridge_slave_1: left promiscuous mode [ 172.781353][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.791802][ T29] bridge_slave_0: left allmulticast mode [ 172.808526][ T29] bridge_slave_0: left promiscuous mode [ 172.826379][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.054289][T12220] loop9: detected capacity change from 0 to 512 [ 173.062452][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.095760][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.124809][ T29] bond0 (unregistering): Released all slaves [ 173.135152][T12220] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.154270][T12220] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.209952][ T29] hsr_slave_0: left promiscuous mode [ 173.228490][ T29] hsr_slave_1: left promiscuous mode [ 173.249516][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.266597][ T8993] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.278132][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.286640][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.312337][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.331959][ T29] veth1_macvtap: left promiscuous mode [ 173.345388][ T29] veth0_macvtap: left promiscuous mode [ 173.365996][ T29] veth1_vlan: left promiscuous mode [ 173.372321][ T29] veth0_vlan: left promiscuous mode [ 173.531393][ T29] team0 (unregistering): Port device team_slave_1 removed [ 173.543465][ T29] team0 (unregistering): Port device team_slave_0 removed [ 173.577396][T12192] Set syz1 is full, maxelem 65536 reached [ 173.658986][T12240] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.677500][T12240] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.717543][ T29] IPVS: stop unused estimator thread 0... [ 173.740430][ T8993] EXT4-fs error (device loop9): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 173.794844][T12256] netlink: 'syz.1.3192': attribute type 21 has an invalid length. [ 173.810798][T12256] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.820353][T12256] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 173.827765][T12256] IPv6: NLM_F_CREATE should be set when creating new route [ 173.835367][T12256] IPv6: NLM_F_CREATE should be set when creating new route [ 173.842679][T12256] IPv6: NLM_F_CREATE should be set when creating new route [ 173.854464][ T8993] EXT4-fs (loop9): Remounting filesystem read-only [ 173.888837][ T9604] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.904231][ T3984] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 173.939484][ T367] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.989228][ T367] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.057128][ T367] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.096590][T12259] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3194'. [ 174.150776][ T367] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.317172][ T367] bridge_slave_1: left allmulticast mode [ 174.335086][ T367] bridge_slave_1: left promiscuous mode [ 174.354300][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.381272][ T367] bridge_slave_0: left allmulticast mode [ 174.392774][ T367] bridge_slave_0: left promiscuous mode [ 174.411219][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.634916][ T367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.656914][ T367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.683749][ T367] bond0 (unregistering): Released all slaves [ 174.710051][T12303] set_capacity_and_notify: 1 callbacks suppressed [ 174.710070][T12303] loop7: detected capacity change from 0 to 256 [ 174.745968][T12303] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.757869][ T367] hsr_slave_0: left promiscuous mode [ 174.774770][ T367] hsr_slave_1: left promiscuous mode [ 174.794070][ T367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.816766][ T367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.842964][ T367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.855348][ T367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.867522][ T367] veth1_macvtap: left allmulticast mode [ 174.878181][ T367] veth1_macvtap: left promiscuous mode [ 174.886966][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779264) [ 174.895532][ T367] veth0_macvtap: left promiscuous mode [ 174.901077][ T367] veth1_vlan: left promiscuous mode [ 174.907047][T12314] FAT-fs (loop7): Filesystem has been set read-only [ 174.914202][ T367] veth0_vlan: left promiscuous mode [ 174.920285][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 174.950712][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 174.969710][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 174.977921][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 174.986519][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 174.995697][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 175.005356][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 175.014070][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 175.022717][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 175.031275][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 175.039819][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 175.048141][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 175.056766][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 175.065376][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 175.091134][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 175.108372][ T367] team0 (unregistering): Port device team_slave_1 removed [ 175.116992][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 175.125729][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 175.135084][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 175.135783][ T367] team0 (unregistering): Port device team_slave_0 removed [ 175.143113][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 175.159703][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 175.168409][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 175.176791][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 175.185363][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 175.194036][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 175.204643][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 175.213147][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 175.221810][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 175.230445][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 175.238918][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 175.247856][T12314] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 175.336106][T12328] loop1: detected capacity change from 0 to 1024 [ 175.343248][T12328] EXT4-fs: Ignoring removed bh option [ 175.380135][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 175.380151][ T28] audit: type=1326 audit(1775151857.108:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12335 comm="syz.4.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec244c819 code=0x7ffc0000 [ 175.416178][T12328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.429326][ T28] audit: type=1326 audit(1775151857.108:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12335 comm="syz.4.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec244c819 code=0x7ffc0000 [ 175.439802][T12332] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.456406][ T28] audit: type=1326 audit(1775151857.108:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12335 comm="syz.4.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ec244c819 code=0x7ffc0000 [ 175.491863][ T28] audit: type=1326 audit(1775151857.118:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12335 comm="syz.4.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec244c819 code=0x7ffc0000 [ 175.516819][ T28] audit: type=1326 audit(1775151857.118:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12335 comm="syz.4.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec244c819 code=0x7ffc0000 [ 175.540714][ T28] audit: type=1326 audit(1775151857.128:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12335 comm="syz.4.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f6ec244c819 code=0x7ffc0000 [ 175.570634][T12262] chnl_net:caif_netlink_parms(): no params data found [ 175.588964][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.603433][ T28] audit: type=1326 audit(1775151857.128:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12335 comm="syz.4.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec244c819 code=0x7ffc0000 [ 175.648932][T12332] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.661984][ T28] audit: type=1326 audit(1775151857.128:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12335 comm="syz.4.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec244c819 code=0x7ffc0000 [ 175.687381][T12351] loop7: detected capacity change from 0 to 1024 [ 175.700529][ T28] audit: type=1326 audit(1775151857.128:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12335 comm="syz.4.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ec244c819 code=0x7ffc0000 [ 175.720614][T12351] EXT4-fs (loop7): bad geometry: bigalloc file system with non-zero first_data_block [ 175.720614][T12351] [ 175.728731][ T28] audit: type=1326 audit(1775151857.128:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12335 comm="syz.4.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec244c819 code=0x7ffc0000 [ 175.793744][T12345] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 175.804995][T12345] SELinux: failed to load policy [ 175.825335][T12332] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.862298][T12262] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.869834][T12262] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.877804][T12262] bridge_slave_0: entered allmulticast mode [ 175.885101][T12262] bridge_slave_0: entered promiscuous mode [ 175.895302][T12332] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.909648][T12262] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.917433][T12262] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.925199][T12262] bridge_slave_1: entered allmulticast mode [ 175.932066][T12262] bridge_slave_1: entered promiscuous mode [ 175.958630][T12262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.973869][ T3982] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.992407][T12262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.024999][ T3984] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.036534][T12262] team0: Port device team_slave_0 added [ 176.043750][T12262] team0: Port device team_slave_1 added [ 176.068707][ T29] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.116671][ T29] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.131838][T12262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.139335][T12262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.172915][T12262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.187557][T12262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.195134][T12262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.223638][T12262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.279331][T12383] loop4: detected capacity change from 0 to 512 [ 176.303241][T12262] hsr_slave_0: entered promiscuous mode [ 176.309637][T12262] hsr_slave_1: entered promiscuous mode [ 176.319239][T12262] debugfs: 'hsr0' already exists in 'hsr' [ 176.326160][T12262] Cannot create hsr debugfs directory [ 176.347073][T12383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.389720][T12383] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.513919][T10669] EXT4-fs error (device loop4): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 176.546941][T10669] EXT4-fs (loop4): Remounting filesystem read-only [ 176.795736][T10669] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.805803][ T29] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 176.819804][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.898225][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.942663][T12262] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 176.992328][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.005161][T12262] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 177.020354][T12262] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 177.042463][T12262] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 177.073850][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.156512][T12262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.178307][T12262] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.205698][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.213396][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.245840][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.253210][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.334736][ T50] bridge_slave_1: left allmulticast mode [ 177.344444][ T50] bridge_slave_1: left promiscuous mode [ 177.350456][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.365555][ T50] bridge_slave_0: left allmulticast mode [ 177.371301][ T50] bridge_slave_0: left promiscuous mode [ 177.378757][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.457470][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.476184][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.495323][ T50] bond0 (unregistering): Released all slaves [ 177.540141][T12262] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.551085][T12262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.595351][ T50] tipc: Disabling bearer [ 177.600932][ T50] tipc: Left network mode [ 177.645961][ T50] hsr_slave_0: left promiscuous mode [ 177.671546][ T50] hsr_slave_1: left promiscuous mode [ 177.691829][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.704251][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.713175][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.725964][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.738951][ T50] veth1_macvtap: left promiscuous mode [ 177.753752][ T50] veth0_macvtap: left promiscuous mode [ 177.760647][ T50] veth1_vlan: left promiscuous mode [ 177.771897][ T50] veth0_vlan: left promiscuous mode [ 177.784167][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 177.784787][ T3567] Bluetooth: hci0: command 0x1003 tx timeout [ 177.910563][ T50] team0 (unregistering): Port device team_slave_1 removed [ 177.920808][ T50] team0 (unregistering): Port device team_slave_0 removed [ 177.973524][T12445] chnl_net:caif_netlink_parms(): no params data found [ 178.057204][T12445] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.064648][T12445] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.072011][T12445] bridge_slave_0: entered allmulticast mode [ 178.089179][T12445] bridge_slave_0: entered promiscuous mode [ 178.099222][T12445] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.114564][T12445] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.122855][T12445] bridge_slave_1: entered allmulticast mode [ 178.130088][T12445] bridge_slave_1: entered promiscuous mode [ 178.171879][T12445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.185731][T12445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.216547][T12262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.279450][T12445] team0: Port device team_slave_0 added [ 178.288747][T12445] team0: Port device team_slave_1 added [ 178.336638][T12445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.343882][T12445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.399277][T12445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.430411][T12445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.444738][T12445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.471676][T12445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.573657][T12445] hsr_slave_0: entered promiscuous mode [ 178.580056][T12445] hsr_slave_1: entered promiscuous mode [ 178.587990][T12445] debugfs: 'hsr0' already exists in 'hsr' [ 178.593944][T12445] Cannot create hsr debugfs directory [ 178.615158][T12262] veth0_vlan: entered promiscuous mode [ 178.629432][T12262] veth1_vlan: entered promiscuous mode [ 178.648952][T12262] veth0_macvtap: entered promiscuous mode [ 178.657215][T12262] veth1_macvtap: entered promiscuous mode [ 178.687604][T12262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.711918][T12262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.730871][T12609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3258'. [ 178.742942][T12609] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3258'. [ 178.778024][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.801682][T12609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3258'. [ 178.821023][T12617] loop1: detected capacity change from 0 to 512 [ 178.822560][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.837976][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.846027][T12609] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3258'. [ 178.883027][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.893116][ T50] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.903535][T12617] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #3: comm syz.1.3260: corrupted inode contents [ 178.916993][ T50] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.926464][T12617] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 178.926733][T12617] EXT4-fs error (device loop1): ext4_dirty_inode:6495: inode #3: comm syz.1.3260: mark_inode_dirty error [ 178.936336][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 178.936360][ C1] EXT4-fs (loop1): initial error at time 1775152116: ext4_do_update_inode:5602: inode 3 [ 178.936396][ C1] EXT4-fs (loop1): last error at time 1775152116: ext4_do_update_inode:5602: inode 3 [ 178.974692][T12617] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 178.976921][T12617] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #3: comm syz.1.3260: corrupted inode contents [ 178.998747][T12617] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 179.000270][T12617] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.3260: mark_inode_dirty error [ 179.021292][T12617] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 179.023373][T12617] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.3260: Failed to acquire dquot type 0 [ 179.026670][ T3980] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.033858][T12617] loop1: lost filesystem error report for type 5 error -117 [ 179.052840][T12624] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3261'. [ 179.081376][T12617] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #16: comm syz.1.3260: corrupted inode contents [ 179.095516][T12617] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 179.095690][T12617] EXT4-fs error (device loop1): ext4_dirty_inode:6495: inode #16: comm syz.1.3260: mark_inode_dirty error [ 179.117205][T12617] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 179.121373][T12617] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #16: comm syz.1.3260: corrupted inode contents [ 179.144717][T12624] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3261'. [ 179.164433][T12617] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 179.164934][ T3980] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.167487][T12617] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.3260: mark_inode_dirty error [ 179.195428][T12624] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3261'. [ 179.205332][T12617] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 179.205600][T12617] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #16: comm syz.1.3260: corrupted inode contents [ 179.274699][T12617] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 179.274880][T12617] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 179.295802][T12617] loop1: lost filesystem error report for type 5 error -117 [ 179.296117][T12617] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #16: comm syz.1.3260: corrupted inode contents [ 179.319758][T12617] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 179.319992][T12617] EXT4-fs error (device loop1): ext4_truncate:4602: inode #16: comm syz.1.3260: mark_inode_dirty error [ 179.342335][T12617] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 179.361394][T12617] loop1: lost filesystem error report for type 5 error -117 [ 179.362005][T12617] EXT4-fs (loop1): 1 truncate cleaned up [ 179.380865][T12647] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3267'. [ 179.381441][T12617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.427610][T12617] ext4 filesystem being mounted at /638/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.513589][T12445] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 179.559841][T12445] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 179.577609][T12617] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #3: comm syz.1.3260: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 179.577609][T12617] [ 179.606800][T12445] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 179.633393][T12445] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 179.739597][T12445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.776160][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.787539][T12699] loop2: detected capacity change from 0 to 128 [ 179.791184][T12445] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.815212][ T3982] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.822736][ T3982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.889970][T12708] futex_wake_op: syz.2.3287 tries to shift op by -1; fix this program [ 179.901790][ T3982] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.909135][ T3982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.938985][T12445] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 179.956078][T12445] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.091047][T12445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.134527][T12736] loop1: detected capacity change from 0 to 128 [ 180.248650][T12445] veth0_vlan: entered promiscuous mode [ 180.259198][T12445] veth1_vlan: entered promiscuous mode [ 180.321547][T12445] veth0_macvtap: entered promiscuous mode [ 180.337087][T12445] veth1_macvtap: entered promiscuous mode [ 180.343865][T12762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.360699][T12445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.368573][T12762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.382499][T12445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.396863][ T367] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.406667][ T367] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.431875][ T367] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.441648][ T3982] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.042912][T12826] loop1: detected capacity change from 0 to 512 [ 181.069826][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 181.069846][ T28] audit: type=1400 audit(1775152374.803:2052): avc: denied { getopt } for pid=12830 comm="syz.2.3307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 181.075834][T12826] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 181.157109][T12826] EXT4-fs (loop1): 1 truncate cleaned up [ 181.163274][T12826] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.280842][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.421463][ T28] audit: type=1400 audit(1775152375.153:2053): avc: denied { nlmsg_read } for pid=12852 comm="syz.7.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 181.445302][T12856] netlink: 164 bytes leftover after parsing attributes in process `syz.7.3311'. [ 181.567692][ T28] audit: type=1400 audit(1775152375.303:2054): avc: denied { setopt } for pid=12862 comm="syz.3.3314" lport=43426 faddr=::ffff:172.30.0.4 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 181.642910][T12877] syzkaller1: entered promiscuous mode [ 181.656117][T12877] syzkaller1: entered allmulticast mode [ 181.762303][T12881] loop0: detected capacity change from 0 to 8192 [ 182.290711][T12921] loop1: detected capacity change from 0 to 512 [ 182.350960][T12921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.365717][T12921] ext4 filesystem being mounted at /650/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.428925][T12935] netlink: 'syz.2.3325': attribute type 1 has an invalid length. [ 182.454593][T12935] netlink: 'syz.2.3325': attribute type 4 has an invalid length. [ 182.463119][T12935] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3325'. [ 182.555457][ T28] audit: type=1326 audit(1775152376.293:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.3.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dafcc819 code=0x7ffc0000 [ 182.657545][ T28] audit: type=1326 audit(1775152376.293:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.3.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dafcc819 code=0x7ffc0000 [ 182.714259][ T28] audit: type=1326 audit(1775152376.293:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.3.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dafcc819 code=0x7ffc0000 [ 182.744541][ T28] audit: type=1326 audit(1775152376.293:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.3.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb5dafcc819 code=0x7ffc0000 [ 182.770248][ T28] audit: type=1326 audit(1775152376.323:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.3.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dafcc819 code=0x7ffc0000 [ 182.794620][T12963] loop7: detected capacity change from 0 to 764 [ 182.822958][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.833867][ T28] audit: type=1326 audit(1775152376.343:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.3.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dafcc819 code=0x7ffc0000 [ 182.859143][ T28] audit: type=1326 audit(1775152376.343:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.3.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dafcc819 code=0x7ffc0000 [ 182.958840][T12979] ip6gre2: entered allmulticast mode [ 183.018143][T12988] loop2: detected capacity change from 0 to 512 [ 183.057636][T12995] loop1: detected capacity change from 0 to 512 [ 183.061814][T12988] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.072962][T12995] EXT4-fs: Ignoring removed oldalloc option [ 183.108498][T12988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 183.124414][T12995] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3344: invalid indirect mapped block 4294967295 (level 1) [ 183.152117][T12988] ext4 filesystem being mounted at /20/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.168930][T12995] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3344: invalid indirect mapped block 4294967295 (level 1) [ 183.183400][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 183.183429][ C1] EXT4-fs (loop1): initial error at time 1775152376: ext4_free_branches:1023: inode 11 [ 183.183473][ C1] EXT4-fs (loop1): last error at time 1775152376: ext4_free_branches:1023: inode 11 [ 183.223653][T12995] EXT4-fs (loop1): 2 truncates cleaned up [ 183.235207][T12995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.258737][T12262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 183.458172][T13028] netlink: 'syz.2.3354': attribute type 2 has an invalid length. [ 183.535236][T13028] netlink: 'syz.2.3354': attribute type 1 has an invalid length. [ 183.778376][T13063] __nla_validate_parse: 1 callbacks suppressed [ 183.778394][T13063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3362'. [ 183.813210][T13063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3362'. [ 183.832794][T13063] netlink: 'syz.3.3362': attribute type 7 has an invalid length. [ 183.854421][T13063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3362'. [ 183.879113][T13063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3362'. [ 183.904140][T13063] netlink: 'syz.3.3362': attribute type 7 has an invalid length. [ 184.006810][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.123055][T13091] loop0: detected capacity change from 0 to 256 [ 184.142055][T13091] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 184.186430][T13091] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 184.276716][T13102] netlink: 'syz.0.3371': attribute type 1 has an invalid length. [ 184.342915][T13102] bond1 (unregistering): Released all slaves [ 184.784421][T13145] loop0: detected capacity change from 0 to 128 [ 184.838613][T13145] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.856004][T13145] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 185.009064][T12445] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 185.223128][T13190] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.3393'. [ 185.331305][T13205] loop1: detected capacity change from 0 to 2048 [ 185.379823][T13205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.495936][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.678441][T13228] loop7: detected capacity change from 0 to 8192 [ 185.876852][T13248] bridge0: port 3(ipvlan2) entered blocking state [ 185.889107][T13248] bridge0: port 3(ipvlan2) entered disabled state [ 185.899338][T13248] ipvlan2: entered allmulticast mode [ 185.904822][T13248] bridge0: entered allmulticast mode [ 185.914017][T13248] ipvlan2: left allmulticast mode [ 185.927056][T13248] bridge0: left allmulticast mode [ 186.790872][T13350] loop2: detected capacity change from 0 to 512 [ 186.820904][T13350] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.845556][T13350] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 186.880538][T13350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.895036][T13350] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.967400][T13363] netlink: 'syz.3.3421': attribute type 21 has an invalid length. [ 186.984394][T13363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3421'. [ 186.994048][T13363] netlink: 'syz.3.3421': attribute type 21 has an invalid length. [ 187.002748][T13363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3421'. [ 187.007286][T12262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.083425][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 187.083483][ T28] audit: type=1400 audit(1775152380.813:2092): avc: denied { bind } for pid=13370 comm="syz.2.3422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 187.147272][ T28] audit: type=1400 audit(1775152380.853:2093): avc: denied { listen } for pid=13370 comm="syz.2.3422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 187.172737][T13376] can0: slcan on ttyS3. [ 187.195434][T13376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.215387][T13376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.264161][T13376] can0 (unregistered): slcan off ttyS3. [ 187.597621][T13415] loop2: detected capacity change from 0 to 128 [ 187.619486][T13415] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 187.648133][T13416] loop1: detected capacity change from 0 to 1764 [ 187.662245][T13415] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 187.674232][T13415] FAT-fs (loop2): Filesystem has been set read-only [ 187.681992][T13416] ISOFS: Unable to identify CD-ROM format. [ 187.689476][T13415] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 187.715523][T13415] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 187.758848][T13419] loop1: detected capacity change from 0 to 512 [ 187.768596][T13419] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 187.815051][T13419] EXT4-fs (loop1): 1 orphan inode deleted [ 187.821935][T13419] EXT4-fs (loop1): 1 truncate cleaned up [ 187.828224][T13419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.906156][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.556860][T13484] xt_hashlimit: size too large, truncated to 1048576 [ 190.290888][T13504] netlink: 'syz.7.3464': attribute type 7 has an invalid length. [ 190.321818][ T3980] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.331100][ T3980] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.340090][T13504] netlink: 'syz.7.3464': attribute type 7 has an invalid length. [ 190.477719][ T3980] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.499351][ T3980] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.773381][T13535] loop1: detected capacity change from 0 to 256 [ 190.784187][T13535] FAT-fs (loop1): bogus number of FAT sectors [ 190.790520][T13535] FAT-fs (loop1): Can't find a valid FAT filesystem [ 190.869444][T13538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.904040][T13538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.930758][T13538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.958687][T13538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.759386][T13584] loop7: detected capacity change from 0 to 764 [ 191.788578][T13584] ISOFS: unable to read i-node block [ 191.804754][T13586] loop2: detected capacity change from 0 to 256 [ 191.851941][T13591] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 191.851941][T13591] The task syz.0.3496 (13591) triggered the difference, watch for misbehavior. [ 192.035007][ T28] audit: type=1400 audit(1775152385.773:2094): avc: denied { ioctl } for pid=13602 comm="syz.7.3502" path="socket:[38586]" dev="sockfs" ino=38586 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 192.091626][T13606] netlink: 180 bytes leftover after parsing attributes in process `syz.7.3503'. [ 192.101641][T13606] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3503'. [ 192.458555][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3514'. [ 192.468508][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3514'. [ 192.513272][T13631] loop7: detected capacity change from 0 to 8192 [ 192.540037][ T6471] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 192.548322][ T6471] FAT-fs (loop7): Filesystem has been set read-only [ 192.613768][ T28] audit: type=1400 audit(1775152386.343:2095): avc: denied { write } for pid=13644 comm="syz.7.3519" lport=48536 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 192.988682][ T28] audit: type=1400 audit(1775152386.723:2096): avc: denied { write } for pid=13681 comm="syz.7.3543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 193.056004][T13684] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3532'. [ 193.070937][T13684] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3532'. [ 193.085061][T13686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3533'. [ 193.098571][T13689] loop7: detected capacity change from 0 to 1024 [ 193.128726][T13689] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.168383][T13694] loop1: detected capacity change from 0 to 128 [ 193.218553][T13694] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 193.289693][T13694] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 193.297813][T13694] FAT-fs (loop1): Filesystem has been set read-only [ 193.304871][T13694] syz.1.3535: attempt to access beyond end of device [ 193.304871][T13694] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 193.436941][T13701] netlink: 'syz.0.3538': attribute type 10 has an invalid length. [ 193.465388][T13701] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.473812][T13701] bond0: (slave team0): Enslaving as an active interface with an up link [ 193.521093][T13703] netlink: 'syz.1.3539': attribute type 9 has an invalid length. [ 193.548263][T13703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3539'. [ 193.575247][ T50] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.584414][T13703] netlink: 'syz.1.3539': attribute type 9 has an invalid length. [ 193.593305][ T50] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.603387][T13703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3539'. [ 193.624436][ T50] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.633932][ T50] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.833202][ T6471] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.948737][T13733] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3553'. [ 194.032596][ T28] audit: type=1400 audit(1775152387.763:2097): avc: denied { watch } for pid=13736 comm="syz.1.3554" path="/698/file0" dev="tmpfs" ino=3638 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 194.156620][ T28] audit: type=1400 audit(1775152387.893:2098): avc: denied { append } for pid=13744 comm="syz.1.3558" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.391520][ T7968] kernel write not supported for file bpf-prog (pid: 7968 comm: kworker/1:12) [ 194.405452][ T3980] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.489650][ T3980] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.597622][ T3980] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.667249][ T3980] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.780341][ T3980] bridge_slave_1: left allmulticast mode [ 194.786439][ T3980] bridge_slave_1: left promiscuous mode [ 194.792468][ T3980] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.802008][ T3980] bridge_slave_0: left allmulticast mode [ 194.807916][ T3980] bridge_slave_0: left promiscuous mode [ 194.813847][ T3980] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.906069][ T3980] bond0 (unregistering): left promiscuous mode [ 194.913868][ T3980] bond_slave_0: left promiscuous mode [ 194.920272][ T3980] bond_slave_1: left promiscuous mode [ 194.931727][ T3980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.941448][ T3980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.951586][ T3980] bond0 (unregistering): Released all slaves [ 194.995514][T13799] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.015457][ T3980] hsr_slave_0: left promiscuous mode [ 195.021300][ T3980] hsr_slave_1: left promiscuous mode [ 195.097569][T13771] chnl_net:caif_netlink_parms(): no params data found [ 195.122816][T13799] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.252840][T13799] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.320781][T13771] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.337473][T13771] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.350203][T13771] bridge_slave_0: entered allmulticast mode [ 195.357471][T13771] bridge_slave_0: entered promiscuous mode [ 195.378874][T13799] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.411962][T13771] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.427213][T13771] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.439138][T13771] bridge_slave_1: entered allmulticast mode [ 195.450006][T13771] bridge_slave_1: entered promiscuous mode [ 195.469011][T13834] loop2: detected capacity change from 0 to 512 [ 195.477811][ T3980] IPVS: stop unused estimator thread 0... [ 195.510668][ T3984] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.520555][T13834] EXT4-fs: Ignoring removed bh option [ 195.528638][T13834] EXT4-fs: inline encryption not supported [ 195.543731][T13771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.563899][T13834] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 195.573438][ T3984] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.573677][ T3984] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.597301][T13771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.623029][ T3984] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.653756][T13834] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 195.696022][T13771] team0: Port device team_slave_0 added [ 195.707156][T13834] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3585: bg 0: block 248: padding at end of block bitmap is not set [ 195.729708][T13771] team0: Port device team_slave_1 added [ 195.738146][T13834] loop2: lost filesystem error report for type 5 error -117 [ 195.741432][T13834] Quota error (device loop2): write_blk: dquota write failed [ 195.749708][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 195.749737][ C1] EXT4-fs (loop2): last error at time 1775152389: ext4_validate_block_bitmap:441 [ 195.775593][T13834] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 195.789910][T13834] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.3585: Failed to acquire dquot type 1 [ 195.813083][T13834] loop2: lost filesystem error report for type 5 error -28 [ 195.813746][T13834] EXT4-fs (loop2): 1 truncate cleaned up [ 195.822875][T13771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.876139][T13771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.886845][T13834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 195.922821][T13771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.936292][T13771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.944044][T13771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.009061][T13771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.017649][T13870] netlink: 'syz.3.3591': attribute type 10 has an invalid length. [ 196.033927][T13870] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.042902][T13870] bond0: (slave team0): Enslaving as an active interface with an up link [ 196.110651][T13771] hsr_slave_0: entered promiscuous mode [ 196.117291][T13771] hsr_slave_1: entered promiscuous mode [ 196.326135][T12262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 197.139322][ T28] audit: type=1326 audit(1775152390.873:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14006 comm="syz.3.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dafcc819 code=0x7ffc0000 [ 197.174745][ T28] audit: type=1326 audit(1775152390.873:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14006 comm="syz.3.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dafcc819 code=0x7ffc0000 [ 197.203208][ T28] audit: type=1326 audit(1775152390.873:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14006 comm="syz.3.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dafcc819 code=0x7ffc0000 [ 197.228986][ T28] audit: type=1326 audit(1775152390.873:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14006 comm="syz.3.3609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5dafcc819 code=0x7ffc0000 [ 197.441176][ T7968] kernel write not supported for file bpf-prog (pid: 7968 comm: kworker/1:12) [ 199.493673][T13924] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 199.505101][T13771] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 199.524054][T13771] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 199.546714][T13771] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 199.574718][ T7968] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.584878][T13771] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 199.604712][ T7968] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 199.628908][T14210] __nla_validate_parse: 1 callbacks suppressed [ 199.628927][T14210] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3618'. [ 199.745031][T14229] loop2: detected capacity change from 0 to 512 [ 199.782306][T14229] tipc: Started in network mode [ 199.804865][T14229] tipc: Node identity ac1414aa, cluster identity 4711 [ 199.840805][T14229] tipc: Enabling of bearer rejected, failed to enable media [ 199.900301][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 199.900320][ T28] audit: type=1400 audit(1775152393.633:2119): avc: denied { map } for pid=14237 comm="syz.1.3623" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.972025][T13771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.016714][T14247] loop2: detected capacity change from 0 to 128 [ 200.085849][T13771] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.108642][ T3980] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.116023][ T3980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.145912][T13771] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 200.159250][T13771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.186295][ T3980] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.194049][ T3980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.288459][ T3980] kworker/u8:8: attempt to access beyond end of device [ 200.288459][ T3980] loop2: rw=1, sector=145, nr_sectors = 40 limit=128 [ 200.322672][T13771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.331081][ T3980] kworker/u8:8: attempt to access beyond end of device [ 200.331081][ T3980] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 200.346094][T14274] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.357993][ T3980] kworker/u8:8: attempt to access beyond end of device [ 200.357993][ T3980] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 200.375135][ T3980] kworker/u8:8: attempt to access beyond end of device [ 200.375135][ T3980] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 200.375532][T14271] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 200.389222][ T3980] kworker/u8:8: attempt to access beyond end of device [ 200.389222][ T3980] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 200.414845][ T3980] kworker/u8:8: attempt to access beyond end of device [ 200.414845][ T3980] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 200.430066][ T3980] kworker/u8:8: attempt to access beyond end of device [ 200.430066][ T3980] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 200.444493][ T3980] kworker/u8:8: attempt to access beyond end of device [ 200.444493][ T3980] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 200.459251][ T3980] kworker/u8:8: attempt to access beyond end of device [ 200.459251][ T3980] loop2: rw=1, sector=305, nr_sectors = 8 limit=128 [ 200.476125][ T3980] kworker/u8:8: attempt to access beyond end of device [ 200.476125][ T3980] loop2: rw=1, sector=321, nr_sectors = 8 limit=128 [ 200.495890][T14271] bond1: (slave lo): Enslaving as an active interface with an up link [ 200.529295][ T28] audit: type=1400 audit(1775152394.263:2120): avc: denied { shutdown } for pid=14277 comm="syz.2.3630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 200.543564][T14271] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 200.585445][T14274] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.657908][T14274] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.730110][T14274] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.821499][ T3984] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.847342][ T3984] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.878451][ T3984] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.892502][ T3984] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.946871][T13771] veth0_vlan: entered promiscuous mode [ 200.985909][T13771] veth1_vlan: entered promiscuous mode [ 201.031547][T13771] veth0_macvtap: entered promiscuous mode [ 201.043711][T13771] veth1_macvtap: entered promiscuous mode [ 201.056579][T13771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.075131][T13771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.096751][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.114161][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.124450][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.134794][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.260070][T14312] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.3637'. [ 201.286733][T14312] netlink: zone id is out of range [ 201.296843][T14312] netlink: zone id is out of range [ 201.312641][ T28] audit: type=1400 audit(1775152395.043:2121): avc: denied { append } for pid=14315 comm="syz.8.3638" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 201.344880][ T28] audit: type=1400 audit(1775152395.043:2122): avc: denied { read write } for pid=14315 comm="syz.8.3638" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 201.372751][ T28] audit: type=1400 audit(1775152395.043:2123): avc: denied { open } for pid=14315 comm="syz.8.3638" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 201.403508][T14312] netlink: set zone limit has 8 unknown bytes [ 201.423271][T14321] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.499448][T14327] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 201.523842][T14327] bond2: (slave lo): Enslaving as an active interface with an up link [ 201.534649][T14327] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 201.555921][T14321] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.608062][T14336] loop1: detected capacity change from 0 to 128 [ 201.625708][T14321] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.786632][T14351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3653'. [ 201.796891][T14351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3653'. [ 201.806436][T14351] netlink: 'syz.2.3653': attribute type 6 has an invalid length. [ 201.814741][T14351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3653'. [ 201.823895][T14351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3653'. [ 201.833248][T14351] netlink: 'syz.2.3653': attribute type 6 has an invalid length. [ 201.893793][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 201.983148][T14364] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 202.090466][T14370] loop0: detected capacity change from 0 to 512 [ 202.097843][T14370] EXT4-fs: Ignoring removed bh option [ 202.103616][T14370] EXT4-fs: inline encryption not supported [ 202.113041][T14370] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 202.126912][T14370] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 202.142629][T14370] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3661: bg 0: block 248: padding at end of block bitmap is not set [ 202.158907][T14370] loop0: lost filesystem error report for type 5 error -117 [ 202.160675][T14370] Quota error (device loop0): write_blk: dquota write failed [ 202.168723][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 202.168768][ C1] EXT4-fs (loop0): last error at time 1775152395: ext4_validate_block_bitmap:441 [ 202.194292][T14370] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 202.205350][T14370] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.3661: Failed to acquire dquot type 1 [ 202.216714][T14321] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.217250][T14370] loop0: lost filesystem error report for type 5 error -28 [ 202.228423][T14370] EXT4-fs (loop0): 1 truncate cleaned up [ 202.242053][T14370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 202.289520][T12445] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 203.719065][ T12] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.740308][ T50] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.761418][ T50] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.781399][ T50] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.883628][T14400] loop8: detected capacity change from 0 to 2048 [ 203.928279][T14400] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.944271][T14380] Bluetooth: hci0: command 0x1003 tx timeout [ 203.950951][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 204.041998][T14400] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3671: bg 0: block 234: padding at end of block bitmap is not set [ 204.059571][T14400] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 440 with error 28 [ 204.083147][T14400] EXT4-fs (loop8): This should not happen!! Data will be lost [ 204.083147][T14400] [ 204.106285][T14400] EXT4-fs (loop8): Total free blocks count 0 [ 204.119491][T14400] EXT4-fs (loop8): Free/Dirty block details [ 204.132175][T14400] EXT4-fs (loop8): free_blocks=0 [ 204.138061][T14400] EXT4-fs (loop8): dirty_blocks=448 [ 204.176059][T14400] EXT4-fs (loop8): Block reservation details [ 204.198193][T14400] EXT4-fs (loop8): i_reserved_data_blocks=28 [ 204.245071][T13771] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.344225][ T3567] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 204.385295][ T7947] IPVS: starting estimator thread 0... [ 204.484376][T14435] IPVS: using max 2064 ests per chain, 103200 per kthread [ 204.530579][T14445] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.539192][T14445] IPv6: NLM_F_CREATE should be set when creating new route [ 204.570690][T14450] netlink: 'syz.0.3690': attribute type 4 has an invalid length. [ 204.605707][T14450] netlink: 'syz.0.3690': attribute type 4 has an invalid length. [ 204.827889][ T28] audit: type=1400 audit(1775152398.553:2124): avc: denied { connect } for pid=14456 comm="syz.2.3693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 204.951845][T14465] loop0: detected capacity change from 0 to 512 [ 205.004372][T14465] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 205.034227][T14465] EXT4-fs (loop0): 1 truncate cleaned up [ 205.050612][T14465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.133820][T12445] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.679426][T14485] syz_tun: entered allmulticast mode [ 205.705686][T14485] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 205.714870][T14485] mroute: pending queue full, dropping entries [ 205.734931][T14484] syz_tun: left allmulticast mode [ 206.099633][T14491] loop0: detected capacity change from 0 to 128 [ 206.222780][ T28] audit: type=1400 audit(1775152399.953:2125): avc: denied { setopt } for pid=14496 comm="syz.3.3711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 206.354006][ T3984] bio_check_eod: 206 callbacks suppressed [ 206.354023][ T3984] kworker/u8:10: attempt to access beyond end of device [ 206.354023][ T3984] loop0: rw=1, sector=145, nr_sectors = 40 limit=128 [ 206.390191][ T3984] kworker/u8:10: attempt to access beyond end of device [ 206.390191][ T3984] loop0: rw=1, sector=193, nr_sectors = 8 limit=128 [ 206.424969][ T3984] kworker/u8:10: attempt to access beyond end of device [ 206.424969][ T3984] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 206.449508][ T3984] kworker/u8:10: attempt to access beyond end of device [ 206.449508][ T3984] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 206.476033][ T3984] kworker/u8:10: attempt to access beyond end of device [ 206.476033][ T3984] loop0: rw=1, sector=241, nr_sectors = 8 limit=128 [ 206.491290][ T3984] kworker/u8:10: attempt to access beyond end of device [ 206.491290][ T3984] loop0: rw=1, sector=257, nr_sectors = 8 limit=128 [ 206.506137][ T3984] kworker/u8:10: attempt to access beyond end of device [ 206.506137][ T3984] loop0: rw=1, sector=273, nr_sectors = 8 limit=128 [ 206.520934][ T3984] kworker/u8:10: attempt to access beyond end of device [ 206.520934][ T3984] loop0: rw=1, sector=289, nr_sectors = 8 limit=128 [ 206.535255][ T3984] kworker/u8:10: attempt to access beyond end of device [ 206.535255][ T3984] loop0: rw=1, sector=305, nr_sectors = 8 limit=128 [ 206.549656][ T3984] kworker/u8:10: attempt to access beyond end of device [ 206.549656][ T3984] loop0: rw=1, sector=321, nr_sectors = 8 limit=128 [ 206.592444][T14508] netlink: 'syz.0.3716': attribute type 14 has an invalid length. [ 206.601239][T14508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3716'. [ 206.616869][ T50] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.625963][ T50] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.634589][T14508] netlink: 'syz.0.3716': attribute type 14 has an invalid length. [ 206.643693][ T50] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.652410][T14508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3716'. [ 206.662574][ T50] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.847813][T14516] loop0: detected capacity change from 0 to 128 [ 207.035131][ T35] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 207.053181][T14529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3726'. [ 207.072231][T14529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3726'. [ 207.077624][ T35] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 207.132492][T14529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3726'. [ 207.165695][T14529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3726'. [ 207.338836][ T3424] IPVS: starting estimator thread 0... [ 207.345645][T14541] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 207.353209][ C1] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 207.419287][T14546] loop0: detected capacity change from 0 to 512 [ 207.434764][T14542] IPVS: using max 2208 ests per chain, 110400 per kthread [ 207.446599][T14546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.460233][T14546] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.493976][T12445] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.820932][T14571] syzkaller0: entered promiscuous mode [ 207.826974][T14571] syzkaller0: entered allmulticast mode [ 208.116645][T14595] loop1: detected capacity change from 0 to 512 [ 208.164321][T14595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.271153][ T28] audit: type=1326 audit(1775152402.003:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14610 comm="syz.8.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a5abc819 code=0x7ffc0000 [ 208.356472][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.366924][ T28] audit: type=1326 audit(1775152402.003:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14610 comm="syz.8.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a5abc819 code=0x7ffc0000 [ 208.391776][ T28] audit: type=1326 audit(1775152402.003:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14610 comm="syz.8.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a5abc819 code=0x7ffc0000 [ 208.417601][ T28] audit: type=1326 audit(1775152402.003:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14610 comm="syz.8.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f29a5abc819 code=0x7ffc0000 [ 208.457808][ T28] audit: type=1326 audit(1775152402.003:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14610 comm="syz.8.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a5abc819 code=0x7ffc0000 [ 208.493312][ T28] audit: type=1326 audit(1775152402.033:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14610 comm="syz.8.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a5abc819 code=0x7ffc0000 [ 208.528250][ T28] audit: type=1326 audit(1775152402.033:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14610 comm="syz.8.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a5abc819 code=0x7ffc0000 [ 208.602315][ T28] audit: type=1326 audit(1775152402.043:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14610 comm="syz.8.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f29a5abc819 code=0x7ffc0000 [ 208.636795][T14627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3748'. [ 208.673758][ T28] audit: type=1326 audit(1775152402.043:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14610 comm="syz.8.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29a5abc819 code=0x7ffc0000 [ 208.711019][T14627] hsr_slave_1 (unregistering): left promiscuous mode [ 208.822325][T14643] netlink: 'syz.3.3752': attribute type 12 has an invalid length. [ 208.916474][T14640] loop1: detected capacity change from 0 to 8192 [ 208.970217][T14640] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 209.018993][T14660] loop8: detected capacity change from 0 to 4096 [ 209.046197][T14660] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.096703][T13771] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.157502][T14679] loop1: detected capacity change from 0 to 8192 [ 209.539795][T14742] loop8: detected capacity change from 0 to 256 [ 209.712297][T14753] SELinux: failed to load policy [ 209.968123][T14785] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 210.814482][T14850] syzkaller1: entered promiscuous mode [ 210.840384][T14850] syzkaller1: entered allmulticast mode [ 211.166329][T14818] Set syz1 is full, maxelem 65536 reached [ 211.228834][T14871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3795'. [ 211.419516][T14887] loop0: detected capacity change from 0 to 8192 [ 211.471066][T14889] loop8: detected capacity change from 0 to 8192 [ 211.485204][T14889] loop8: p2 p3 p4[EZD] [ 211.490808][T14889] loop8: p3 start 331781 is beyond EOD, truncated [ 211.504808][T14889] loop8: p4 size 197376 extends beyond EOD, truncated [ 211.586967][ T8201] udevd[8201]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 211.596346][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 211.794804][T14915] loop2: detected capacity change from 0 to 1024 [ 211.824629][T14915] EXT4-fs: Ignoring removed bh option [ 211.874978][T14915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.895996][T14924] loop1: detected capacity change from 0 to 128 [ 211.913509][T14915] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.089815][T14933] loop8: detected capacity change from 0 to 1024 [ 212.130634][T14933] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.193157][T13771] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.499415][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 212.499431][ T28] audit: type=1400 audit(1775152406.233:2139): avc: denied { read open } for pid=14952 comm="syz.1.3828" path="/" dev="configfs" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 212.661550][ T50] EXT4-fs error (device loop2): ext4_map_blocks:828: inode #15: comm kworker/u8:3: lblock 0 mapped to illegal pblock 0 (length 6) [ 212.676491][ T50] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 212.690124][ T50] EXT4-fs (loop2): This should not happen!! Data will be lost [ 212.690124][ T50] [ 212.702906][ T3982] EXT4-fs error (device loop2): ext4_map_blocks:828: inode #15: block 8: comm kworker/u8:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 212.717970][ T3982] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 212.731908][ T3982] EXT4-fs (loop2): This should not happen!! Data will be lost [ 212.731908][ T3982] [ 212.743995][T12262] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 212.803541][T14964] loop8: detected capacity change from 0 to 512 [ 212.826461][T14964] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.855502][T14964] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.882814][T12262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 212.893788][T13771] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.639220][T14998] loop8: detected capacity change from 0 to 128 [ 213.679088][T14998] bio_check_eod: 98 callbacks suppressed [ 213.679112][T14998] syz.8.3846: attempt to access beyond end of device [ 213.679112][T14998] loop8: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 213.865707][T15002] syzkaller1: entered promiscuous mode [ 213.895917][T15002] syzkaller1: entered allmulticast mode [ 214.478715][T15028] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.3860'. [ 214.504943][T15028] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 214.693995][T15034] loop1: detected capacity change from 0 to 2048 [ 214.779533][T15034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.847167][T15044] loop2: detected capacity change from 0 to 256 [ 214.911686][T15048] macvlan2: entered promiscuous mode [ 214.957605][T15048] team_slave_0: entered promiscuous mode [ 214.964429][T15048] team_slave_1: entered promiscuous mode [ 214.972245][T15034] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3862: bg 0: block 234: padding at end of block bitmap is not set [ 214.994294][T15048] team0: entered promiscuous mode [ 215.024559][T15034] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 932 with error 117 [ 215.038830][T15048] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 215.049597][T15048] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 215.059561][T15034] EXT4-fs (loop1): This should not happen!! Data will be lost [ 215.059561][T15034] [ 215.187731][T15061] loop0: detected capacity change from 0 to 1024 [ 215.230065][T15061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.298240][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.325299][T12445] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.212090][T13771] ================================================================== [ 216.220783][T13771] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 216.228754][T13771] [ 216.231228][T13771] read-write to 0xffff88810cfc9228 of 8 bytes by interrupt on cpu 0: [ 216.239781][T13771] __xa_clear_mark+0xf5/0x1e0 [ 216.244699][T13771] __folio_end_writeback+0xf4/0x360 [ 216.250097][T13771] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 216.256754][T13771] folio_end_writeback+0x1c/0x70 [ 216.262169][T13771] mpage_write_end_io+0x270/0x630 [ 216.267338][T13771] bio_endio+0x38a/0x420 [ 216.271699][T13771] blk_update_request+0x338/0x740 [ 216.276863][T13771] blk_mq_end_request+0x26/0x50 [ 216.282863][T13771] lo_complete_rq+0x98/0x140 [ 216.287628][T13771] blk_done_softirq+0x77/0xb0 [ 216.292854][T13771] handle_softirqs+0xb9/0x2a0 [ 216.298109][T13771] run_ksoftirqd+0x1c/0x30 [ 216.302662][T13771] smpboot_thread_fn+0x32a/0x510 [ 216.309062][T13771] kthread+0x22a/0x280 [ 216.313971][T13771] ret_from_fork+0x150/0x360 [ 216.318907][T13771] ret_from_fork_asm+0x1a/0x30 [ 216.323973][T13771] [ 216.327416][T13771] read to 0xffff88810cfc9228 of 8 bytes by task 13771 on cpu 1: [ 216.335612][T13771] xas_find_marked+0x213/0x620 [ 216.340623][T13771] filemap_get_folios_tag+0xfa/0x510 [ 216.346144][T13771] filemap_fdatawait_keep_errors+0x6c/0x190 [ 216.352170][T13771] sync_inodes_sb+0x424/0x4d0 [ 216.357345][T13771] sync_filesystem+0x102/0x190 [ 216.362603][T13771] generic_shutdown_super+0x4c/0x220 [ 216.368912][T13771] kill_block_super+0x2a/0x70 [ 216.373721][T13771] deactivate_locked_super+0x75/0x1c0 [ 216.379265][T13771] deactivate_super+0x97/0xa0 [ 216.383997][T13771] cleanup_mnt+0x2bb/0x330 [ 216.388634][T13771] __cleanup_mnt+0x19/0x20 [ 216.393476][T13771] task_work_run+0x130/0x1a0 [ 216.398376][T13771] exit_to_user_mode_loop+0x1f4/0x6f0 [ 216.403986][T13771] do_syscall_64+0x249/0x370 [ 216.409060][T13771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.415504][T13771] [ 216.418112][T13771] value changed: 0xfffffffc00000000 -> 0x0000000000000000 [ 216.425590][T13771] [ 216.428089][T13771] Reported by Kernel Concurrency Sanitizer on: [ 216.434366][T13771] CPU: 1 UID: 0 PID: 13771 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 216.444741][T13771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 216.455613][T13771] ================================================================== [ 216.498080][T15074] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.