last executing test programs: 6m4.152187598s ago: executing program 32 (id=510): r0 = syz_io_uring_setup(0x5fce, &(0x7f0000000940)={0x0, 0x939e, 0x1, 0xffffeffe, 0x35}, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000800)={&(0x7f0000002000)={[{0x0, 0x0, 0x2}]}, 0x1}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1) 3m47.865232447s ago: executing program 33 (id=5693): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000001d00)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0xed1ca, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0xd, 0x8b, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x2) socket$key(0xf, 0x3, 0x2) 3m35.605983726s ago: executing program 34 (id=5616): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rename(0x0, 0x0) 3m22.175855553s ago: executing program 35 (id=6275): sendmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="40cf", 0x2}], 0x1, 0x0, 0x0, 0x11000000}, 0x20008801) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 1m45.914091862s ago: executing program 7 (id=9144): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) close(0x3) r1 = socket$pptp(0x18, 0x1, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 1m45.811434638s ago: executing program 7 (id=9148): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc248, &(0x7f0000000240)={[{@nodelalloc}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}]}, 0x83, 0x5f9, &(0x7f0000001200)="$eJzs3c9rXNUeAPDvvZPJjzbvpX08Hq/lPV7gLVp4NE36ilVXbV3YRcGCXYi4aGiSGjr9QZOCrQVTcKGgIOJWpBv/AffSvTsR1J1roYpUXKh05M7cacfJ3DSkydw09/OBOzk/buacb25O7rl3cmYCqKzJ7CGN2BcR55KIia668WhXTub73f/p1vlsS6LZfPnHJJK8rLP/g/zr7uwhiRiNiC9PRvyttrrdpRs3L842mm1vRRxevnT18NKNm4cWL81emL8wf3nmyLNHj00/N3N0ZlPi7MR16vRL/3r/7defWfiqcSiJ43G2/uZc9MSxWSZjMh7kIWb5ZtIuH4qIY1miz8/labMDQqi0Wv77WI+If8RE1Fq5tolYfK/UzgFbqlmLaAIVlRj/UFGdeUDn2r73OniklFnJ4Nw70b4AWh3/UPveSIy2ro123U+6roza9zb2bEL7WRu/39r/cbZFwX2IoU1op8jK7XYsq+NPWn3b06rN4k//dK2fRsR0RAzn/XvhCfrQfY9kK+7DrCWLP/65vvi7j0MW//H8a1Z+coPtT/bkBx0/ANV090R+Il/Jco/Of9nZuDP/iT7zn/E+566NKPv8Vzz/65zvR1vznrRnHpZExJn+T1nvLfju3VMfFrXfPf/Ltqz9zlxwEO7djtjfE/87WbD5/CeLP+lz/LNdzq2zjRe//uFUUV3Z8TfvRBwomP92ZKk1Xp88vLDYmJ9uP/Zt4/MvXvu0qP3e+OslHP9da8z/i45/VnZ1nW18dubOpaK68cce//T74eRsKzWcl7wxu7x8bSZiODmd79JVfmTtvnT26TxHFv/B//Yf/2vFP9b5k7kOV1+5eL+o7gl//x8017ljkSz+uQ0e/w/yn8Pj/PLq9X8X1a0V/3qeGwAAAAAAAHgkbb0Gm6RTD9NpOjXVXsP799iVNq4sLf9v4cr1y3MRB1v/D1lPO690T7TzSZafyf8ftpM/0pP/f0TsjYiPamOt/NT5K425soMHAAAAAAAAAAAAAAAAAACAbWJ3vv6/8xlMP9fa6/+BitjKD5gDtjfjH6qrNf7TsnsBlMH5H6qrz/ivldEPYPCc/6G6jH+oLuMfqmuoIA3sfMY8VJfxDwAAAAA70t7/3P02iYiV58daW2Y4r6uX2jNgqxnjUF3W+UB1PXzp3/J/qJx1zf9/bY5ERLO59d0BSpD0K2xNDvI3Bi0a/Hf7ficAAAAAAAAAAAAAsAUO7LP+H6rKsj+oridY/++tA+Ap563/obpc4wOPW8U/WlRh/T8AAAAAAAAAAAAADMx4a0vSqXwt8Hik6dRUxF8iYk/Uk4XFxvx0RPw1Ir6p1Uey/EzZnQYAAAAAAAAAAAAAAAAAAIAdZunGzYuzjcb8te7Eb6tKdnai8ymo26U/3YlIBt/oWERsh9g3mEjX3meoqySJWMmOfOl9bieivNZHektK/sMEAAAAAAAAAAAAAAAAAAAV1LX2uL/9nwy4RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAweI8+/3/rEmXHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8nf4IAAD///HVQCU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) fstat(0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1000) 1m45.61368022s ago: executing program 7 (id=9154): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000007c0)={@fallback=r0, r0, 0x2f, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r0, r1, 0x2f, 0x2038, 0x4, @void, @void, @value=r2}, 0x20) 1m45.61310292s ago: executing program 7 (id=9155): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 1m45.555979263s ago: executing program 7 (id=9157): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x4, 0x6, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 1m45.113772149s ago: executing program 7 (id=9170): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000080)={[{@init_itable}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x2, 0x10000, 0x3, 0x179}, &(0x7f0000002a40)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd=r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) io_uring_enter(r1, 0x2272, 0x2, 0x5, 0x0, 0x0) 1m45.034486974s ago: executing program 36 (id=9170): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000080)={[{@init_itable}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x2, 0x10000, 0x3, 0x179}, &(0x7f0000002a40)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd=r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) io_uring_enter(r1, 0x2272, 0x2, 0x5, 0x0, 0x0) 1m16.440932027s ago: executing program 4 (id=10041): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000900)={[{@nodioread_nolock}, {@noblock_validity}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) preadv2(r1, &(0x7f0000000300)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, 0x0, 0xffffffff, 0x0) 1m16.171934143s ago: executing program 4 (id=10048): openat$random(0xffffffffffffff9c, &(0x7f0000000800), 0x80100, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1m15.252808936s ago: executing program 4 (id=10072): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="00214797357e0e8d442441e9beae583d48ac340dc69d54af976b6a7c18c4907ed175462f18ec0e16ad9f57abed3bad46320d0d4abf7c3a617f1b2fbe8b338d1fce4490668ce9faadcf6b44b9906eeb59241caa04a1bf2399f37a7f221861e3580bdf025cb470613b79119f1c9fe8b9ee5d1f41b6af7d12a2ba71c7a74727cece06221eadc4d7137811e483a94c1164f4496f0fe1829f55cd2d91b74aeee64bc05e7014dbb599bad1be2d8ced5b1a3131", 0xb0}, {&(0x7f0000000880)="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", 0x801}], 0x2, 0x739, 0x1) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}, {&(0x7f0000000200)=""/19, 0x13}], 0x2, 0x6, 0x1) 1m15.149327403s ago: executing program 4 (id=10076): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') 1m15.075738397s ago: executing program 4 (id=10077): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000180)={[{@errors_continue}, {@init_itable_val}, {@minixdf}, {@jqfmt_vfsv0}, {@prjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@errors_remount}, {@auto_da_alloc}, {@noblock_validity}, {@nodiscard}]}, 0x1, 0x475, &(0x7f0000000780)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 1m14.731446247s ago: executing program 4 (id=10084): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x2, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x2, 0x3}, 0x8) 1m14.703563779s ago: executing program 37 (id=10084): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x2, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x2, 0x3}, 0x8) 55.838777422s ago: executing program 2 (id=10622): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8000) syz_emit_ethernet(0x16, &(0x7f0000000080)=ANY=[], 0x0) 55.795686326s ago: executing program 2 (id=10623): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) 55.685501302s ago: executing program 2 (id=10626): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x8001) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) 55.656372254s ago: executing program 2 (id=10627): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x40002, 0x0, 0x1, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000080)='./mnt\x00') 55.623482565s ago: executing program 2 (id=10628): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 54.966075434s ago: executing program 2 (id=10648): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000040), 0x1, 0x553, &(0x7f0000001080)="$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") acct(&(0x7f0000000280)='./file1\x00') 54.949323025s ago: executing program 38 (id=10648): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000040), 0x1, 0x553, &(0x7f0000001080)="$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") acct(&(0x7f0000000280)='./file1\x00') 26.49314889s ago: executing program 9 (id=11526): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 26.284027962s ago: executing program 9 (id=11532): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @empty, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 25.899909305s ago: executing program 9 (id=11541): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000001280)=""/4098, 0x1002}], 0x1, 0x40, 0x104) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x74120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10000, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 25.819934899s ago: executing program 9 (id=11545): socket$inet(0x2, 0x1, 0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fccbdf250900000005000700000000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 25.788999151s ago: executing program 9 (id=11547): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 25.64368344s ago: executing program 9 (id=11549): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8601, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x101, 0x0, 0x0, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000400)) 18.027664515s ago: executing program 1 (id=11715): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0x2, 0x244, &(0x7f0000000400)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r0, 0x0, 0xbf5, 0x2000402) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) preadv(r1, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/59, 0xac00}], 0x3, 0x0, 0x4) 17.917942242s ago: executing program 1 (id=11716): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "018000", "5e33931677e0f2d7"}, 0x28) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) 17.872838984s ago: executing program 1 (id=11717): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x7ff, @local, 0x7}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000)={r2, 0x4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={r3}, &(0x7f0000000180)=0x8) 17.76393484s ago: executing program 1 (id=11718): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f636f6d70726573732c6d61703d61636f726e2c00fdca1d4dd700cdcfba40b45917e455455f7d0c174ec1e2add115f002b56dc081"], 0x3, 0x54c, &(0x7f0000000540)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[], 0x44}}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 17.742412312s ago: executing program 1 (id=11719): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)='2', 0xffffffffffffff2e, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x401, @loopback, 0x3}, 0x1c) shutdown(r0, 0x1) 16.971645277s ago: executing program 1 (id=11727): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000700)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000008c0)=@newtfilter={0x534, 0x2c, 0x42f, 0x870bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x7, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x508, 0x2, [@TCA_U32_SEL={0x504, 0x5, {0xe, 0x5, 0x8, 0x5, 0x9, 0x10, 0x4, 0x0, [{0x352b, 0x0, 0x3, 0xc2ed}, {0x101, 0x2, 0x86, 0x9}, {0x7, 0x8, 0x7fff, 0xe48}, {0xffffff81, 0x4, 0x5, 0x2}, {0x94, 0x2, 0x6, 0x10}, {0x71a, 0xb28, 0x1, 0xd9e9}, {0x0, 0xc, 0x10001, 0x2}, {0x7, 0x3, 0x6, 0x7f}, {0x5, 0xa4e, 0x401, 0xfffffffb}, {0x10, 0x9, 0x1c, 0xfffffffd}, {0x8, 0x6121, 0x10, 0x2}, {0xeb7, 0x9, 0x7, 0xf21c}, {0x4, 0x7, 0x9, 0xf0f}, {0xe, 0x9, 0x5, 0x4}, {0x33, 0x1ff, 0xe, 0x6}, {0xf84, 0x7, 0xffffffe6, 0x200}, {0x3, 0x0, 0x10, 0x8}, {0xc, 0x71a0, 0x7e, 0x3}, {0x92, 0x100, 0x3, 0x2}, {0x400, 0x6fe30ae7, 0x100, 0x3}, {0xb, 0x7d4a, 0xe, 0x3}, {0x8, 0x7, 0x10001, 0x80000000}, {0xd9e, 0xf, 0x5, 0x2}, {0x4, 0x2, 0x6, 0x2}, {0x2, 0x2, 0x8, 0x3}, {0xffff, 0x1, 0xc, 0x7}, {0x0, 0x2, 0x7e5, 0x124caa56}, {0xbc, 0x7f, 0xfa577a2b, 0x4}, {0x4, 0xffff0000, 0x100, 0x3}, {0xe441fbaa, 0x3a0a, 0x0, 0x8}, {0x3, 0x3e85, 0x645, 0x3}, {0xb53, 0x9, 0x8, 0x3}, {0x0, 0xb, 0x7f, 0x9e2b}, {0x3, 0x5, 0x2, 0x8}, {0x712, 0x0, 0x570, 0x6}, {0xffff, 0x1, 0xffffffff, 0x81}, {0x8, 0x0, 0x4, 0x1}, {0x6, 0xc, 0x4, 0xa}, {0x9, 0x7, 0x2000000, 0x5}, {0x4, 0x1, 0x0, 0x3}, {0x6, 0x5, 0xbf94, 0x6}, {0x4612, 0x10, 0x9, 0x4}, {0x8, 0x1, 0xcd9, 0x4d54}, {0x1, 0x4, 0x1, 0xfffffffa}, {0x6127, 0x32c, 0x3, 0x808}, {0x5, 0xffff8000, 0x5, 0x1000}, {0x401, 0x10000, 0x4, 0x10000000}, {0x7ff, 0x8001, 0x8, 0x9}, {0x1d92, 0x6, 0x1, 0xca2}, {0x521, 0x0, 0x4, 0x9}, {0x2, 0x7ff, 0x42e, 0x7f}, {0x256f83b6, 0x10cd974c, 0x8001, 0x6}, {0x7, 0x2, 0x10, 0x350}, {0x8, 0x7, 0x7, 0xf}, {0x1, 0x9, 0x5, 0x2}, {0x9, 0x4, 0xfffffff8, 0x2}, {0x4, 0x5, 0x0, 0x7}, {0x5, 0xffff7fff, 0x77a4, 0x5}, {0x2, 0x748, 0x8, 0x2}, {0x8, 0x5, 0x1, 0xa}, {0x4, 0x3, 0x0, 0x1000}, {0x9, 0x100, 0xffff7fdf, 0x77}, {0x1, 0x2, 0x9, 0x401}, {0x3, 0xa, 0x497, 0x12}, {0x8000, 0x1, 0x80000000, 0xd8}, {0x5, 0x1, 0x6, 0xb}, {0x4, 0x0, 0x600000, 0x1}, {0x1, 0x4, 0x5, 0x6}, {0x7, 0x0, 0x4, 0x9}, {0x0, 0x87, 0x4, 0xfffffffd}, {0x0, 0x3, 0xfffffffe, 0x2}, {0x9, 0x7, 0x0, 0xff}, {0x2, 0x442791a7, 0x2}, {0xe3, 0xd, 0xa, 0x5}, {0x8, 0x2, 0x4, 0x10000}, {0x6a, 0x80000001, 0x7, 0x10000}, {0x7, 0x8, 0x3, 0x3}, {0x4, 0x5, 0x800, 0x2}, {0x9, 0x8, 0x5, 0xff}]}}]}}]}, 0x534}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 16.938792479s ago: executing program 39 (id=11727): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000700)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000008c0)=@newtfilter={0x534, 0x2c, 0x42f, 0x870bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x7, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x508, 0x2, [@TCA_U32_SEL={0x504, 0x5, {0xe, 0x5, 0x8, 0x5, 0x9, 0x10, 0x4, 0x0, [{0x352b, 0x0, 0x3, 0xc2ed}, {0x101, 0x2, 0x86, 0x9}, {0x7, 0x8, 0x7fff, 0xe48}, {0xffffff81, 0x4, 0x5, 0x2}, {0x94, 0x2, 0x6, 0x10}, {0x71a, 0xb28, 0x1, 0xd9e9}, {0x0, 0xc, 0x10001, 0x2}, {0x7, 0x3, 0x6, 0x7f}, {0x5, 0xa4e, 0x401, 0xfffffffb}, {0x10, 0x9, 0x1c, 0xfffffffd}, {0x8, 0x6121, 0x10, 0x2}, {0xeb7, 0x9, 0x7, 0xf21c}, {0x4, 0x7, 0x9, 0xf0f}, {0xe, 0x9, 0x5, 0x4}, {0x33, 0x1ff, 0xe, 0x6}, {0xf84, 0x7, 0xffffffe6, 0x200}, {0x3, 0x0, 0x10, 0x8}, {0xc, 0x71a0, 0x7e, 0x3}, {0x92, 0x100, 0x3, 0x2}, {0x400, 0x6fe30ae7, 0x100, 0x3}, {0xb, 0x7d4a, 0xe, 0x3}, {0x8, 0x7, 0x10001, 0x80000000}, {0xd9e, 0xf, 0x5, 0x2}, {0x4, 0x2, 0x6, 0x2}, {0x2, 0x2, 0x8, 0x3}, {0xffff, 0x1, 0xc, 0x7}, {0x0, 0x2, 0x7e5, 0x124caa56}, {0xbc, 0x7f, 0xfa577a2b, 0x4}, {0x4, 0xffff0000, 0x100, 0x3}, {0xe441fbaa, 0x3a0a, 0x0, 0x8}, {0x3, 0x3e85, 0x645, 0x3}, {0xb53, 0x9, 0x8, 0x3}, {0x0, 0xb, 0x7f, 0x9e2b}, {0x3, 0x5, 0x2, 0x8}, {0x712, 0x0, 0x570, 0x6}, {0xffff, 0x1, 0xffffffff, 0x81}, {0x8, 0x0, 0x4, 0x1}, {0x6, 0xc, 0x4, 0xa}, {0x9, 0x7, 0x2000000, 0x5}, {0x4, 0x1, 0x0, 0x3}, {0x6, 0x5, 0xbf94, 0x6}, {0x4612, 0x10, 0x9, 0x4}, {0x8, 0x1, 0xcd9, 0x4d54}, {0x1, 0x4, 0x1, 0xfffffffa}, {0x6127, 0x32c, 0x3, 0x808}, {0x5, 0xffff8000, 0x5, 0x1000}, {0x401, 0x10000, 0x4, 0x10000000}, {0x7ff, 0x8001, 0x8, 0x9}, {0x1d92, 0x6, 0x1, 0xca2}, {0x521, 0x0, 0x4, 0x9}, {0x2, 0x7ff, 0x42e, 0x7f}, {0x256f83b6, 0x10cd974c, 0x8001, 0x6}, {0x7, 0x2, 0x10, 0x350}, {0x8, 0x7, 0x7, 0xf}, {0x1, 0x9, 0x5, 0x2}, {0x9, 0x4, 0xfffffff8, 0x2}, {0x4, 0x5, 0x0, 0x7}, {0x5, 0xffff7fff, 0x77a4, 0x5}, {0x2, 0x748, 0x8, 0x2}, {0x8, 0x5, 0x1, 0xa}, {0x4, 0x3, 0x0, 0x1000}, {0x9, 0x100, 0xffff7fdf, 0x77}, {0x1, 0x2, 0x9, 0x401}, {0x3, 0xa, 0x497, 0x12}, {0x8000, 0x1, 0x80000000, 0xd8}, {0x5, 0x1, 0x6, 0xb}, {0x4, 0x0, 0x600000, 0x1}, {0x1, 0x4, 0x5, 0x6}, {0x7, 0x0, 0x4, 0x9}, {0x0, 0x87, 0x4, 0xfffffffd}, {0x0, 0x3, 0xfffffffe, 0x2}, {0x9, 0x7, 0x0, 0xff}, {0x2, 0x442791a7, 0x2}, {0xe3, 0xd, 0xa, 0x5}, {0x8, 0x2, 0x4, 0x10000}, {0x6a, 0x80000001, 0x7, 0x10000}, {0x7, 0x8, 0x3, 0x3}, {0x4, 0x5, 0x800, 0x2}, {0x9, 0x8, 0x5, 0xff}]}}]}}]}, 0x534}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 10.588850971s ago: executing program 40 (id=11549): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8601, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x101, 0x0, 0x0, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000400)) 1.122208585s ago: executing program 0 (id=12015): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0xd08, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000008c0)='p', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x3, 0x0}}, 0x30}, 0x1c, &(0x7f0000001700)=[{&(0x7f00000001c0)="ab", 0x1}], 0x1}}], 0x2, 0x20044040) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x2, 0x0, 0x78d, 0x1, r2}, 0x10) 1.053902939s ago: executing program 0 (id=12017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000540)={@val={0xa, 0x88a8}, @void, @eth={@multicast, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x5, 0x28, 0x64, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010102, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5a, 0x1, 0x8001, 0x0, 0x2}}}}}}}, 0x3a) 1.053762768s ago: executing program 6 (id=12018): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x120000000}) 951.755905ms ago: executing program 6 (id=12023): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x581, 0x4000001f, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0xa, 0x81, 0x0, 0x2, 0x20}, 0xe) 951.304265ms ago: executing program 5 (id=12024): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8, 0x80800) io_setup(0x2, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x21, 0x0, 0x4) 949.715685ms ago: executing program 0 (id=12025): socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000a00)=ANY=[@ANYBLOB="6d61703d6f66662c636865636b3d72656c61786564006d6f64653d3078303030303030303030303030303030312c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303036322c696f636861727365743d6d6163677265656b416d61703d61636f726e2c696f636861727365743d69736f383835392d322c73657373696f6e3d3078303030303030303030303030303035382c756e686964652c6d6f64653d3078666666666666666666666666666666652c646d6f64653d3078303030303030303030303030303030332c6673636f6e746578743d73797374656d5f752c7065726d69745f646972656374696f2c00a49e221c664af678166eca2743ce781b85087554204295473e5803f77bfb18f68435ad5be0abe5039651b6293e4b70fb5b4b9865ecb5c43a142420899158398ec852efdd72cd8db917defb7b319d712a8903d66f2192024fa79c8905c5ad0da23e79623d20ee08fd80de10be597c23fd424bd217497f356db7bf465adb12414e4b4c68434a438f8a7a9fa9684afc527d1d7be8db9637a734c6303801929c7de1bbd1536b53c2f5112c03dcd0"], 0xfa, 0x69f, &(0x7f0000000f00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="180800"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000840)={0x8, 0x80, 0x7, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x8080, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 845.530201ms ago: executing program 0 (id=12028): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xf0b, 0xfffffffd, 0x203, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x44040) 844.786991ms ago: executing program 5 (id=12030): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 793.326454ms ago: executing program 6 (id=12032): r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 793.095104ms ago: executing program 0 (id=12033): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)='2', 0xffffffffffffff2e, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x401, @loopback, 0x3}, 0x1c) shutdown(r0, 0x1) 792.753764ms ago: executing program 3 (id=12034): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x7f, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x26}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x44, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x10000, 0x0, 0x2}, {}, {}, {}, {0x0, 0x9}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 702.063379ms ago: executing program 3 (id=12035): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) setuid(0xee01) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, 0x0, 0x0) 701.929079ms ago: executing program 0 (id=12036): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x4ff3913d, 0xca0, 0x9}, 0x10) 701.721349ms ago: executing program 5 (id=12037): r0 = syz_io_uring_setup(0x304, &(0x7f0000000300)={0x0, 0x8006d85, 0x400, 0x2, 0x200118}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x8, 0x0, r3, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000006c0)={0xfffffffffffffff7, r3, 0x2, {0x27fffffffffffff, 0x4}, 0x54}, 0x1) 701.360219ms ago: executing program 3 (id=12038): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x5}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) 627.796884ms ago: executing program 3 (id=12039): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @multicast}, 0x10) 627.420574ms ago: executing program 5 (id=12040): r0 = socket(0x1e, 0x5, 0x0) listen(r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 576.273356ms ago: executing program 3 (id=12041): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) read$msr(r2, 0x0, 0x0) 556.605588ms ago: executing program 6 (id=12042): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0x2, 0x244, &(0x7f0000000400)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r0, 0x0, 0xbf5, 0x2000402) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) preadv(r1, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/59, 0xac00}], 0x3, 0x0, 0x4) 455.889363ms ago: executing program 5 (id=12043): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$inet_buf(r0, 0x0, 0x2f, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 405.439996ms ago: executing program 8 (id=12044): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x841e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}, 0x82, 0x4, 0x4, 0x5, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd30, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0xfff3, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0xbebc20}, 0x3, 0x4000000, 0x421}}]}}]}, 0x58}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xa00) 405.302857ms ago: executing program 3 (id=12045): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x2}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b80)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) 377.348068ms ago: executing program 6 (id=12046): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 331.403041ms ago: executing program 8 (id=12047): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0xf}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) 264.000985ms ago: executing program 8 (id=12048): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x7, @private0, 0x7f}}}, 0x30) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000180)={&(0x7f00000002c0)=""/48, 0x30}) 229.792567ms ago: executing program 8 (id=12049): r0 = memfd_create(&(0x7f0000000700)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xac\b\x003\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x9c\xce\xf5|q+\t\x11G\x1c\xe7\x9e\x88\xfb\x96\xbe\v:0', 0x2) r1 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x7af7, 0x80, 0x1, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000003c0)=[r0], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x6000, @fd_index, 0x5, 0x0, 0x0, 0x2a}) io_uring_enter(r1, 0x6d13, 0x0, 0x0, 0x0, 0x0) 174.23608ms ago: executing program 5 (id=12050): syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 165.017761ms ago: executing program 8 (id=12051): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x86dd, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 42.444218ms ago: executing program 6 (id=12052): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) 0s ago: executing program 8 (id=12062): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000040)=[{r1, 0x8204}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) kernel console output (not intermixed with test programs): .057832][ T52] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 348.070345][ T52] EXT4-fs (loop2): This should not happen!! Data will be lost [ 348.070345][ T52] [ 348.094899][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 348.237836][T28921] macvtap1: entered allmulticast mode [ 348.243346][T28921] veth0_macvtap: entered allmulticast mode [ 348.316090][T28928] loop8: detected capacity change from 0 to 512 [ 348.373172][T28928] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.387852][T28928] ext4 filesystem being mounted at /765/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.436617][T18604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.761916][T28968] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 348.806350][T28972] loop9: detected capacity change from 0 to 1024 [ 348.819376][T28972] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.905694][T25689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.914924][T28985] loop2: detected capacity change from 0 to 1764 [ 348.931855][T28985] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 348.945616][ T5572] kernel write not supported for file bpf-prog (pid: 5572 comm: kworker/0:16) [ 349.355885][T29028] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 349.679544][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 349.679560][ T29] audit: type=1326 audit(2000000441.361:4272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29053 comm="syz.8.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 349.712033][ T29] audit: type=1326 audit(2000000441.381:4273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29053 comm="syz.8.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 349.736631][ T29] audit: type=1326 audit(2000000441.391:4274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29053 comm="syz.8.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 349.792182][ T29] audit: type=1326 audit(2000000441.441:4275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29053 comm="syz.8.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 349.817328][ T29] audit: type=1326 audit(2000000441.451:4276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29053 comm="syz.8.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 349.841273][ T29] audit: type=1326 audit(2000000441.471:4277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29053 comm="syz.8.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 349.865567][ T29] audit: type=1326 audit(2000000441.471:4278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29053 comm="syz.8.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 349.889308][ T29] audit: type=1326 audit(2000000441.471:4279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29053 comm="syz.8.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 349.913859][ T29] audit: type=1326 audit(2000000441.471:4280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29053 comm="syz.8.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 349.938221][ T29] audit: type=1326 audit(2000000441.471:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29053 comm="syz.8.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 349.987188][T29056] loop9: detected capacity change from 0 to 512 [ 349.994618][T29056] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 350.009823][T29056] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.031558][T29056] ext4 filesystem being mounted at /210/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 350.070276][T25689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.161074][T29068] netlink: 'syz.9.10467': attribute type 83 has an invalid length. [ 350.236860][T29073] loop9: detected capacity change from 0 to 512 [ 350.272626][T29073] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.513818][T29095] lo speed is unknown, defaulting to 1000 [ 350.570635][T29095] ip6_vti0 speed is unknown, defaulting to 1000 [ 350.576324][T25689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.763784][T29112] loop8: detected capacity change from 0 to 128 [ 350.869173][T29112] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 350.947454][T29112] ext4 filesystem being mounted at /783/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.014418][T18604] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 351.149285][T29132] loop8: detected capacity change from 0 to 1024 [ 351.186977][T29132] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.215660][T29134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.234778][T29132] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: comm syz.8.10494: inode #1869229157: comm syz.8.10494: iget: illegal inode # [ 351.251690][T29132] EXT4-fs (loop8): Remounting filesystem read-only [ 351.259264][T29132] EXT4-fs warning (device loop8): ext4_xattr_inode_inc_ref_all:1135: inode #19: comm syz.8.10494: cleanup dec ref error -30 [ 351.304842][T29132] EXT4-fs warning (device loop8): ext4_xattr_block_set:2200: inode #19: comm syz.8.10494: dec ref error=-30 [ 351.319954][T27971] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.360745][T18604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.539631][T29151] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.567603][T29151] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.702916][ T5561] ip6_vti0 speed is unknown, defaulting to 1000 [ 352.061068][T29177] set_capacity_and_notify: 1 callbacks suppressed [ 352.061086][T29177] loop2: detected capacity change from 0 to 8192 [ 352.126615][T29181] loop2: detected capacity change from 0 to 512 [ 352.150328][T29181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.150720][T29183] loop8: detected capacity change from 0 to 128 [ 352.175224][T29181] ext4 filesystem being mounted at /2439/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 352.203543][T29181] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.10514: corrupted inode contents [ 352.247245][T29181] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.10514: mark_inode_dirty error [ 352.287738][T29181] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.10514: corrupted inode contents [ 352.325441][T29181] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.10514: mark_inode_dirty error [ 352.394082][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.471100][T29194] __nla_validate_parse: 4 callbacks suppressed [ 352.471119][T29194] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.10517'. [ 352.502458][T29189] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.10517'. [ 352.796205][T29222] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10532'. [ 352.805602][T29222] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10532'. [ 352.819934][T29223] lo speed is unknown, defaulting to 1000 [ 352.855926][T29222] bridge0: port 3(vlan0) entered blocking state [ 352.862318][T29222] bridge0: port 3(vlan0) entered disabled state [ 352.931433][T29222] vlan0: entered allmulticast mode [ 352.937005][T29222] bridge0: entered allmulticast mode [ 352.946328][T29222] vlan0: left allmulticast mode [ 352.951414][T29222] bridge0: left allmulticast mode [ 352.968344][T29223] ip6_vti0 speed is unknown, defaulting to 1000 [ 353.018238][T29233] loop1: detected capacity change from 0 to 512 [ 353.045774][T29233] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 353.125273][T29233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.225308][T29233] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 353.318220][T27971] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.462697][T29270] loop9: detected capacity change from 0 to 512 [ 353.510218][T29270] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.563329][T29270] ext4 filesystem being mounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 353.584828][T29276] loop2: detected capacity change from 0 to 8192 [ 353.596792][T29276] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 353.676586][T29270] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #2: comm syz.9.10551: corrupted inode contents [ 353.698525][T29270] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #2: comm syz.9.10551: mark_inode_dirty error [ 353.710576][T29270] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #2: comm syz.9.10551: corrupted inode contents [ 353.723652][T29270] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.10551: mark_inode_dirty error [ 353.781451][T25689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.839874][T29305] loop9: detected capacity change from 0 to 256 [ 353.882240][T29305] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 354.491335][T29340] 9p: Bad value for 'wfdno' [ 354.785366][T29362] loop1: detected capacity change from 0 to 512 [ 354.792602][T29362] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 354.802531][T29362] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 355.514139][T29396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.558198][T29396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.961404][T29445] smc: net device hsr0 applied user defined pnetid SYZ2 [ 355.975994][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 355.976010][ T29] audit: type=1400 audit(2000000447.651:4395): avc: denied { accept } for pid=29446 comm="syz.3.10625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 356.013778][T29445] smc: net device hsr0 erased user defined pnetid SYZ2 [ 356.635864][ T29] audit: type=1400 audit(2000000448.321:4396): avc: denied { write } for pid=29493 comm="syz.9.10645" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 356.821426][T29503] loop9: detected capacity change from 0 to 1024 [ 356.871461][T29503] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 356.890170][T29503] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.905382][T29503] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: comm syz.9.10651: lblock 0 mapped to illegal pblock 0 (length 6) [ 356.923614][T29503] EXT4-fs error (device loop9): ext4_ext_remove_space:2955: inode #15: comm syz.9.10651: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 356.969581][ T31] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: comm kworker/u8:1: lblock 0 mapped to illegal pblock 0 (length 5) [ 356.988916][ T31] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 357.001454][ T31] EXT4-fs (loop9): This should not happen!! Data will be lost [ 357.001454][ T31] [ 357.003301][T29507] lo speed is unknown, defaulting to 1000 [ 357.033030][ T29] audit: type=1326 audit(2000000448.691:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29524 comm="syz.8.10656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 357.050679][T29507] ip6_vti0 speed is unknown, defaulting to 1000 [ 357.057710][ T29] audit: type=1326 audit(2000000448.691:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29524 comm="syz.8.10656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 357.057745][ T29] audit: type=1326 audit(2000000448.691:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29524 comm="syz.8.10656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 357.057774][ T29] audit: type=1326 audit(2000000448.691:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29524 comm="syz.8.10656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 357.057844][ T29] audit: type=1326 audit(2000000448.691:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29524 comm="syz.8.10656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb72e00b58e code=0x7ffc0000 [ 357.057928][ T29] audit: type=1326 audit(2000000448.691:4402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29524 comm="syz.8.10656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 357.057961][ T29] audit: type=1326 audit(2000000448.691:4403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29524 comm="syz.8.10656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 357.058053][ T29] audit: type=1326 audit(2000000448.691:4404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29524 comm="syz.8.10656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 357.065841][T25689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 357.118530][T29527] netlink: 'syz.3.10658': attribute type 29 has an invalid length. [ 357.254633][T29530] netlink: 'syz.3.10658': attribute type 29 has an invalid length. [ 357.283947][T29533] netlink: 'syz.9.10655': attribute type 4 has an invalid length. [ 357.296344][T29535] loop1: detected capacity change from 0 to 512 [ 357.303065][T29535] EXT4-fs: Ignoring removed nobh option [ 357.342190][T29535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.345304][T29527] netlink: 508 bytes leftover after parsing attributes in process `syz.3.10658'. [ 357.367959][T29535] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 357.415381][T27971] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.438349][T29507] chnl_net:caif_netlink_parms(): no params data found [ 357.462732][T29546] netlink: 'syz.3.10663': attribute type 21 has an invalid length. [ 357.477388][T29546] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10663'. [ 357.548250][T29507] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.555655][T29507] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.562921][T29507] bridge_slave_0: entered allmulticast mode [ 357.569445][T29507] bridge_slave_0: entered promiscuous mode [ 357.576958][T29507] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.584095][T29507] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.591773][T29507] bridge_slave_1: entered allmulticast mode [ 357.598706][T29507] bridge_slave_1: entered promiscuous mode [ 357.617480][T29507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.628238][T29507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.648625][T29507] team0: Port device team_slave_0 added [ 357.655381][T29507] team0: Port device team_slave_1 added [ 357.672523][T29507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.679666][T29507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.705972][T29507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.723061][T29559] lo speed is unknown, defaulting to 1000 [ 357.741567][T29507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.748740][T29507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.774965][T29507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.809720][T29507] hsr_slave_0: entered promiscuous mode [ 357.817386][T29507] hsr_slave_1: entered promiscuous mode [ 357.823564][T29507] debugfs: 'hsr0' already exists in 'hsr' [ 357.829398][T29507] Cannot create hsr debugfs directory [ 357.835006][T29559] ip6_vti0 speed is unknown, defaulting to 1000 [ 358.193175][T29507] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 358.199673][T29593] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 358.218696][T29507] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 358.235899][T29507] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 358.245052][T29507] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 358.337033][T29507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.383852][T29507] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.420935][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.428097][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.446826][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.454230][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.483896][T29507] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 358.494384][T29507] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.521214][T29639] bridge: RTM_NEWNEIGH with invalid ether address [ 358.531574][T29639] bridge: RTM_NEWNEIGH with invalid ether address [ 358.622705][T29507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.938584][ T5568] page_pool_release_retry() stalled pool shutdown: id 163, 1 inflight 60 sec [ 358.965339][T29507] veth0_vlan: entered promiscuous mode [ 358.989477][T29507] veth1_vlan: entered promiscuous mode [ 359.029020][T29507] veth0_macvtap: entered promiscuous mode [ 359.050197][T29507] veth1_macvtap: entered promiscuous mode [ 359.091275][T29507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.127055][T29507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.159372][ T1655] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.165258][T29716] loop1: detected capacity change from 0 to 8192 [ 359.193154][ T1655] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.218365][ T1655] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.235413][T29716] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 359.256704][ T836] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.297817][T29741] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 359.383106][T29756] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10711'. [ 359.414329][T29756] bond1: Invalid ad_actor_system MAC address. [ 359.420880][T29756] bond1: option ad_actor_system: invalid value (4294967295) [ 359.432798][T29756] bond1 (unregistering): Released all slaves [ 359.485603][T29765] netlink: 'syz.3.10713': attribute type 13 has an invalid length. [ 359.493660][T29765] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.10713'. [ 359.829428][T29806] netlink: 'syz.5.10725': attribute type 3 has an invalid length. [ 359.838317][T29806] netlink: 'syz.5.10725': attribute type 7 has an invalid length. [ 359.846447][T29806] netlink: 'syz.5.10725': attribute type 8 has an invalid length. [ 359.854320][T29806] netlink: 'syz.5.10725': attribute type 7 has an invalid length. [ 359.862405][T29806] netlink: 198788 bytes leftover after parsing attributes in process `syz.5.10725'. [ 360.164599][T29852] netlink: 35 bytes leftover after parsing attributes in process `syz.9.10734'. [ 360.173844][T29852] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10734'. [ 360.287804][T29872] netlink: 63 bytes leftover after parsing attributes in process `syz.5.10741'. [ 360.370397][T29877] loop9: detected capacity change from 0 to 512 [ 360.398133][T29877] EXT4-fs: Ignoring removed nobh option [ 360.444341][T29877] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 360.491642][T29877] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.10743: invalid indirect mapped block 256 (level 1) [ 360.537767][T29877] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.10743: invalid indirect mapped block 2683928664 (level 1) [ 360.566962][T29877] EXT4-fs (loop9): 1 truncate cleaned up [ 360.583097][T29877] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.682084][T29877] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.10743: Invalid block bitmap block 3 in block_group 0 [ 360.713218][T29916] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10754'. [ 360.745542][T29877] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.10743: Invalid block bitmap block 3 in block_group 0 [ 360.763810][T29922] netlink: 'syz.5.10757': attribute type 6 has an invalid length. [ 360.764060][T29916] vlan0: entered allmulticast mode [ 360.784044][T29916] dummy0: entered allmulticast mode [ 360.795428][T29877] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.10743: Invalid block bitmap block 3 in block_group 0 [ 360.815850][T29916] bridge0: port 3(vlan0) entered blocking state [ 360.822279][T29916] bridge0: port 3(vlan0) entered disabled state [ 360.848447][T29916] vlan0: entered promiscuous mode [ 360.848520][T29930] loop5: detected capacity change from 0 to 7 [ 360.853780][T29916] dummy0: entered promiscuous mode [ 360.943712][T25689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.959867][T29939] loop1: detected capacity change from 0 to 256 [ 361.008484][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 361.018566][ C1] buffer_io_error: 40 callbacks suppressed [ 361.018581][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 361.040360][T29946] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10761'. [ 361.091444][ T3428] kernel write not supported for file bpf-prog (pid: 3428 comm: kworker/1:5) [ 361.094512][T29953] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10761'. [ 361.492188][T30021] loop9: detected capacity change from 0 to 512 [ 361.521776][T30021] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 361.759481][T30048] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 362.225888][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 362.225909][ T29] audit: type=1326 audit(2000000453.911:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30082 comm="syz.8.10814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 362.265213][ T29] audit: type=1326 audit(2000000453.911:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30082 comm="syz.8.10814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 362.289149][ T29] audit: type=1326 audit(2000000453.941:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30082 comm="syz.8.10814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 362.313420][ T29] audit: type=1326 audit(2000000453.941:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30082 comm="syz.8.10814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 362.337293][ T29] audit: type=1326 audit(2000000453.941:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30082 comm="syz.8.10814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 362.360984][ T29] audit: type=1326 audit(2000000453.941:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30082 comm="syz.8.10814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 362.384766][ T29] audit: type=1326 audit(2000000453.941:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30082 comm="syz.8.10814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 362.408527][ T29] audit: type=1326 audit(2000000453.941:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30082 comm="syz.8.10814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 362.432537][T30079] loop9: detected capacity change from 0 to 32768 [ 362.466093][ T29] audit: type=1326 audit(2000000454.151:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30082 comm="syz.8.10814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 362.468149][T30090] veth0: entered promiscuous mode [ 362.532424][T30089] veth0: left promiscuous mode [ 362.613128][ T29] audit: type=1326 audit(2000000454.291:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30101 comm="syz.3.10822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684908acb9 code=0x7ffc0000 [ 362.939911][T30126] loop1: detected capacity change from 0 to 512 [ 362.966226][T30126] FAT-fs (loop1): error, corrupted file size (i_pos 51, 8960) [ 362.983354][T30126] FAT-fs (loop1): error, corrupted file size (i_pos 51, 8960) [ 363.067226][T30129] validate_nla: 1 callbacks suppressed [ 363.067244][T30129] netlink: 'syz.3.10835': attribute type 12 has an invalid length. [ 363.080731][T30129] netlink: 'syz.3.10835': attribute type 29 has an invalid length. [ 363.088703][T30129] __nla_validate_parse: 5 callbacks suppressed [ 363.088719][T30129] netlink: 148 bytes leftover after parsing attributes in process `syz.3.10835'. [ 363.107511][T30129] netlink: 'syz.3.10835': attribute type 2 has an invalid length. [ 363.115606][T30129] netlink: 'syz.3.10835': attribute type 3 has an invalid length. [ 363.181479][T29730] kernel write not supported for file /register (pid: 29730 comm: kworker/0:1) [ 363.284670][T30158] loop5: detected capacity change from 0 to 128 [ 363.293329][T30158] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 363.329540][T21870] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 363.534535][T30181] loop5: detected capacity change from 0 to 2048 [ 363.561663][T30181] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.966540][T30212] loop9: detected capacity change from 0 to 1024 [ 363.974970][T30212] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 364.007393][T30220] lo speed is unknown, defaulting to 1000 [ 364.007632][T30212] JBD2: no valid journal superblock found [ 364.019100][T30212] EXT4-fs (loop9): Could not load journal inode [ 364.053667][T30181] syz.5.10860 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 364.068216][T30181] CPU: 0 UID: 0 PID: 30181 Comm: syz.5.10860 Not tainted syzkaller #0 PREEMPT(voluntary) [ 364.068292][T30181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 364.068310][T30181] Call Trace: [ 364.068317][T30181] [ 364.068326][T30181] __dump_stack+0x1d/0x30 [ 364.068352][T30181] dump_stack_lvl+0x95/0xd0 [ 364.068435][T30181] dump_stack+0x15/0x1b [ 364.068461][T30181] dump_header+0x80/0x240 [ 364.068483][T30181] oom_kill_process+0x295/0x350 [ 364.068578][T30181] out_of_memory+0x97d/0xb80 [ 364.068606][T30181] try_charge_memcg+0x62e/0xa10 [ 364.068679][T30181] obj_cgroup_charge_pages+0xa6/0x150 [ 364.068733][T30181] __memcg_kmem_charge_page+0x9e/0x170 [ 364.068800][T30181] __alloc_frozen_pages_noprof+0x18a/0x350 [ 364.068941][T30181] alloc_pages_mpol+0x1f6/0x260 [ 364.068970][T30181] alloc_pages_noprof+0x8f/0x130 [ 364.068997][T30181] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 364.069092][T30181] __kvmalloc_node_noprof+0x471/0x680 [ 364.069119][T30181] ? ip_set_alloc+0x24/0x30 [ 364.069149][T30181] ? ip_set_alloc+0x24/0x30 [ 364.069246][T30181] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 364.069289][T30181] ip_set_alloc+0x24/0x30 [ 364.069313][T30181] hash_netiface_create+0x282/0x740 [ 364.069342][T30181] ? __pfx_hash_netiface_create+0x10/0x10 [ 364.069381][T30181] ip_set_create+0x3cf/0x970 [ 364.069451][T30181] ? __nla_parse+0x40/0x60 [ 364.069480][T30181] nfnetlink_rcv_msg+0x509/0x5d0 [ 364.069532][T30181] netlink_rcv_skb+0x123/0x220 [ 364.069631][T30181] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 364.069662][T30181] nfnetlink_rcv+0x167/0x1720 [ 364.069688][T30181] ? __kfree_skb+0x109/0x150 [ 364.069714][T30181] ? nlmon_xmit+0x4f/0x60 [ 364.069785][T30181] ? consume_skb+0x49/0x140 [ 364.069806][T30181] ? nlmon_xmit+0x4f/0x60 [ 364.069824][T30181] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 364.069853][T30181] ? __dev_queue_xmit+0x139a/0x1f20 [ 364.069930][T30181] ? __dev_queue_xmit+0x148/0x1f20 [ 364.069961][T30181] ? ref_tracker_free+0x37d/0x3e0 [ 364.070060][T30181] ? __netlink_deliver_tap+0x4dc/0x500 [ 364.070103][T30181] netlink_unicast+0x5c0/0x690 [ 364.070135][T30181] netlink_sendmsg+0x5c8/0x6f0 [ 364.070203][T30181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.070229][T30181] __sock_sendmsg+0x145/0x170 [ 364.070259][T30181] ____sys_sendmsg+0x31e/0x4a0 [ 364.070299][T30181] ___sys_sendmsg+0x195/0x1e0 [ 364.070408][T30181] __x64_sys_sendmsg+0xd4/0x160 [ 364.070442][T30181] x64_sys_call+0x17ba/0x3000 [ 364.070468][T30181] do_syscall_64+0xc0/0x2a0 [ 364.070563][T30181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.070588][T30181] RIP: 0033:0x7fc99d26acb9 [ 364.070610][T30181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.070630][T30181] RSP: 002b:00007fc99bcc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.070653][T30181] RAX: ffffffffffffffda RBX: 00007fc99d4e5fa0 RCX: 00007fc99d26acb9 [ 364.070709][T30181] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 364.070726][T30181] RBP: 00007fc99d2d8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 364.070741][T30181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.070815][T30181] R13: 00007fc99d4e6038 R14: 00007fc99d4e5fa0 R15: 00007ffe3e440b88 [ 364.070835][T30181] [ 364.070842][T30181] memory: usage 307200kB, limit 307200kB, failcnt 353 [ 364.148294][T30220] ip6_vti0 speed is unknown, defaulting to 1000 [ 364.150834][T30181] memory+swap: usage 308404kB, limit 9007199254740988kB, failcnt 0 [ 364.424610][T30181] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 364.431946][T30181] Memory cgroup stats for /syz5: [ 364.432479][T30181] cache 8192 [ 364.440710][T30181] rss 0 [ 364.443492][T30181] shmem 0 [ 364.446492][T30181] mapped_file 0 [ 364.450061][T30181] dirty 0 [ 364.453266][T30181] writeback 0 [ 364.456626][T30181] workingset_refault_anon 28 [ 364.461228][T30181] workingset_refault_file 0 [ 364.465947][T30181] swap 1232896 [ 364.469522][T30181] swapcached 8192 [ 364.473334][T30181] pgpgin 193978 [ 364.477021][T30181] pgpgout 193972 [ 364.480593][T30181] pgfault 217566 [ 364.484228][T30181] pgmajfault 7 [ 364.487657][T30181] inactive_anon 0 [ 364.491465][T30181] active_anon 8192 [ 364.495324][T30181] inactive_file 0 [ 364.499005][T30181] active_file 16384 [ 364.502910][T30181] unevictable 0 [ 364.506430][T30181] hierarchical_memory_limit 314572800 [ 364.511980][T30181] hierarchical_memsw_limit 9223372036854771712 [ 364.518171][T30181] total_cache 8192 [ 364.521907][T30181] total_rss 0 [ 364.525326][T30181] total_shmem 0 [ 364.528825][T30181] total_mapped_file 0 [ 364.532792][T30181] total_dirty 0 [ 364.536487][T30181] total_writeback 0 [ 364.540343][T30181] total_workingset_refault_anon 28 [ 364.545716][T30181] total_workingset_refault_file 0 [ 364.550851][T30181] total_swap 1232896 [ 364.554775][T30181] total_swapcached 8192 [ 364.559233][T30181] total_pgpgin 193978 [ 364.563225][T30181] total_pgpgout 193972 [ 364.567402][T30181] total_pgfault 217566 [ 364.571499][T30181] total_pgmajfault 7 [ 364.575414][T30181] total_inactive_anon 0 [ 364.579660][T30181] total_active_anon 8192 [ 364.583907][T30181] total_inactive_file 0 [ 364.588114][T30181] total_active_file 16384 [ 364.592457][T30181] total_unevictable 0 [ 364.596473][T30181] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.10860,pid=30179,uid=0 [ 364.612046][T30181] Memory cgroup out of memory: Killed process 30179 (syz.5.10860) total-vm:96048kB, anon-rss:1204kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 364.672083][T29507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.722790][T30231] loop1: detected capacity change from 0 to 1024 [ 364.755570][T30231] EXT4-fs: Ignoring removed orlov option [ 364.786268][T30239] loop9: detected capacity change from 0 to 128 [ 364.815022][T30235] loop5: detected capacity change from 0 to 2048 [ 364.824899][T30231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.844727][T30239] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 364.897205][T30235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.925287][T30239] ext4 filesystem being mounted at /280/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 364.976449][T27971] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.014143][T25689] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 365.041218][T29507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.083631][T30263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10891'. [ 365.093674][T30263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10891'. [ 365.324723][T30297] syz_tun: entered allmulticast mode [ 365.343777][T30293] syz_tun: left allmulticast mode [ 365.414701][T30306] sctp: [Deprecated]: syz.1.10915 (pid 30306) Use of struct sctp_assoc_value in delayed_ack socket option. [ 365.414701][T30306] Use struct sctp_sack_info instead [ 366.142492][T30357] loop1: detected capacity change from 0 to 1024 [ 366.150855][T30357] EXT4-fs: Ignoring removed nomblk_io_submit option [ 366.165782][T30357] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 366.174135][T30357] System zones: 0-1, 3-36 [ 366.181521][T30357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.245517][T27971] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.261085][T30369] loop9: detected capacity change from 0 to 512 [ 366.272936][T30369] EXT4-fs: Ignoring removed bh option [ 366.279693][T30369] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 366.290239][T30369] EXT4-fs (loop9): 1 truncate cleaned up [ 366.296617][T30369] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.381896][T30385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10951'. [ 366.402950][T30385] hsr_slave_1 (unregistering): left promiscuous mode [ 366.433108][T25689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.467487][T30390] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10953'. [ 366.484982][T30390] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10953'. [ 366.495244][T30390] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10953'. [ 366.629141][T30408] ------------[ cut here ]------------ [ 366.634888][T30408] EA inode 11 i_nlink=2 [ 366.634904][T30408] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.1.10961/30408 [ 366.650433][T30408] Modules linked in: [ 366.654364][T30408] CPU: 0 UID: 0 PID: 30408 Comm: syz.1.10961 Not tainted syzkaller #0 PREEMPT(voluntary) [ 366.664518][T30408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 366.674854][T30408] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 366.681684][T30408] Code: f4 cd 9b ff 4c 8d 2d 1d 96 3f 05 49 8d 7e 40 e8 f4 7f b7 ff 49 8b 6e 40 4c 89 e7 e8 28 7b b7 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 2f 4c c5 03 66 66 66 66 66 66 2e [ 366.701572][T30408] RSP: 0018:ffffc900018c7778 EFLAGS: 00010246 [ 366.707775][T30408] RAX: ffff88810448bc10 RBX: ffff88811a47c1a8 RCX: ffffffff81bc66d8 [ 366.716056][T30408] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fbfce0 [ 366.724072][T30408] RBP: 000000000000000b R08: 000188811a47c15b R09: 0000000000000000 [ 366.732143][T30408] R10: ffffc900018c76a8 R11: 0001c900018c76a8 R12: ffff88811a47c158 [ 366.740301][T30408] R13: ffffffff86fbfce0 R14: ffff88811a47c110 R15: 0000000000000001 [ 366.748467][T30408] FS: 00007f65dd3776c0(0000) GS:ffff8882aeb7e000(0000) knlGS:0000000000000000 [ 366.757625][T30408] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.764384][T30408] CR2: 00007f64fdb7e2f8 CR3: 000000014b0a0000 CR4: 00000000003506f0 [ 366.772466][T30408] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 366.780519][T30408] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000602 [ 366.784499][T30415] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30415 comm=syz.5.10964 [ 366.788558][T30408] Call Trace: [ 366.788569][T30408] [ 366.788583][T30408] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 366.813790][T30408] ? errseq_check+0x2c/0x50 [ 366.818421][T30408] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 366.823911][T30408] ? ext4_truncate+0x92b/0xad0 [ 366.828757][T30408] ext4_evict_inode+0xa1f/0xd40 [ 366.833637][T30408] ? __pfx_ext4_evict_inode+0x10/0x10 [ 366.839226][T30408] evict+0x2af/0x510 [ 366.843230][T30408] ? __dquot_initialize+0x146/0x7c0 [ 366.848480][T30408] iput+0x4b9/0x650 [ 366.852467][T30408] ext4_process_orphan+0x1a9/0x1c0 [ 366.857699][T30408] ext4_orphan_cleanup+0x6a8/0xa00 [ 366.862959][T30408] ext4_fill_super+0x3476/0x3800 [ 366.867945][T30408] ? set_blocksize+0x1a3/0x310 [ 366.872735][T30408] ? setup_bdev_super+0x30e/0x370 [ 366.877805][T30408] ? __pfx_ext4_fill_super+0x10/0x10 [ 366.883219][T30408] get_tree_bdev_flags+0x291/0x300 [ 366.888412][T30408] ? __pfx_ext4_fill_super+0x10/0x10 [ 366.893724][T30408] get_tree_bdev+0x1f/0x30 [ 366.898277][T30408] ext4_get_tree+0x1c/0x30 [ 366.902795][T30408] vfs_get_tree+0x57/0x1d0 [ 366.907659][T30408] do_new_mount+0x288/0x700 [ 366.912202][T30408] path_mount+0x4c0/0xb90 [ 366.916768][T30408] ? user_path_at+0xbf/0x130 [ 366.921412][T30408] __se_sys_mount+0x28c/0x2e0 [ 366.926192][T30408] __x64_sys_mount+0x67/0x80 [ 366.930796][T30408] x64_sys_call+0x2cca/0x3000 [ 366.935755][T30408] do_syscall_64+0xc0/0x2a0 [ 366.940298][T30408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.946243][T30408] RIP: 0033:0x7f65de91bf4a [ 366.951082][T30408] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.970954][T30408] RSP: 002b:00007f65dd376e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 366.979583][T30408] RAX: ffffffffffffffda RBX: 00007f65dd376ee0 RCX: 00007f65de91bf4a [ 366.987589][T30408] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f65dd376ea0 [ 366.995779][T30408] RBP: 0000200000000180 R08: 00007f65dd376ee0 R09: 0000000000800718 [ 367.003757][T30408] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 367.011857][T30408] R13: 00007f65dd376ea0 R14: 000000000000047f R15: 0000200000000200 [ 367.019899][T30408] [ 367.022917][T30408] ---[ end trace 0000000000000000 ]--- [ 367.030341][T30408] EXT4-fs (loop1): 1 orphan inode deleted [ 367.036731][T30408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.075366][T27971] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.137935][T30427] netlink: 'syz.9.10968': attribute type 10 has an invalid length. [ 367.229028][T30438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10974'. [ 367.259819][T30442] netlink: 104 bytes leftover after parsing attributes in process `syz.8.10977'. [ 367.282976][T30447] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=30447 comm=syz.5.10979 [ 367.563257][T30478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10992'. [ 367.572635][T30478] netlink: 'syz.5.10992': attribute type 1 has an invalid length. [ 367.638214][T30483] set_capacity_and_notify: 2 callbacks suppressed [ 367.638233][T30483] loop5: detected capacity change from 0 to 1024 [ 367.655010][T30483] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 367.666117][T30483] JBD2: no valid journal superblock found [ 367.667645][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 367.667695][ T29] audit: type=1326 audit(2000000460.349:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30488 comm="syz.8.10997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 367.671937][T30483] EXT4-fs (loop5): Could not load journal inode [ 367.680172][ T29] audit: type=1326 audit(2000000460.359:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30488 comm="syz.8.10997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 367.736280][ T29] audit: type=1326 audit(2000000460.409:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30488 comm="syz.8.10997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 367.760801][ T29] audit: type=1326 audit(2000000460.409:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30488 comm="syz.8.10997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 367.784566][ T29] audit: type=1326 audit(2000000460.409:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30488 comm="syz.8.10997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 367.919383][T30498] loop8: detected capacity change from 0 to 512 [ 367.927042][T30498] EXT4-fs: Ignoring removed oldalloc option [ 367.940207][T30498] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.11001: Parent and EA inode have the same ino 15 [ 367.966019][T30498] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.11001: Parent and EA inode have the same ino 15 [ 367.983061][T30498] EXT4-fs (loop8): 1 orphan inode deleted [ 367.995368][T30498] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.022037][T30506] loop5: detected capacity change from 0 to 512 [ 368.045847][T30506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.060948][T30506] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 368.076793][T18604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.162144][T30518] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #18: comm syz.5.11004: corrupted inode contents [ 368.183739][T30518] EXT4-fs (loop5): Remounting filesystem read-only [ 368.192026][T30518] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 368.195726][T30520] netlink: 'syz.8.11010': attribute type 5 has an invalid length. [ 368.263087][T29507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.426678][T30536] loop8: detected capacity change from 0 to 512 [ 368.439199][T30536] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.451988][T30536] ext4 filesystem being mounted at /892/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 368.480556][T18604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.662148][T30567] loop8: detected capacity change from 0 to 512 [ 368.710351][T30572] loop9: detected capacity change from 0 to 128 [ 368.732116][T30572] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 322) [ 368.741181][T30572] FAT-fs (loop9): Filesystem has been set read-only [ 368.802405][ T29] audit: type=1326 audit(2000000461.479:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30579 comm="syz.8.11035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 368.833848][ T29] audit: type=1326 audit(2000000461.479:4542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30579 comm="syz.8.11035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 368.858160][ T29] audit: type=1326 audit(2000000461.479:4543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30579 comm="syz.8.11035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 368.882155][ T29] audit: type=1326 audit(2000000461.479:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30579 comm="syz.8.11035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 368.906596][ T29] audit: type=1326 audit(2000000461.479:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30579 comm="syz.8.11035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 369.130662][T30606] syzkaller1: entered promiscuous mode [ 369.136419][T30606] syzkaller1: entered allmulticast mode [ 369.387823][T30622] netlink: 36 bytes leftover after parsing attributes in process `syz.9.11053'. [ 369.467179][T30626] loop5: detected capacity change from 0 to 512 [ 369.475929][T30626] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 369.496414][T30626] EXT4-fs (loop5): 1 truncate cleaned up [ 369.502755][T30626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.519466][T30626] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 369.535281][T30626] EXT4-fs (loop5): Remounting filesystem read-only [ 369.553382][T29507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.774926][T30647] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11064'. [ 370.184254][T30691] atomic_op ffff8881161e9128 conn xmit_atomic 0000000000000000 [ 370.208962][T29730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=29730 comm=kworker/0:1 [ 370.557702][T30715] loop8: detected capacity change from 0 to 1024 [ 370.577362][T30715] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 370.589974][T30715] ext4 filesystem being mounted at /916/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.604928][T30715] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: block 3: comm syz.8.11093: lblock 3 mapped to illegal pblock 3 (length 1) [ 370.620982][T30715] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 370.633360][T30715] EXT4-fs (loop8): This should not happen!! Data will be lost [ 370.633360][T30715] [ 370.646654][T30715] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: block 3: comm syz.8.11093: lblock 3 mapped to illegal pblock 3 (length 1) [ 370.670874][T30715] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 370.684026][T30715] EXT4-fs (loop8): This should not happen!! Data will be lost [ 370.684026][T30715] [ 370.736538][T18604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 370.783265][T30732] sock: sock_set_timeout: `syz.1.11101' (pid 30732) tries to set negative timeout [ 370.794950][T30730] loop8: detected capacity change from 0 to 512 [ 370.826064][ T3428] kernel write not supported for file bpf-prog (pid: 3428 comm: kworker/1:5) [ 370.861833][T30730] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.905214][T30730] ext4 filesystem being mounted at /917/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 370.928120][T30734] loop5: detected capacity change from 0 to 8192 [ 371.028632][T30751] netlink: 'syz.9.11108': attribute type 6 has an invalid length. [ 371.038431][T30748] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #18: comm syz.8.11098: corrupted inode contents [ 371.091328][T30757] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 371.109257][T30755] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 371.132459][T30748] EXT4-fs (loop8): Remounting filesystem read-only [ 371.132461][T30757] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(7) [ 371.132487][T30757] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 371.149287][T30748] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -30) [ 371.153326][T30757] vhci_hcd vhci_hcd.0: Device attached [ 371.170200][T30763] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(10) [ 371.170219][T30755] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.176865][T30763] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 371.176949][T30763] vhci_hcd vhci_hcd.0: Device attached [ 371.232226][T30757] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(9) [ 371.238889][T30757] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 371.246538][T30757] vhci_hcd vhci_hcd.0: Device attached [ 371.253632][T30767] vhci_hcd: connection closed [ 371.253765][ T947] vhci_hcd vhci_hcd.9: stop threads [ 371.258231][T18604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.259056][ T947] vhci_hcd vhci_hcd.9: release socket [ 371.278355][ T947] vhci_hcd vhci_hcd.9: disconnect device [ 371.290007][T30761] vhci_hcd: connection closed [ 371.291625][T30764] vhci_hcd: connection closed [ 371.305639][ T947] vhci_hcd vhci_hcd.9: stop threads [ 371.316393][ T947] vhci_hcd vhci_hcd.9: release socket [ 371.321915][ T947] vhci_hcd vhci_hcd.9: disconnect device [ 371.332336][ T947] vhci_hcd vhci_hcd.9: stop threads [ 371.338315][ T947] vhci_hcd vhci_hcd.9: release socket [ 371.343811][ T947] vhci_hcd vhci_hcd.9: disconnect device [ 371.350071][ T5570] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 371.362908][T30780] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11118'. [ 371.376936][T30780] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11118'. [ 371.661327][T30812] lo speed is unknown, defaulting to 1000 [ 371.824491][T30812] ip6_vti0 speed is unknown, defaulting to 1000 [ 371.849149][T30827] can0: slcan on ttyS3. [ 371.935723][T30827] can0 (unregistered): slcan off ttyS3. [ 372.078689][T30850] veth1_to_bond: entered allmulticast mode [ 372.127180][T30849] veth1_to_bond: left allmulticast mode [ 372.236578][T30870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11147'. [ 372.354921][T30885] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 372.473481][T30897] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.11155: corrupted in-inode xattr: invalid ea_ino [ 372.491796][T30897] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.11155: couldn't read orphan inode 15 (err -117) [ 372.543766][T30910] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 372.553764][T30897] EXT4-fs mount: 1 callbacks suppressed [ 372.553858][T30897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.586957][T30910] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 372.609338][T30910] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.676127][T25689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 372.699308][T30915] netlink: 'syz.5.11165': attribute type 4 has an invalid length. [ 372.708031][T30915] netlink: 152 bytes leftover after parsing attributes in process `syz.5.11165'. [ 372.728382][ T1655] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.738267][ T1655] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.773113][T27971] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.800853][T30915] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 372.847174][ T1655] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.857342][ T1655] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.885927][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 372.885945][ T29] audit: type=1326 audit(2000000465.559:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30925 comm="syz.1.11166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65de91acb9 code=0x7ffc0000 [ 372.916410][ T29] audit: type=1326 audit(2000000465.559:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30925 comm="syz.1.11166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65de91acb9 code=0x7ffc0000 [ 372.940666][ T29] audit: type=1326 audit(2000000465.559:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30925 comm="syz.1.11166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f65de91acb9 code=0x7ffc0000 [ 372.965250][ T29] audit: type=1326 audit(2000000465.559:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30925 comm="syz.1.11166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65de91acb9 code=0x7ffc0000 [ 372.988848][ T29] audit: type=1326 audit(2000000465.559:4579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30925 comm="syz.1.11166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65de91acb9 code=0x7ffc0000 [ 373.013361][ T29] audit: type=1326 audit(2000000465.559:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30925 comm="syz.1.11166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f65de91acb9 code=0x7ffc0000 [ 373.038181][ T29] audit: type=1326 audit(2000000465.559:4581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30925 comm="syz.1.11166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65de91acb9 code=0x7ffc0000 [ 373.061925][ T29] audit: type=1326 audit(2000000465.559:4582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30925 comm="syz.1.11166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65de91acb9 code=0x7ffc0000 [ 373.086463][ T29] audit: type=1326 audit(2000000465.559:4583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30925 comm="syz.1.11166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f65de91acb9 code=0x7ffc0000 [ 373.110373][ T29] audit: type=1326 audit(2000000465.559:4584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30925 comm="syz.1.11166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65de91acb9 code=0x7ffc0000 [ 373.145224][ T1655] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.155312][ T1655] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.287329][ T1655] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.297466][ T1655] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.323806][T30946] set_capacity_and_notify: 3 callbacks suppressed [ 373.323827][T30946] loop5: detected capacity change from 0 to 1024 [ 373.374769][T30946] EXT4-fs: inline encryption not supported [ 373.381238][T30946] EXT4-fs: Ignoring removed oldalloc option [ 373.388536][T30946] EXT4-fs: inline encryption not supported [ 373.395574][T30946] EXT4-fs: Ignoring removed orlov option [ 373.438758][T30946] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.457171][ T1655] bridge_slave_1: left allmulticast mode [ 373.462879][ T1655] bridge_slave_1: left promiscuous mode [ 373.469098][ T1655] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.524564][T30956] loop8: detected capacity change from 0 to 4096 [ 373.554958][T30956] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.582999][ T1655] bridge_slave_0: left promiscuous mode [ 373.589330][ T1655] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.650017][T18604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.752951][ T1655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.767091][ T1655] bond_slave_0: left allmulticast mode [ 373.778016][ T1655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.787249][ T1655] bond_slave_1: left allmulticast mode [ 373.793661][ T1655] bond0 (unregistering): Released all slaves [ 373.848340][ T1655] IPVS: stopping master sync thread 11699 ... [ 373.986853][ T1655] hsr_slave_0: left promiscuous mode [ 374.020452][T31032] netlink: 131740 bytes leftover after parsing attributes in process `syz.3.11193'. [ 374.035285][T31032] netlink: zone id is out of range [ 374.040709][T31032] netlink: zone id is out of range [ 374.063301][T31032] netlink: zone id is out of range [ 374.082798][T31032] netlink: zone id is out of range [ 374.088251][T31032] netlink: zone id is out of range [ 374.093634][T31032] netlink: zone id is out of range [ 374.099676][T31032] netlink: zone id is out of range [ 374.107281][ T1655] pimreg (unregistering): left allmulticast mode [ 374.123752][T31032] netlink: del zone limit has 8 unknown bytes [ 374.141669][ T1655] team0 (unregistering): Port device team_slave_1 removed [ 374.162321][ T1655] team0 (unregistering): Port device team_slave_0 removed [ 374.193440][T29507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.249624][ T1814] smc: removing ib device syz1 [ 374.255399][T29730] lo speed is unknown, defaulting to 1000 [ 374.261411][T29730] syz1: Port: 1 Link DOWN [ 374.357190][T31063] loop5: detected capacity change from 0 to 1024 [ 374.418671][T31063] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 374.469292][T31063] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.485263][T30628] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 374.625181][T31063] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.11198: lblock 0 mapped to illegal pblock 0 (length 1) [ 374.701329][T31063] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.11198: lblock 0 mapped to illegal pblock 0 (length 1) [ 374.731958][T31131] gretap0: entered promiscuous mode [ 374.878133][T29507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 375.128207][ T1655] IPVS: stop unused estimator thread 0... [ 375.135029][T31178] loop5: detected capacity change from 0 to 256 [ 375.162469][T31178] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 375.190092][T31178] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 376.258557][T31264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11250'. [ 376.694794][T31301] loop8: detected capacity change from 0 to 2048 [ 376.740243][T31301] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.860150][T18604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.948269][T31322] loop8: detected capacity change from 0 to 2048 [ 377.026696][T31322] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.155637][T18604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.237152][T31344] loop5: detected capacity change from 0 to 2048 [ 377.298383][T31344] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.347923][T31353] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11281'. [ 377.357002][T31353] netlink: 'syz.8.11281': attribute type 11 has an invalid length. [ 377.364927][T31353] netlink: 'syz.8.11281': attribute type 14 has an invalid length. [ 377.390489][T29507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.438501][T31357] netlink: 56 bytes leftover after parsing attributes in process `syz.9.11286'. [ 377.853709][T31395] syz.5.11301: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 377.869491][T31395] CPU: 0 UID: 0 PID: 31395 Comm: syz.5.11301 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 377.869549][T31395] Tainted: [W]=WARN [ 377.869565][T31395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 377.869579][T31395] Call Trace: [ 377.869587][T31395] [ 377.869596][T31395] __dump_stack+0x1d/0x30 [ 377.869704][T31395] dump_stack_lvl+0x95/0xd0 [ 377.869731][T31395] dump_stack+0x15/0x1b [ 377.869754][T31395] warn_alloc+0x145/0x1c0 [ 377.869787][T31395] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 377.869917][T31395] ? __futex_wait+0x1fd/0x260 [ 377.869957][T31395] ? __pfx_futex_wake_mark+0x10/0x10 [ 377.870032][T31395] ? __rcu_read_unlock+0x4e/0x70 [ 377.870051][T31395] ? avc_has_perm_noaudit+0xab/0x130 [ 377.870168][T31395] vmalloc_user_noprof+0x7d/0xb0 [ 377.870199][T31395] ? xskq_create+0x80/0xe0 [ 377.870225][T31395] xskq_create+0x80/0xe0 [ 377.870262][T31395] xsk_init_queue+0x91/0xe0 [ 377.870293][T31395] xsk_setsockopt+0x477/0x640 [ 377.870323][T31395] ? __pfx_xsk_setsockopt+0x10/0x10 [ 377.870414][T31395] __sys_setsockopt+0x184/0x200 [ 377.870442][T31395] __x64_sys_setsockopt+0x64/0x80 [ 377.870467][T31395] x64_sys_call+0x21d5/0x3000 [ 377.870574][T31395] do_syscall_64+0xc0/0x2a0 [ 377.870605][T31395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.870674][T31395] RIP: 0033:0x7fc99d26acb9 [ 377.870692][T31395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.870711][T31395] RSP: 002b:00007fc99bcc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 377.870731][T31395] RAX: ffffffffffffffda RBX: 00007fc99d4e5fa0 RCX: 00007fc99d26acb9 [ 377.870817][T31395] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 377.870829][T31395] RBP: 00007fc99d2d8bf7 R08: 0000000000000004 R09: 0000000000000000 [ 377.870841][T31395] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 377.870854][T31395] R13: 00007fc99d4e6038 R14: 00007fc99d4e5fa0 R15: 00007ffe3e440b88 [ 377.870873][T31395] [ 377.870883][T31395] Mem-Info: [ 378.084033][T31395] active_anon:34430 inactive_anon:2 isolated_anon:0 [ 378.084033][T31395] active_file:25147 inactive_file:2733 isolated_file:0 [ 378.084033][T31395] unevictable:0 dirty:302 writeback:0 [ 378.084033][T31395] slab_reclaimable:4048 slab_unreclaimable:39267 [ 378.084033][T31395] mapped:29203 shmem:17110 pagetables:2657 [ 378.084033][T31395] sec_pagetables:0 bounce:0 [ 378.084033][T31395] kernel_misc_reclaimable:0 [ 378.084033][T31395] free:1710226 free_pcp:12055 free_cma:0 [ 378.130393][T31395] Node 0 active_anon:137720kB inactive_anon:8kB active_file:100588kB inactive_file:10932kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116812kB dirty:1208kB writeback:0kB shmem:68440kB kernel_stack:5008kB pagetables:10628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 378.158964][T31395] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 378.189758][T31395] lowmem_reserve[]: 0 2879 7858 7858 [ 378.195223][T31395] Node 0 DMA32 free:2945492kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949020kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 378.227360][T31395] lowmem_reserve[]: 0 0 4978 4978 [ 378.232555][T31395] Node 0 Normal free:3879860kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:137720kB inactive_anon:8kB active_file:100588kB inactive_file:10932kB unevictable:0kB writepending:1208kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:44380kB local_pcp:27052kB free_cma:0kB [ 378.266493][T31395] lowmem_reserve[]: 0 0 0 0 [ 378.271044][T31395] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 378.284037][T31395] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 5*64kB (M) 2*128kB (M) 3*256kB (M) 2*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945492kB [ 378.300708][T31395] Node 0 Normal: 2889*4kB (UME) 1078*8kB (UM) 484*16kB (UME) 659*32kB (UME) 710*64kB (UME) 419*128kB (UM) 253*256kB (UM) 134*512kB (UME) 170*1024kB (UM) 180*2048kB (UME) 746*4096kB (UM) = 3879796kB [ 378.320646][T31395] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 378.330484][T31395] 44971 total pagecache pages [ 378.335265][T31395] 4 pages in swap cache [ 378.339433][T31395] Free swap = 123640kB [ 378.343586][T31395] Total swap = 124996kB [ 378.347811][T31395] 2097051 pages RAM [ 378.351710][T31395] 0 pages HighMem/MovableOnly [ 378.356973][T31395] 81396 pages reserved [ 378.420327][T31413] netlink: 'syz.5.11309': attribute type 29 has an invalid length. [ 378.421284][T31415] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 378.432804][T31413] netlink: 'syz.5.11309': attribute type 29 has an invalid length. [ 378.448329][T31413] netlink: 500 bytes leftover after parsing attributes in process `syz.5.11309'. [ 378.560005][T31430] netlink: 'syz.9.11317': attribute type 4 has an invalid length. [ 378.568914][T31430] netlink: 'syz.9.11317': attribute type 4 has an invalid length. [ 378.654092][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 378.654109][ T29] audit: type=1400 audit(2000000727.330:4638): avc: denied { ioctl } for pid=31424 comm="syz.1.11314" path="socket:[92018]" dev="sockfs" ino=92018 ioctlcmd=0x942c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 378.688132][ T29] audit: type=1400 audit(2000000727.340:4639): avc: denied { read write } for pid=29507 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 378.716521][ T29] audit: type=1400 audit(2000000727.340:4640): avc: denied { open } for pid=29507 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 378.740895][ T29] audit: type=1400 audit(2000000727.340:4641): avc: denied { ioctl } for pid=29507 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 378.767400][ T29] audit: type=1400 audit(2000000727.370:4642): avc: denied { recv } for pid=31427 comm="syz.1.11314" saddr=10.128.0.163 src=30036 daddr=10.128.1.34 dest=36400 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 378.802020][ T29] audit: type=1400 audit(2000000727.420:4643): avc: denied { map_create } for pid=31439 comm="syz.3.11321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 378.821781][ T29] audit: type=1400 audit(2000000727.420:4644): avc: denied { map_read map_write } for pid=31439 comm="syz.3.11321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 378.842386][ T29] audit: type=1400 audit(2000000727.420:4645): avc: denied { prog_load } for pid=31439 comm="syz.3.11321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 378.861716][ T29] audit: type=1400 audit(2000000727.420:4646): avc: denied { bpf } for pid=31439 comm="syz.3.11321" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 378.882870][ T29] audit: type=1400 audit(2000000727.420:4647): avc: denied { perfmon } for pid=31439 comm="syz.3.11321" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 379.236462][T31466] loop9: detected capacity change from 0 to 128 [ 379.263129][T31466] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 379.275645][T31466] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 379.308217][ T52] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 379.848928][T31501] ip6_vti0 speed is unknown, defaulting to 1000 [ 380.073780][T31523] loop5: detected capacity change from 0 to 128 [ 380.088211][T31527] netlink: 'syz.1.11356': attribute type 21 has an invalid length. [ 380.097095][T31527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11356'. [ 380.147090][T31532] loop5: detected capacity change from 0 to 128 [ 380.152260][T31527] netlink: 'syz.1.11356': attribute type 21 has an invalid length. [ 380.162142][T31527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11356'. [ 380.171761][ T31] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.189000][T31532] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 380.193431][ T31] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.217907][T31532] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.239012][T31536] loop9: detected capacity change from 0 to 1024 [ 380.247599][T31536] EXT4-fs: inline encryption not supported [ 380.275798][ T31] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.285991][T31536] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.302978][ T31] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.314797][T31543] loop8: detected capacity change from 0 to 256 [ 380.323681][T25689] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.346549][T29507] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 380.372992][T31543] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 380.390441][T31550] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11365'. [ 380.399602][T31550] netlink: 'syz.5.11365': attribute type 7 has an invalid length. [ 380.407484][T31550] netlink: 'syz.5.11365': attribute type 8 has an invalid length. [ 380.415766][T31550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11365'. [ 380.428884][T31550] erspan0: entered promiscuous mode [ 380.435012][T31550] gretap0: entered promiscuous mode [ 380.441671][T31550] debugfs: 'hsr1' already exists in 'hsr' [ 380.447586][T31550] Cannot create hsr debugfs directory [ 381.080422][T31584] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 381.126163][T31584] bond2 (unregistering): Released all slaves [ 381.128751][T31590] loop5: detected capacity change from 0 to 128 [ 381.141283][T31590] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 381.158059][T31590] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.208354][T29507] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 381.381540][T31620] loop5: detected capacity change from 0 to 512 [ 381.419379][T31620] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.441620][T31620] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.500042][T29507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.630584][T31653] loop5: detected capacity change from 0 to 1024 [ 381.698592][T31653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.714164][T31653] EXT4-fs warning (device loop5): ext4_rmdir:3185: inode #11: comm syz.5.11407: empty directory 'file1' has too many links (111) [ 381.859591][T29507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.063985][T31699] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 382.084409][T31699] bond1 (unregistering): Released all slaves [ 382.322118][T31724] loop5: detected capacity change from 0 to 1024 [ 382.334131][T31724] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.11437: bad orphan inode 134217728 [ 382.347695][T31724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.372684][T31731] loop1: detected capacity change from 0 to 128 [ 382.401130][T31733] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 382.676844][T29507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.822838][T31752] SELinux: syz.9.11449 (31752) set checkreqprot to 1. This is no longer supported. [ 383.025303][T31775] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 383.068315][T31775] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.097913][T31775] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 383.190796][T29507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.334894][T31803] ip6_vti0 speed is unknown, defaulting to 1000 [ 383.487018][T31815] EXT4-fs: Ignoring removed nomblk_io_submit option [ 383.518530][T31815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.576693][T31821] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.680446][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 383.680462][ T29] audit: type=1400 audit(2000000732.350:4803): avc: denied { write } for pid=31811 comm="syz.1.11476" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 383.724443][T27971] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.746774][ T29] audit: type=1400 audit(2000000732.410:4804): avc: denied { getopt } for pid=31800 comm="syz.3.11471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 383.767527][ T29] audit: type=1326 audit(2000000732.440:4805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31828 comm="syz.8.11482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 383.791386][ T29] audit: type=1326 audit(2000000732.440:4806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31828 comm="syz.8.11482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 383.815555][ T29] audit: type=1400 audit(2000000732.450:4807): avc: denied { read write } for pid=31828 comm="syz.8.11482" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 383.839137][ T29] audit: type=1400 audit(2000000732.450:4808): avc: denied { open } for pid=31828 comm="syz.8.11482" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 383.862747][ T29] audit: type=1326 audit(2000000732.450:4809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31828 comm="syz.8.11482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 383.886779][ T29] audit: type=1326 audit(2000000732.450:4810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31828 comm="syz.8.11482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 383.910477][ T29] audit: type=1326 audit(2000000732.450:4811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31828 comm="syz.8.11482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 383.934300][ T29] audit: type=1400 audit(2000000732.450:4812): avc: denied { ioctl } for pid=31828 comm="syz.8.11482" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 384.016679][T29507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.073658][T31834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11483'. [ 384.643799][T31881] set_capacity_and_notify: 5 callbacks suppressed [ 384.643867][T31881] loop1: detected capacity change from 0 to 1024 [ 384.660975][T31881] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 384.714267][T31881] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 384.732818][T31881] EXT4-fs (loop1): orphan cleanup on readonly fs [ 384.762614][T31881] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.11505: Failed to acquire dquot type 0 [ 384.785343][T31881] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.11505: Failed to acquire dquot type 0 [ 384.797213][T31881] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.11505: Freeing blocks not in datazone - block = 0, count = 4096 [ 384.811616][T31881] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.11505: Failed to acquire dquot type 0 [ 384.823472][T31881] EXT4-fs (loop1): 1 orphan inode deleted [ 384.832848][T31881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 384.875034][T27971] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.905595][T29730] kernel read not supported for file /ppp (pid: 29730 comm: kworker/0:1) [ 385.434767][T31957] sctp: [Deprecated]: syz.5.11531 (pid 31957) Use of struct sctp_assoc_value in delayed_ack socket option. [ 385.434767][T31957] Use struct sctp_sack_info instead [ 386.225485][T32016] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.469322][T32027] loop5: detected capacity change from 0 to 512 [ 386.525932][T32027] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.585870][T32027] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.757475][T29507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.067846][T32073] netlink: 'syz.3.11568': attribute type 12 has an invalid length. [ 387.075849][T32073] netlink: 'syz.3.11568': attribute type 29 has an invalid length. [ 387.083837][T32073] netlink: 148 bytes leftover after parsing attributes in process `syz.3.11568'. [ 387.093078][T32073] netlink: 'syz.3.11568': attribute type 2 has an invalid length. [ 387.101042][T32073] netlink: 'syz.3.11568': attribute type 3 has an invalid length. [ 387.108964][T32073] netlink: 15 bytes leftover after parsing attributes in process `syz.3.11568'. [ 387.501259][T32109] netlink: 'syz.1.11584': attribute type 3 has an invalid length. [ 387.514767][T32109] netlink: 'syz.1.11584': attribute type 3 has an invalid length. [ 387.590649][T32114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11586'. [ 387.832591][T32130] netlink: 'syz.1.11591': attribute type 1 has an invalid length. [ 387.872449][T32130] bond2: entered promiscuous mode [ 387.884501][T32130] 8021q: adding VLAN 0 to HW filter on device bond2 [ 387.936087][T32139] bond2: (slave bridge2): making interface the new active one [ 387.943712][T32139] bridge2: entered promiscuous mode [ 387.951034][T32139] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 387.979597][T32145] netlink: 60 bytes leftover after parsing attributes in process `syz.8.11593'. [ 387.988903][T32145] netlink: 60 bytes leftover after parsing attributes in process `syz.8.11593'. [ 388.019134][T32145] netlink: 60 bytes leftover after parsing attributes in process `syz.8.11593'. [ 388.028502][T32145] netlink: 60 bytes leftover after parsing attributes in process `syz.8.11593'. [ 388.118842][T32145] netlink: 60 bytes leftover after parsing attributes in process `syz.8.11593'. [ 388.128144][T32145] netlink: 60 bytes leftover after parsing attributes in process `syz.8.11593'. [ 388.294739][T32166] ip6_vti0 speed is unknown, defaulting to 1000 [ 388.781062][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 388.781081][ T29] audit: type=1326 audit(2000000993.452:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32183 comm="syz.1.11605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f65de91acb9 code=0x7ffc0000 [ 388.822467][ T29] audit: type=1326 audit(2000000993.492:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32180 comm="syz.1.11605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65de91acb9 code=0x7ffc0000 [ 388.846898][ T29] audit: type=1326 audit(2000000993.492:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32180 comm="syz.1.11605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65de91acb9 code=0x7ffc0000 [ 389.109481][ T29] audit: type=1400 audit(2000000993.762:4910): avc: denied { mounton } for pid=32198 comm="syz.5.11613" path="/proc/395/task" dev="proc" ino=95339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 389.155913][ T29] audit: type=1400 audit(2000000993.812:4911): avc: denied { read } for pid=32201 comm="syz.1.11615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 389.443657][ T29] audit: type=1400 audit(2000000994.112:4912): avc: denied { read write } for pid=32217 comm="syz.8.11621" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 389.468178][ T29] audit: type=1400 audit(2000000994.112:4913): avc: denied { open } for pid=32217 comm="syz.8.11621" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 389.492066][T32218] loop8: detected capacity change from 0 to 1024 [ 389.499261][T32218] EXT4-fs: quotafile must be on filesystem root [ 389.638323][T32227] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 389.663300][T32228] __nla_validate_parse: 1 callbacks suppressed [ 389.663318][T32228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11626'. [ 389.716335][ T29] audit: type=1400 audit(2000000994.392:4914): avc: denied { bind } for pid=32232 comm="syz.3.11628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 389.795810][ T29] audit: type=1400 audit(2000000994.422:4915): avc: denied { listen } for pid=32232 comm="syz.3.11628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 389.912368][T32246] netlink: 'syz.5.11634': attribute type 2 has an invalid length. [ 389.920955][T32246] netlink: 'syz.5.11634': attribute type 2 has an invalid length. [ 390.031933][ T29] audit: type=1400 audit(2000000994.702:4916): avc: denied { sys_module } for pid=32248 comm="syz.3.11635" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 390.064713][T32256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11636'. [ 390.614376][T32278] ip6_vti0 speed is unknown, defaulting to 1000 [ 391.044916][T32294] ip6_vti0 speed is unknown, defaulting to 1000 [ 391.355983][T32298] SELinux: failed to load policy [ 391.703338][T32312] netlink: 64 bytes leftover after parsing attributes in process `syz.5.11660'. [ 391.808741][T32315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11662'. [ 391.817862][T32315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11662'. [ 391.846694][T32316] netlink: 'syz.8.11661': attribute type 1 has an invalid length. [ 391.860377][T32316] bond0: entered promiscuous mode [ 391.872130][T32316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.880952][T32315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11662'. [ 391.897738][T32315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11662'. [ 392.026284][T32323] bond0: (slave bridge1): making interface the new active one [ 392.033975][T32323] bridge1: entered promiscuous mode [ 392.046483][T32323] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 392.115405][T32335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11668'. [ 392.138971][T32332] SELinux: ebitmap: empty map [ 392.159920][T32332] SELinux: failed to load policy [ 392.275452][T32348] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11675'. [ 392.307449][T32354] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11678'. [ 392.537448][T32374] loop5: detected capacity change from 0 to 1024 [ 392.563569][T32374] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.579905][T32374] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.11686: Allocating blocks 385-513 which overlap fs metadata [ 392.596262][T32374] EXT4-fs (loop5): pa ffff888107d24cb0: logic 16, phys. 129, len 24 [ 392.604311][T32374] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 392.615601][T32374] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 392.628148][T32374] EXT4-fs (loop5): This should not happen!! Data will be lost [ 392.628148][T32374] [ 392.637908][T32374] EXT4-fs (loop5): Total free blocks count 0 [ 392.644184][T32374] EXT4-fs (loop5): Free/Dirty block details [ 392.650131][T32374] EXT4-fs (loop5): free_blocks=128 [ 392.655302][T32374] EXT4-fs (loop5): dirty_blocks=0 [ 392.660376][T32374] EXT4-fs (loop5): Block reservation details [ 392.666390][T32374] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 392.727136][T32387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.734648][T32387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.766744][T32387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.774165][T32387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.901903][T32391] loop8: detected capacity change from 0 to 8192 [ 392.966023][T32391] loop8: p1 p2 p4 < > [ 392.970143][T32391] loop8: partition table partially beyond EOD, truncated [ 392.989642][T32391] loop8: p1 start 16777216 is beyond EOD, truncated [ 392.996516][T32391] loop8: p2 size 515840 extends beyond EOD, truncated [ 393.011392][T32391] loop8: p4 start 16777216 is beyond EOD, truncated [ 393.085010][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 393.101495][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 393.696035][T32451] loop1: detected capacity change from 0 to 128 [ 393.716308][T32451] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 393.755797][T32451] ext4 filesystem being mounted at /315/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 393.820294][T27971] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 393.946003][T32458] loop1: detected capacity change from 0 to 736 [ 393.972615][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 393.972633][ T29] audit: type=1400 audit(2000000998.642:4945): avc: denied { mount } for pid=32457 comm="syz.1.11718" name="/" dev="loop1" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 394.041616][ T29] audit: type=1400 audit(2000000998.662:4946): avc: denied { unmount } for pid=27971 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 394.767065][ T1814] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.777485][ T1814] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.836505][ T29] audit: type=1400 audit(2000000999.512:4947): avc: denied { mounton } for pid=32482 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 394.868362][ T1814] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.878994][ T1814] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.019162][ T1814] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.029658][ T1814] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.104725][T32482] ip6_vti0 speed is unknown, defaulting to 1000 [ 395.154521][ T1814] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.164895][ T1814] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.315646][ T1814] bridge_slave_1: left allmulticast mode [ 395.321429][ T1814] bridge_slave_1: left promiscuous mode [ 395.327301][ T1814] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.340082][ T1814] bridge_slave_0: left allmulticast mode [ 395.345803][ T1814] bridge_slave_0: left promiscuous mode [ 395.351825][ T1814] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.647830][ T1814] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 395.657525][ T1814] bridge2 (unregistering): left promiscuous mode [ 395.708362][ T1814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.719628][ T1814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.731198][ T1814] bond0 (unregistering): Released all slaves [ 395.742289][ T1814] bond1 (unregistering): Released all slaves [ 395.754294][ T1814] bond2 (unregistering): Released all slaves [ 395.808133][ T1814] tipc: Left network mode [ 395.849310][T32482] chnl_net:caif_netlink_parms(): no params data found [ 395.912931][ T1814] hsr_slave_0: left promiscuous mode [ 395.929735][ T1814] hsr_slave_1: left promiscuous mode [ 395.944658][ T1814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.952690][ T1814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.046043][ T1814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.053606][ T1814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.120009][ T1814] veth1_macvtap: left promiscuous mode [ 396.140740][ T1814] veth0_macvtap: left promiscuous mode [ 396.159042][ T1814] veth1_vlan: left promiscuous mode [ 396.164448][ T1814] veth0_vlan: left promiscuous mode [ 396.433441][ T29] audit: type=1400 audit(2000001001.102:4948): avc: denied { listen } for pid=32543 comm="syz.3.11742" path=2F323535362FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 396.647525][ T1814] team0 (unregistering): Port device team_slave_1 removed [ 396.663648][ T1814] team0 (unregistering): Port device team_slave_0 removed [ 396.707063][T32555] netlink: 'syz.5.11744': attribute type 7 has an invalid length. [ 396.760620][T32555] netlink: 'syz.5.11744': attribute type 7 has an invalid length. [ 396.794681][ T898] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.829707][ T898] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.857948][ T898] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.867190][T32482] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.874423][T32482] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.925357][T32482] bridge_slave_0: entered allmulticast mode [ 396.949622][T32482] bridge_slave_0: entered promiscuous mode [ 396.972404][ T898] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.986548][T32482] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.993817][T32482] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.010297][T32482] bridge_slave_1: entered allmulticast mode [ 397.026568][T32482] bridge_slave_1: entered promiscuous mode [ 397.096640][T32482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.119628][T32482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.194574][T32482] team0: Port device team_slave_0 added [ 397.213285][T32597] ip6_vti0 speed is unknown, defaulting to 1000 [ 397.214932][T32482] team0: Port device team_slave_1 added [ 397.274859][T32482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.281906][T32482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.308019][T32482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.379198][T32482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.386369][T32482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.412436][T32482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.502757][T32482] hsr_slave_0: entered promiscuous mode [ 397.508897][T32482] hsr_slave_1: entered promiscuous mode [ 397.514873][T32482] debugfs: 'hsr0' already exists in 'hsr' [ 397.520714][T32482] Cannot create hsr debugfs directory [ 397.788669][T32597] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 397.934581][T32482] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 397.970251][T32482] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 398.008387][T32482] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 398.039021][T32482] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 398.072076][T32648] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 398.147579][ T29] audit: type=1400 audit(2000001002.822:4949): avc: denied { relabelfrom } for pid=32655 comm="syz.8.11759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 398.167861][ T29] audit: type=1400 audit(2000001002.822:4950): avc: denied { relabelto } for pid=32655 comm="syz.8.11759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 398.230857][T32482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.264224][T32482] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.278328][ T1655] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.285442][ T1655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.349921][T32668] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 398.376465][ T1881] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.383714][ T1881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.487685][T32482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 398.637074][T32482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.816211][T32706] __nla_validate_parse: 2 callbacks suppressed [ 398.816234][T32706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11765'. [ 398.888943][T32706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11765'. [ 398.914868][T32482] veth0_vlan: entered promiscuous mode [ 398.939544][T32482] veth1_vlan: entered promiscuous mode [ 398.958235][T32706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11765'. [ 398.986520][T32482] veth0_macvtap: entered promiscuous mode [ 399.019952][T32482] veth1_macvtap: entered promiscuous mode [ 399.022317][T32722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.025844][ T29] audit: type=1400 audit(2000001003.692:4951): avc: denied { ioctl } for pid=32719 comm="syz.5.11768" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 399.041041][T32482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.172220][T32482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.207486][ T1881] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.215230][T32722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.244290][ T1655] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.274407][ T1655] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.305942][ T1655] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.351199][ T29] audit: type=1400 audit(2000001004.022:4952): avc: denied { mounton } for pid=32482 comm="syz-executor" path="/root/syzkaller.LxC2fL/syz-tmp" dev="sda1" ino=2065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 399.446052][ T29] audit: type=1400 audit(2000001004.022:4953): avc: denied { mount } for pid=32482 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 399.468448][ T29] audit: type=1400 audit(2000001004.022:4954): avc: denied { mounton } for pid=32482 comm="syz-executor" path="/root/syzkaller.LxC2fL/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 399.495582][ T29] audit: type=1400 audit(2000001004.022:4955): avc: denied { mounton } for pid=32482 comm="syz-executor" path="/root/syzkaller.LxC2fL/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=96004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 399.523375][ T29] audit: type=1400 audit(2000001004.062:4956): avc: denied { mounton } for pid=32482 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 399.547307][ T29] audit: type=1400 audit(2000001004.062:4957): avc: denied { mount } for pid=32482 comm="syz-executor" name="/" dev="gadgetfs" ino=4469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 399.577530][ T29] audit: type=1400 audit(2000001004.232:4958): avc: denied { write } for pid=32761 comm="syz.8.11776" name="mcfilter" dev="proc" ino=4026532452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 399.942638][ T345] netlink: 'syz.3.11784': attribute type 1 has an invalid length. [ 399.950553][ T345] netlink: 'syz.3.11784': attribute type 4 has an invalid length. [ 399.958662][ T345] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.11784'. [ 400.480817][ T29] audit: type=1326 audit(2000001005.152:4959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=393 comm="syz.0.11791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6795aacb9 code=0x7ffc0000 [ 400.560070][ T29] audit: type=1326 audit(2000001005.152:4960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=393 comm="syz.0.11791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6795aacb9 code=0x7ffc0000 [ 400.624981][ T406] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11795'. [ 400.634110][ T406] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11795'. [ 400.717591][T31105] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.726590][ T5570] ip6_vti0 speed is unknown, defaulting to 1000 [ 400.733931][ T406] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11795'. [ 400.743956][ T406] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11795'. [ 400.756840][T31105] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.789430][T31105] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.815287][T31105] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.294241][ T476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11807'. [ 401.310368][ T476] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11807'. [ 401.385629][ T467] ip6_vti0 speed is unknown, defaulting to 1000 [ 401.404205][ T898] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.465571][ T898] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.514158][ T898] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.531592][ T467] chnl_net:caif_netlink_parms(): no params data found [ 401.589244][ T898] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.609227][ T467] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.616412][ T467] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.641625][ T467] bridge_slave_0: entered allmulticast mode [ 401.668522][ T467] bridge_slave_0: entered promiscuous mode [ 401.676173][ T467] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.683372][ T467] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.745346][ T467] bridge_slave_1: entered allmulticast mode [ 401.755921][ T467] bridge_slave_1: entered promiscuous mode [ 401.771816][ T522] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=522 comm=syz.0.11816 [ 401.796915][ T467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.812175][ T467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.851457][ T898] bridge_slave_1: left allmulticast mode [ 401.857303][ T898] bridge_slave_1: left promiscuous mode [ 401.862968][ T898] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.876152][ T898] bridge_slave_0: left allmulticast mode [ 401.881844][ T898] bridge_slave_0: left promiscuous mode [ 401.887636][ T898] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.107859][ T898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.118408][ T898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.139669][ T898] bond0 (unregistering): Released all slaves [ 402.188410][ T467] team0: Port device team_slave_0 added [ 402.198738][ T467] team0: Port device team_slave_1 added [ 402.256215][ T467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.263439][ T467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.289801][ T467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.387923][ T898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.396026][ T898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.417372][ T898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.424814][ T898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.463089][ T898] veth1_macvtap: left promiscuous mode [ 402.475347][ T898] veth0_macvtap: left promiscuous mode [ 402.484296][ T898] veth1_vlan: left promiscuous mode [ 402.490142][ T898] veth0_vlan: left promiscuous mode [ 402.576985][ T898] team0 (unregistering): Port device team_slave_1 removed [ 402.587531][ T898] team0 (unregistering): Port device team_slave_0 removed [ 402.604106][ T592] loop8: detected capacity change from 0 to 1764 [ 402.684848][ T467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.691902][ T467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.717912][ T467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.774255][ T467] hsr_slave_0: entered promiscuous mode [ 402.781105][ T467] hsr_slave_1: entered promiscuous mode [ 402.787968][ T467] debugfs: 'hsr0' already exists in 'hsr' [ 402.793920][ T467] Cannot create hsr debugfs directory [ 402.874474][ T619] netlink: 'syz.0.11842': attribute type 11 has an invalid length. [ 402.901355][ T619] netlink: 'syz.0.11842': attribute type 11 has an invalid length. [ 403.051507][ T644] loop0: detected capacity change from 0 to 256 [ 403.090371][ T648] netlink: 'syz.3.11850': attribute type 4 has an invalid length. [ 403.132666][ T648] netlink: 'syz.3.11850': attribute type 4 has an invalid length. [ 403.343880][ T467] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 403.353183][ T467] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 403.372012][ T467] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 403.384485][ T684] geneve3: entered promiscuous mode [ 403.390711][ T684] geneve3: entered allmulticast mode [ 403.413705][ T467] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 403.484129][ T467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.502905][ T467] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.515337][T23813] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.522455][T23813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.551276][ T467] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 403.561812][ T467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 403.577959][T23813] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.585179][T23813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.872135][ T467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.048994][ T29] kauditd_printk_skb: 395 callbacks suppressed [ 404.049054][ T29] audit: type=1326 audit(2000001264.727:5356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=656 comm="syz.3.11852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f684908acb9 code=0x7ffc0000 [ 404.065739][ T759] loop0: detected capacity change from 0 to 1024 [ 404.125944][ T770] __nla_validate_parse: 10 callbacks suppressed [ 404.125966][ T770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11871'. [ 404.160437][ T759] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.11869: bad orphan inode 134217728 [ 404.203255][ T759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.271296][ T467] veth0_vlan: entered promiscuous mode [ 404.296342][ T467] veth1_vlan: entered promiscuous mode [ 404.326095][ T467] veth0_macvtap: entered promiscuous mode [ 404.419953][ T467] veth1_macvtap: entered promiscuous mode [ 404.481089][ T467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.508509][ T467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.577453][T31105] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.617239][T31105] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.642930][T31105] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.662586][T31105] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.712416][T32482] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.726583][ T827] netlink: 'syz.6.11804': attribute type 1 has an invalid length. [ 404.958078][ T862] loop8: detected capacity change from 0 to 512 [ 404.980913][ T862] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.11889: invalid indirect mapped block 256 (level 2) [ 405.126363][ T862] EXT4-fs (loop8): 2 truncates cleaned up [ 405.162230][ T29] audit: type=1400 audit(2000001265.837:5357): avc: denied { create } for pid=891 comm="syz.0.11891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 405.165899][ T862] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.195299][ T29] audit: type=1400 audit(2000001265.837:5358): avc: denied { bind } for pid=891 comm="syz.0.11891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 405.386353][ T913] netlink: 144 bytes leftover after parsing attributes in process `syz.6.11896'. [ 405.449892][ T29] audit: type=1400 audit(2000001266.117:5359): avc: denied { name_bind } for pid=917 comm="syz.6.11897" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 405.503137][ T29] audit: type=1400 audit(2000001266.167:5360): avc: denied { setattr } for pid=861 comm="syz.8.11889" path="/1071/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 405.575917][T18604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.658876][ T936] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=936 comm=syz.8.11900 [ 405.768144][ T950] netlink: 'syz.0.11902': attribute type 1 has an invalid length. [ 405.776133][ T950] netlink: 'syz.0.11902': attribute type 1 has an invalid length. [ 405.784089][ T950] netlink: 'syz.0.11902': attribute type 2 has an invalid length. [ 405.784107][ T950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11902'. [ 405.808636][ T962] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11906'. [ 405.881947][ T971] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 405.883299][ T971] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 406.013488][ T29] audit: type=1400 audit(2000001266.687:5361): avc: denied { mount } for pid=987 comm="syz.0.11913" name="/" dev="hugetlbfs" ino=99467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 406.083725][ T986] ip6_vti0 speed is unknown, defaulting to 1000 [ 406.108473][ T992] 9pnet: p9_errstr2errno: server reported unknown error st6 [ 406.183245][ T29] audit: type=1400 audit(2000001266.857:5362): avc: denied { setopt } for pid=1004 comm="syz.6.11918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 406.250214][ T1011] netlink: 'syz.6.11919': attribute type 1 has an invalid length. [ 406.250236][ T1011] netlink: 'syz.6.11919': attribute type 1 has an invalid length. [ 406.250251][ T1011] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11919'. [ 406.299973][ T1010] loop0: detected capacity change from 0 to 4096 [ 406.311051][ T1010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.312534][ T29] audit: type=1400 audit(2000001266.987:5363): avc: denied { module_load } for pid=1008 comm="syz.0.11920" path="/33/file1/file3" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=system permissive=1 [ 406.406500][T32482] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.587810][ T1034] loop6: detected capacity change from 0 to 512 [ 406.627685][ T1034] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 406.733178][ T1034] EXT4-fs (loop6): 1 truncate cleaned up [ 406.739128][ T1030] loop8: detected capacity change from 0 to 8192 [ 406.786485][ T1034] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.812002][ T29] audit: type=1326 audit(2000001267.487:5364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1047 comm="syz.5.11928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99d26acb9 code=0x7ffc0000 [ 406.836494][ T29] audit: type=1326 audit(2000001267.487:5365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1047 comm="syz.5.11928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99d26acb9 code=0x7ffc0000 [ 406.890763][ T467] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.977532][ T1062] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11932'. [ 407.060122][ T1076] ip6_vti0 speed is unknown, defaulting to 1000 [ 407.634280][ T1117] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11942'. [ 407.833685][ T1126] SELinux: ebitmap: empty map [ 407.838712][ T1126] SELinux: failed to load policy [ 408.159483][ T1146] loop8: detected capacity change from 0 to 512 [ 408.180041][ T1146] bond1: option arp_interval: invalid value (18446744072758484506) [ 408.188297][ T1146] bond1: option arp_interval: allowed values 0 - 2147483647 [ 408.196627][ T1146] bond1 (unregistering): Released all slaves [ 408.217335][ T1149] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11954'. [ 408.229648][ T1151] validate_nla: 1 callbacks suppressed [ 408.229725][ T1151] netlink: 'syz.0.11955': attribute type 19 has an invalid length. [ 408.243192][ T1151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11955'. [ 408.260672][ T1153] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11956'. [ 408.279014][ T1151] netlink: 'syz.0.11955': attribute type 19 has an invalid length. [ 408.279040][ T52] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.302167][ T52] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.333957][ T52] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.344779][ T52] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.486283][ T1168] SELinux: ebitmap: empty map [ 408.515440][ T1168] SELinux: failed to load policy [ 408.547765][ T1178] ip6_vti0 speed is unknown, defaulting to 1000 [ 408.597571][ T1183] sctp: [Deprecated]: syz.6.11967 (pid 1183) Use of struct sctp_assoc_value in delayed_ack socket option. [ 408.597571][ T1183] Use struct sctp_sack_info instead [ 408.724019][ T1186] loop0: detected capacity change from 0 to 512 [ 408.830591][ T1186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.843478][ T1186] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.858056][ T1186] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 408.872795][ T1186] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.11970: Failed to acquire dquot type 0 [ 408.899394][T32482] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.413612][ T1224] loop8: detected capacity change from 0 to 164 [ 409.753413][ T1241] __nla_validate_parse: 6 callbacks suppressed [ 409.753433][ T1241] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11992'. [ 409.862009][ T1246] netlink: 'syz.6.11995': attribute type 4 has an invalid length. [ 409.874334][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 409.874353][ T29] audit: type=1400 audit(2000001270.547:5379): avc: denied { read write } for pid=1247 comm="syz.0.11994" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 409.876262][ T5568] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 409.885543][ T29] audit: type=1400 audit(2000001270.547:5380): avc: denied { open } for pid=1247 comm="syz.0.11994" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 409.911025][ T1246] netlink: 'syz.6.11995': attribute type 4 has an invalid length. [ 409.996102][ T5568] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 410.235294][ T29] audit: type=1400 audit(2000001270.907:5381): avc: denied { write } for pid=1247 comm="syz.0.11994" name="hidraw0" dev="devtmpfs" ino=2962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 410.392855][ T1284] ip6gre1: entered allmulticast mode [ 410.439553][ T29] audit: type=1326 audit(2000001271.117:5382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1288 comm="syz.8.12007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 410.463298][ T29] audit: type=1326 audit(2000001271.117:5383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1288 comm="syz.8.12007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 410.487066][ T29] audit: type=1326 audit(2000001271.117:5384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1288 comm="syz.8.12007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 410.511082][ T29] audit: type=1326 audit(2000001271.117:5385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1288 comm="syz.8.12007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72e04acb9 code=0x7ffc0000 [ 410.627496][ T29] audit: type=1326 audit(2000001271.307:5386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1305 comm="syz.0.12015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6795aacb9 code=0x7ffc0000 [ 410.681026][ T29] audit: type=1326 audit(2000001271.307:5387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1305 comm="syz.0.12015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc6795aacb9 code=0x7ffc0000 [ 410.705412][ T29] audit: type=1326 audit(2000001271.307:5388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1305 comm="syz.0.12015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6795aacb9 code=0x7ffc0000 [ 410.749394][ T1319] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 410.775990][ T1319] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 410.801561][ T1323] loop0: detected capacity change from 0 to 164 [ 410.832715][ T1323] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 411.086575][ T1365] batadv_slave_0: entered promiscuous mode [ 411.125940][ T1364] batadv_slave_0: left promiscuous mode [ 411.189682][ T1381] loop6: detected capacity change from 0 to 128 [ 411.204526][ T1381] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 411.236399][ T1381] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 411.349716][ T1393] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 411.359219][ T1393] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 411.360050][ T467] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 411.481421][ T1406] loop6: detected capacity change from 0 to 1024 [ 411.499274][ T1406] EXT4-fs: Ignoring removed orlov option [ 411.529228][ T1406] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.590697][ T1420] loop5: detected capacity change from 0 to 1024 [ 411.619301][ T1420] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.12050: bad orphan inode 134217728 [ 411.632063][ T1420] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.664433][ T467] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.827579][ T1431] ================================================================== [ 411.835715][ T1431] BUG: KCSAN: data-race in filemap_read / filemap_read [ 411.842700][ T1431] [ 411.845082][ T1431] read to 0xffff888166b89be8 of 8 bytes by task 1420 on cpu 1: [ 411.852632][ T1431] filemap_read+0x6f/0xa10 [ 411.857073][ T1431] generic_file_read_iter+0x79/0x330 [ 411.862363][ T1431] ext4_file_read_iter+0x1cc/0x290 [ 411.867493][ T1431] copy_splice_read+0x471/0x6c0 [ 411.872361][ T1431] splice_direct_to_actor+0x28f/0x670 [ 411.877851][ T1431] do_splice_direct+0x119/0x1a0 [ 411.882716][ T1431] do_sendfile+0x380/0x650 [ 411.887402][ T1431] __x64_sys_sendfile64+0x105/0x150 [ 411.892788][ T1431] x64_sys_call+0x2db1/0x3000 [ 411.897478][ T1431] do_syscall_64+0xc0/0x2a0 [ 411.902084][ T1431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.908081][ T1431] [ 411.910407][ T1431] write to 0xffff888166b89be8 of 8 bytes by task 1431 on cpu 0: [ 411.918099][ T1431] filemap_read+0x98d/0xa10 [ 411.922707][ T1431] generic_file_read_iter+0x79/0x330 [ 411.928020][ T1431] ext4_file_read_iter+0x1cc/0x290 [ 411.933180][ T1431] copy_splice_read+0x471/0x6c0 [ 411.938057][ T1431] splice_direct_to_actor+0x28f/0x670 [ 411.943810][ T1431] do_splice_direct+0x119/0x1a0 [ 411.949189][ T1431] do_sendfile+0x380/0x650 [ 411.953607][ T1431] __x64_sys_sendfile64+0x105/0x150 [ 411.958807][ T1431] x64_sys_call+0x2db1/0x3000 [ 411.963496][ T1431] do_syscall_64+0xc0/0x2a0 [ 411.968009][ T1431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.973922][ T1431] [ 411.976447][ T1431] value changed: 0x000000000000030f -> 0x0000000000000310 [ 411.983543][ T1431] [ 411.985871][ T1431] Reported by Kernel Concurrency Sanitizer on: [ 411.992037][ T1431] CPU: 0 UID: 0 PID: 1431 Comm: syz.5.12050 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 412.003417][ T1431] Tainted: [W]=WARN [ 412.007225][ T1431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 412.017276][ T1431] ================================================================== [ 412.130928][T29507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.