last executing test programs: 2m16.097876753s ago: executing program 0 (id=149): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0x23, 0xffff, 0x8002ab, @mcast2, 0x1}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@fwd={0x7}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0x30]}}, 0x0, 0x42}, 0x28) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m16.051522026s ago: executing program 0 (id=150): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x459, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x4000000) 2m15.97310175s ago: executing program 0 (id=152): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = io_uring_setup(0x2fb8, &(0x7f0000000200)={0x0, 0x3a2b, 0x8, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 2m15.277965786s ago: executing program 0 (id=164): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x909046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88a0a0, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 2m15.178360211s ago: executing program 0 (id=167): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket(0x1e, 0x5, 0x0) listen(r1, 0x0) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) 2m14.912995594s ago: executing program 0 (id=171): r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000003c0)='.\x00', 0x5db) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000300)='./file1\x00', 0x10000200) inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x80000388) 2m14.912750104s ago: executing program 32 (id=171): r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000003c0)='.\x00', 0x5db) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000300)='./file1\x00', 0x10000200) inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x80000388) 1m32.166518165s ago: executing program 4 (id=697): socket$kcm(0x10, 0xd, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1m32.037865372s ago: executing program 4 (id=700): openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x3, 0x800000, 0x0, 0x4000000000000001, 0xfffffffffffffffb}, {0x0, 0x1, 0x2}, 0x800}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 1m31.940185057s ago: executing program 4 (id=704): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x3}]}}]}, 0x44}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m31.88888726s ago: executing program 4 (id=706): write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f00000015c0)={[{@init_itable}, {@norecovery}, {@abort}, {@jqfmt_vfsv1}, {@orlov}, {@jqfmt_vfsold}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@bsdgroups}]}, 0xfd, 0x501, &(0x7f0000000e80)="$eJzs3c9vI1cdAPCvndhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZE/gHNP3LkguHEpByR+RKAGiYPRjMdZb2JvrM0Ph/jzkUbz3rxZf9+Ld97bfLPxC2Bs3Y6Ig4goRsT7ETGXXc9lR7zTOZL7Pjt8tHp0+Gg1F+32e//Ipe3Jtej5M4lb2WuWIuIH34n4ce503Obe/uZKrVbdyeoLrfr2QnNv/95GfWW9ul7dqlSWl5YX37r/ZuXCxvpKvZiVvvzp7w++8dOkW7PZld5xXKTO0AvHcRKTEfG9ywg2AhPZeIqj7gjPJB8RL0bEq+nzPxcT6bsJANxk7fZctOd66wDATRdpDiyXL2e5gNnI58vlTg7vpZjJ1xrN1t2Hjd2ttU6ubD4K+Ycbtepiliucj0IuqS+l5cf1yon6/Yh4ISJ+PjWd1surjdraCP/dAwDj7NaJ9f/fU531HwC44Uqj7gAAcOWs/wAwfqz/ADB+rP8AMH466//0UHcBADeDlR0Axo/1HwDGyvfffTc52kfZ51+vfbC3u9n44N5atblZru+ullcbO9vl9UZjPf3MnvpZr1drNLaX3ojdD+e/ud1sLTT39h/UG7tbrQfp53o/qBbSuw6uYGQAwCAvvPLJn3LJivz2dHpEz14OhZH2DLhs+VF3ABiZiVF3ABgZu33B+DrH9/jSA3BD9Nmi9wmlfr8g1N1ABPi/dOcL8v8wrnry//4XMIwZ+X8YX/L/ML7a7dywe/7HsDcCANebHD8w4Of/L2bn32Q/HPjR2sk7Pr7MXgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD11t3/t5ztBT4b+Xy5HPFcRMxHIfdwo1ZdjIjnI+KPU4WppL404j4DAOeV/2su2//rztzrs080vXzruFiMiJ/88r1ffLjSau38IaKY++dU93rr4+x65ep7DwCcrbtOp+eeb+Q/O3y02j2usj9/+3ZElDrxjw6LcXQcfzIm03MpChEx869cVu/I9eQuzuPgo4j4fL/x52I2zYF0dj49GT+J/dyVxs8/ET+ftnXOydficxfQFxg3nyTzzzv9nr983E7P/Z//UjpDnV82/yUvtXqUzoGP43fnv4kB89/tYWO88bvvdkrTp9s+ivjiZEQ39lHP/NONnxsQ//Uh4//5Sy+/Oqit/auIO9E/fm+shVZ9e6G5t39vo76yXl2vblUqy0vLi2/df7OykOaoFwavBn9/++7zg9qS8c8MiF86Y/xfHXL8v/7v+z/8ylPif/21fvHz8dJT4idr4teGjL8y89vSoLYk/tqA8Z/1/t8dMv6nf9k/tW04ADA6zb39zZVarbqjcJ0Lxeztui79GVQoXXIPk6/B9Rjp6cK3ripWMfo3/ey1vn9J2u1nijVoxriIrBtwHRw/9BHxn1F3BgAAAAAAAAAAAAAA6OsqfmNp1GMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg5vpfAAAA//9ZYMr3") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, &(0x7f0000000340)={0x800, 0x5, 0x2, 0xffffffffffffffff, 0x3, 0x800000000008, 0x2, 0x9, 0x2}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000980)={0xf4a1, 0x200, 0x800, 0x4b07}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) 1m31.668715511s ago: executing program 4 (id=709): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xa, 0x28c}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000001000000000000000000b1a40000007500000095"], 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000fcffffff0000000007000000850000007b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 1m30.777562217s ago: executing program 4 (id=723): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@debug}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendto$inet(0xffffffffffffffff, &(0x7f00000062c0)="f3", 0x1, 0x1000c095, 0x0, 0x0) ftruncate(r0, 0x4a8e) 1m30.768650308s ago: executing program 33 (id=723): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@debug}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendto$inet(0xffffffffffffffff, &(0x7f00000062c0)="f3", 0x1, 0x1000c095, 0x0, 0x0) ftruncate(r0, 0x4a8e) 48.503686473s ago: executing program 6 (id=1419): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) munmap(&(0x7f00007fe000/0x800000)=nil, 0x800000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x4058534c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r0}, 0x38) 48.401408558s ago: executing program 6 (id=1422): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x700}, 0x10}, 0x1, 0x7}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x28, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) 47.926651203s ago: executing program 6 (id=1431): r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r1) 47.869687596s ago: executing program 6 (id=1432): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) 47.774052431s ago: executing program 6 (id=1434): r0 = timerfd_create(0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) 45.953759295s ago: executing program 6 (id=1456): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x10, r2}, 0x10) 45.935471966s ago: executing program 34 (id=1456): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x10, r2}, 0x10) 33.585665544s ago: executing program 7 (id=1644): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_LINKAT={0x27, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1400, 0x0, {0x0, r6}}) io_uring_enter(r2, 0x1, 0x21, 0x1, 0x0, 0x0) 33.497003578s ago: executing program 7 (id=1648): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x53f, &(0x7f00000005c0)="$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") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8402, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) 32.381512596s ago: executing program 7 (id=1662): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x4, 0x13, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) 31.849544413s ago: executing program 7 (id=1668): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x804b14, &(0x7f0000000040)={[{@nobarrier}]}, 0xfc, 0x491, &(0x7f0000000200)="$eJzs3MtrXFUYAPDvzmT6bhNrrba2Gq1i8ZE0adUuXKgouFAQdFGXMUlr7bSRJoItQaNIXUrBvbgU/AvcuRF1IYJbBZdSKBqEpq4i99VMJ5M0SZOMzfx+MDP33Mec8917zsy598ydADpWb/qUROyIiN8iojtP3rxCb/4yMz05fH16cjiJ2dk3/kqy9a5NTw6Xq5bbbS8ShysRlU+TeD6Zn+/4hYtnhur10fNFun/i7Hv94xcuPnX67NCp0VOj5waPHz92dODZZwafXpU407iu7f9w7MC+V966/Nrwictv//hNWqy9B/PljXHc0vUWAbXQm+61v2czzcseXUbZ7wQ7G6aTrjYWhGWpRkR6uGpZ+++OaswdvO54+ZO2Fg5YU+l30+aFF0/NAhtYEq3m1ta/IMA6K7/o0/Pf8rFOXY//hasvRGwqpmemJ4dnbsTfFZVifm0N8++NiBNT/36ZPmK51yEAAFYg69s82ar/V4m92Ws+1rGrGEPpiYi7ImJ3RNwdEXsi4p6IbN17I+K+fOPZ7iXm39uUnt//qVxpWeZVkvb/nmvo+800xF+89FSL1M4s/lpy8nR99EixTw5HbXOaHlgkj+9e+vXzhZY19v/SR5p/2RcsCnClq+kC3cjQxNBq7YSrH0fs72oVf3JjJCCtAfsiYv/y3npXOXH68a8PLLTSreNfxCqMM81+FfFYfvynoin+UrL4+GT/lqiPHukva8V8P/1y6fWF8r+t+FdBevy33Vz/m9bo/ifJx2trUa+Pnh9ffh6Xfv9swXOaldb/Tcmb2Zj1z+/k8z4Ympg4PxCxKXk1S5fndNn8wblty3S5fhr/4UOt2//uYps0/vsjIq3EByPigYh4sCj7QxHxcEQcWiT+H1585N1F4k8iibYe/5GWn3836n9P0jhev4KJ6pnvv11oxHxpx/9YTGWftbns8+8WllrA29x9AAAAcEeoRMSOSCp9+XTvjqhU+vry3/DviW2V+tj4xBMnx94/N5LfI9ATtUp5pau74XroQDJVvGOeHsyvFVfL5UeL68ZfVLdm6b7hsfpIm2OHTrf95vYfZftP/Vltd+mANed+Lehcze2/0qZyAOtvKd//zgVgY2po/+XPCre2qyzA+nL+D52rVfv/qCmt/w8b0/z2/0eLv6wDNiL9f+hc2j90riW1fz8KgI3mdu7rX/lEebPAyt9ny5Lv8O+UifIfL9Yyr60xNycqbQ+5g6pN2mLWN9O5/1ABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4k/0XAAD//8Iq5SY=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x400141042, 0x2e) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) fdatasync(r0) 31.161273499s ago: executing program 7 (id=1680): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000003c0)={0x40004042, 0xfffffff8}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) close(0x3) 30.428954337s ago: executing program 7 (id=1688): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) futex(&(0x7f0000000440)=0x1, 0x6, 0x2, &(0x7f00000002c0)={r1, r2+60000000}, 0x0, 0xf0) 30.37528616s ago: executing program 35 (id=1688): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) futex(&(0x7f0000000440)=0x1, 0x6, 0x2, &(0x7f00000002c0)={r1, r2+60000000}, 0x0, 0xf0) 18.855615725s ago: executing program 1 (id=1932): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000380), 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000004240)=0x10000, 0x4) r1 = open(&(0x7f0000000180)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1a00, 0x0, 0x3) 18.600577279s ago: executing program 1 (id=1939): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0x12) sendfile(r3, r2, 0x0, 0x4) 18.478255795s ago: executing program 2 (id=1943): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r0}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_gettime(r1, 0x0) r2 = epoll_create1(0x80000) epoll_pwait2(r2, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f0000000240)={[0xd]}, 0x8) 18.477757965s ago: executing program 1 (id=1944): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e666", 0x2a, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) 18.420703278s ago: executing program 2 (id=1947): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000039000900f036d67600dfffeb03000000040000000c000180060006008848"], 0x24}}, 0x8090) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030002130000002dbd7000ffdbdf25010014102300000005000600000000000a00ffffffffffffff80000000000000000000b5f4943a01fbffffff0000000002000100000000000400050c0000000005000500000000000a000000000000000000000000000000000000000000000107000000000000000400080098"], 0x98}, 0x1, 0x7}, 0x14) 18.413193978s ago: executing program 2 (id=1948): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0x2, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x48c0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x11, 0x4) recvmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40000000, 0x0) 18.403579229s ago: executing program 1 (id=1949): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x804b14, &(0x7f0000000040)={[{@nobarrier}]}, 0xfc, 0x491, &(0x7f0000000200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x400141042, 0x2e) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) fdatasync(r0) 17.963396372s ago: executing program 1 (id=1962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 17.729125164s ago: executing program 1 (id=1953): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x100, 0x0) getdents64(r2, 0x0, 0x1a) 17.711939284s ago: executing program 36 (id=1953): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x100, 0x0) getdents64(r2, 0x0, 0x1a) 17.550890443s ago: executing program 2 (id=1955): socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES64=r0], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 17.519637984s ago: executing program 2 (id=1956): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 17.435462779s ago: executing program 2 (id=1957): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x10000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x10005, 0x1, 0xfffffc03, 0x8, 0x5, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x10000000002009}, 0x0, 0xffe0000000000001, 0xffffffffffffffff, 0x9) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) 4.25844107s ago: executing program 3 (id=2057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.035278751s ago: executing program 9 (id=2059): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$eJzs3ctrW9kZAPDvyvKjTlK7UGjSlaHQGoLlOnWTFrpI6aIUGgi06yZCVkxq2QqWHGJjSEMpdFNoQxeFdpN12qa7btuZ7cy/MLMZhiEhM+OESZjF4OHqEcu25MgZWZqJfz+49jn3oXO++zj3yPdwHcCxNZX+yESciYg/JxETjflJRAzXUtmIi/X1nm1tFtIpie3tX32U1NZ5urVZiJZtYnw8TjQypyPijT9EnM3sL7eyvrGUL5WKq438bHX5xmxlfWPm+nJ+sbhYXDk/Nz9/7sIPL4z2LtZP3t44+egvP//evy9++vtvPfjTm0lcjJONZa1x9MpUTNX3SQynu3CXn/W6sAFLBl0BXkl6aQ7Vr/I4ExPZGOl+2+xRVgwAODK3I2IbADhmEvd/ADhmmn8HeLq1WUin7duD/XtEvz3+aUSM1eNvPt+sL8k2ntmN1Z6Djj9Ndj3vSCJisgflT0XEP/77m3+mUxzRc0iAdn53JyKuTk412/+d9ifZN2ahrvsBGd9vJg4YHDC1J6/9g/75X9r/+dFO/2/n+su86P9Em/7PaJtr91VMxe4RJ/uv/8zDHhTTUdr/+8nwzti2Zy3xN0wONXKnan2+4eTa9VIxbdu+HhHTMTya5ufaf3xteNn0k8+e7JrbEnFr/+/ju7+9n5af/t5ZI/Mwu6fJXchX872IPfX4TsS3s+3iT14c/6RD//dyl2X84sd//HunZWn8abzNaXf8Rz+qbPtexHejffxNyUHjE8/P1k6H2eZJ0cZ/3vvbeKfyW49/OqXl178LnOp9sG2kx3/84Pgnk9bxmpXDl/HWvYn/d1rWOf6m9uf/SPLrWrp5Kd3KV6urcxEjyS/3zz+3s20z31w/jX/6O+2v/4PO//Q74dUu488++vBfL42/OWNf/A1jXRZ2SGn8C4c6/m0T6VfhDovypQfPloY6ld/d8Z9PE0PTjTndtH8da5ovlUZa1nnlHQcAAAAAAAAAAAAAAAAAAAAAAAAAh5CpvaQ0yeRepDOZXC5q/8P7mzGeKZUr1bPXymsrC/WXmU7G8GhE1F51OdHyPtS5xvvwm/lze/I/iIhvRMRfR79Wy+cK5dLCoIMHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIYTHf7/f+qD0frv5wOtIQBwJMZeusaTYl8qAgD0zcvv/xExevT1AAD6p6v7PwDwWnH/B4DjZywz6BoAAP02FpEddB0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4rV2+dCmdtp9vbRbS/MLN9bWl8s2ZhWJlKbe8VsgVyqs3covl8mKpmCuUl1s2fafd55XK5RvzsbJ2a7ZarFRnK+sbV5bLayvVK9eX84vFK8XhvkUGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN2rrG8s5Uul4mojcX88YvecPiWGGhXq5SfPnOx3FP1IbE/U99SXpT49T4ztnfP+zLunD9rq7r7TWOILJwbZKgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8dXweAAD//9GqGUs=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x110) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="bc", 0x1}], 0x1, 0x2042000, 0xa8, 0x3) 4.012660303s ago: executing program 3 (id=2060): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) recvfrom$l2tp(r0, 0x0, 0x0, 0x10020, 0x0, 0x0) 3.835184292s ago: executing program 8 (id=2063): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 3.805912254s ago: executing program 9 (id=2064): execve(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36f, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.805600974s ago: executing program 8 (id=2065): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 3.739262777s ago: executing program 5 (id=2066): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000680), &(0x7f0000000400)=@tcp6=r2, 0x2}, 0x20) 3.659937511s ago: executing program 5 (id=2067): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x20) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd000000200106"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) 3.659656031s ago: executing program 9 (id=2068): open(0x0, 0x80, 0x122) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491710d000000", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c) 3.659402971s ago: executing program 8 (id=2069): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) r4 = memfd_create(&(0x7f0000000dc0)='.B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\xfb*\xe7\xc1q\xf9?\xefo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n{\xb2\x99tNcp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9769\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-\x94\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\x82\xb8wN\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcat\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xba\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\xbc\xbci\xac5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dOU6\xdcXF~(\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa\xdc\x84n\xf8/\x19\x85NT%\x94!3k]\xd5\xbe\'U\xf17\x93L\xd0\xb3\x99\x9f<\xee\xd6o\xa1\xf8\xd4D\xf1f7\x03_\xf7\x10\x9e]\'\xf2\xa5\xd3\x8e\xb3`\'2\xa8\x90&\x84\v\x00\x00\x00\x00', 0x2) r5 = dup(r4) splice(r2, 0x0, r5, 0x0, 0x10000000000e5d8, 0xe) write$binfmt_elf64(r1, &(0x7f0000001b40)=ANY=[], 0xfffffe3e) 3.014542274s ago: executing program 5 (id=2070): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x40, 0x3, 0x0, 0x10000000000, 0x8880, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x3}, 0x4008, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) 2.971523016s ago: executing program 3 (id=2071): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53003e4c6588a80000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) 2.331990349s ago: executing program 37 (id=1957): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x10000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x10005, 0x1, 0xfffffc03, 0x8, 0x5, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x10000000002009}, 0x0, 0xffe0000000000001, 0xffffffffffffffff, 0x9) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) 2.288764312s ago: executing program 8 (id=2073): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.062793213s ago: executing program 5 (id=2074): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 614.028428ms ago: executing program 9 (id=2075): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x80) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @local}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r1], 0x108}}], 0x1, 0xc040) 610.309188ms ago: executing program 8 (id=2076): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="190c2c58b0f239276a477eda8798105ba741d1e3156592647d718afbd3377e14ed7e8752f8a199532c7da3c16c61c19f3743de84107a9721e3a009023a81a0a06c245a27151e8cfddc30b79a47cab71203a4a6f5d548508bc550c25dc4ca5768a79dcea74ffbc916824f83"], 0xf9, 0x1213, &(0x7f0000001840)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) fsync(0xffffffffffffffff) getdents64(r0, &(0x7f0000000140)=""/45, 0x2d) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) 560.998301ms ago: executing program 9 (id=2077): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) fdatasync(r0) 560.759641ms ago: executing program 3 (id=2078): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x10c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe0, 0x3, "ba5bdea387a06d90df8d6bb82a684ae45f90eb17d749cb417e622cdfcbcf40398222a35c54cea986b70c4e9d08b8257d5faaf40aa8e96affd0360137902ec5bd920c6be52a11f0436c9b964f6acdcfbd8bd52474cd1de5fc375b63bb88689bf9887c05892b19f0fcf678c13f6b0a330e1f2cb963ab0cf6e6626d9e776c812b880f2d5e2a2f51c359b09af9161daf389cd93c91da64b48ed131e9a10f9d8cfca183965c095ae35dcf438de1dcb8d6032c6edc5265c91d8d9e73b95d0216f16b3e6c85aa1c31f58418ddf63f1e3c8dc2912d82ffc03dd17d76388610a1"}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000200)}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) io_uring_enter(r0, 0x2219, 0x1adf, 0x16, 0x0, 0x0) 560.226281ms ago: executing program 5 (id=2079): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x1ff, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x101, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10002, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x7fff25c8, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x5, 0x0, 0xffffffff, 0xffffffff, 0x302e, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x3, 0x3, 0x9, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0) 409.069929ms ago: executing program 5 (id=2080): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1002, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) 355.940712ms ago: executing program 8 (id=2081): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x28000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="11", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r0, r1, 0x0, 0x8000fb00) 110.179084ms ago: executing program 9 (id=2082): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r0, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 20.825759ms ago: executing program 3 (id=2083): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) 0s ago: executing program 3 (id=2084): bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x9, 0x200f60e}, 0x9092, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28b}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) kernel console output (not intermixed with test programs): 104.922460][ T6412] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.922578][ T6408] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.952: invalid indirect mapped block 4294967295 (level 1) [ 104.958180][ T6408] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.952: invalid indirect mapped block 65535 (level 2) [ 104.976000][ T5670] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.079484][ T6432] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.098334][ T6432] ext4 filesystem being mounted at /192/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 105.136181][ T6432] EXT4-fs error (device loop1): dx_make_map:1296: inode #2: block 20: comm syz.1.959: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 105.144459][ T3944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.155178][ T6432] EXT4-fs error (device loop1) in do_split:2027: Corrupt filesystem [ 105.195191][ T6432] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 20: comm syz.1.959: bad entry in directory: inode out of bounds - offset=2012, inode=128, rec_len=36, size=1024 fake=1 [ 105.287723][ T6437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.287819][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.324522][ T6437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.363158][ T6440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.432916][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.694915][ T6482] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.759696][ T6485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.791788][ T6485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.817137][ T6482] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.804910][ T6482] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.888450][ T6482] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.931039][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 107.931057][ T28] audit: type=1400 audit(1776593844.590:489): avc: denied { read } for pid=6503 comm="syz.1.990" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 107.971176][ T30] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.983649][ T28] audit: type=1400 audit(1776593844.590:490): avc: denied { open } for pid=6503 comm="syz.1.990" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 107.983839][ T30] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.044046][ T6508] set_capacity_and_notify: 4 callbacks suppressed [ 108.044067][ T6508] loop1: detected capacity change from 0 to 128 [ 108.065312][ T5558] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.078723][ T5558] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.174757][ T6508] syz.1.992: attempt to access beyond end of device [ 108.174757][ T6508] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 108.221742][ T6508] syz.1.992: attempt to access beyond end of device [ 108.221742][ T6508] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 108.269007][ T6508] syz.1.992: attempt to access beyond end of device [ 108.269007][ T6508] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 108.300428][ T6508] syz.1.992: attempt to access beyond end of device [ 108.300428][ T6508] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 108.344456][ T6508] syz.1.992: attempt to access beyond end of device [ 108.344456][ T6508] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 108.391577][ T6508] syz.1.992: attempt to access beyond end of device [ 108.391577][ T6508] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 108.440799][ T6508] syz.1.992: attempt to access beyond end of device [ 108.440799][ T6508] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 108.492067][ T6508] syz.1.992: attempt to access beyond end of device [ 108.492067][ T6508] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 108.541945][ T6508] syz.1.992: attempt to access beyond end of device [ 108.541945][ T6508] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 108.590856][ T6508] syz.1.992: attempt to access beyond end of device [ 108.590856][ T6508] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 108.823398][ T28] audit: type=1400 audit(1776593845.480:491): avc: denied { getopt } for pid=6532 comm="syz.5.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 108.882383][ T6537] vcan0: tx drop: invalid da for name 0x0000000000000008 [ 108.989016][ T6543] loop5: detected capacity change from 0 to 4096 [ 109.012474][ T6543] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.103132][ T3944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.445032][ T6567] ------------[ cut here ]------------ [ 109.450617][ T6567] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#0: syz.1.1011/6567 [ 109.460429][ T6567] Modules linked in: [ 109.464488][ T6567] CPU: 0 UID: 0 PID: 6567 Comm: syz.1.1011 Not tainted syzkaller #0 PREEMPT(full) [ 109.473917][ T6567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 109.484072][ T6567] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 109.489846][ T6567] Code: 8b 05 f1 fb f8 07 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d e9 94 f9 63 04 cc e8 1e 11 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 10 11 1e 00 90 0f 0b 90 e9 af fa ff ff [ 109.509815][ T6567] RSP: 0018:ffffc9000f4ffdd8 EFLAGS: 00010093 [ 109.515999][ T6567] RAX: ffffffff813b3452 RBX: ffff888104600000 RCX: ffff888104600000 [ 109.524083][ T6567] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 109.532262][ T6567] RBP: 0000000000000080 R08: ffff888104600af8 R09: 0000000000000000 [ 109.540527][ T6567] R10: ffffc9000f4ffdf0 R11: 0001c9000f4ffdf0 R12: ffff888104600000 [ 109.548654][ T6567] R13: ffff888104600828 R14: ffff888103da2890 R15: 0000000000000080 [ 109.556772][ T6567] FS: 0000000000000000(0000) GS:ffff8882ae8d1000(0000) knlGS:0000000000000000 [ 109.565999][ T6567] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.572693][ T6567] CR2: 0000001b3401bff8 CR3: 000000010cff4000 CR4: 00000000003506f0 [ 109.580871][ T6567] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 109.589058][ T6567] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 109.597270][ T6567] Call Trace: [ 109.600562][ T6567] [ 109.603503][ T6567] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 109.608958][ T6567] ? __list_add_valid_or_report+0x38/0xe0 [ 109.614717][ T6567] do_exit+0xc13/0x1530 [ 109.618896][ T6567] ? switch_fpu_return+0xe7/0x1b0 [ 109.624021][ T6567] __x64_sys_exit+0x1f/0x20 [ 109.628721][ T6567] x64_sys_call+0x301d/0x3020 [ 109.633428][ T6567] do_syscall_64+0x12c/0x3b0 [ 109.638405][ T6567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.644435][ T6567] RIP: 0033:0x7f667f4cc819 [ 109.648991][ T6567] Code: Unable to access opcode bytes at 0x7f667f4cc7ef. [ 109.656217][ T6567] RSP: 002b:00007f667df26fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 109.664737][ T6567] RAX: ffffffffffffffda RBX: 00007f667f745fa0 RCX: 00007f667f4cc819 [ 109.672893][ T6567] RDX: 00007f667df279c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.681151][ T6567] RBP: 00007f667f562c91 R08: 0000000000000000 R09: 0000000000000000 [ 109.689316][ T6567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.697450][ T6567] R13: 00007f667f746038 R14: 00007f667f745fa0 R15: 00007ffddf91dc98 [ 109.705786][ T6567] [ 109.708815][ T6567] ---[ end trace 0000000000000000 ]--- [ 110.725301][ T6610] SELinux: failed to load policy [ 110.730446][ T28] audit: type=1400 audit(1776593847.380:492): avc: denied { load_policy } for pid=6609 comm="syz.1.1032" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 110.798928][ T6614] loop1: detected capacity change from 0 to 4096 [ 110.819696][ T6614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.941501][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.057952][ T6622] loop6: detected capacity change from 0 to 8192 [ 111.328525][ T6630] loop2: detected capacity change from 0 to 256 [ 111.395798][ T6634] netlink: 'syz.5.1041': attribute type 10 has an invalid length. [ 111.423290][ T6634] team0: Device xfrm0 is of different type [ 111.681364][ T6648] loop5: detected capacity change from 0 to 128 [ 111.713376][ T28] audit: type=1400 audit(1776593848.370:493): avc: denied { unmount } for pid=5109 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 111.899745][ T28] audit: type=1400 audit(1776593848.550:494): avc: denied { setopt } for pid=6661 comm="syz.5.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.339690][ T6679] syzkaller0: entered allmulticast mode [ 112.349598][ T6679] syzkaller0: entered promiscuous mode [ 112.362237][ T6679] syzkaller0 (unregistering): left allmulticast mode [ 112.373676][ T6679] syzkaller0 (unregistering): left promiscuous mode [ 112.542806][ T6684] loop2: detected capacity change from 0 to 128 [ 112.739372][ T6689] all: renamed from bridge_slave_1 (while UP) [ 113.303479][ T6718] netlink: 'syz.5.1077': attribute type 13 has an invalid length. [ 113.709516][ T6737] syzkaller0: entered promiscuous mode [ 113.719888][ T6737] syzkaller0: entered allmulticast mode [ 113.807380][ T6749] loop3: detected capacity change from 0 to 128 [ 113.824666][ T28] audit: type=1400 audit(1776593850.480:495): avc: denied { watch watch_reads } for pid=6748 comm="syz.3.1090" path="/97/file1/_." dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 114.182876][ T28] audit: type=1400 audit(1776593850.840:496): avc: denied { setopt } for pid=6766 comm="syz.3.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 114.257714][ T28] audit: type=1400 audit(1776593850.910:497): avc: denied { getopt } for pid=6770 comm="syz.1.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.369886][ T6784] Cannot find add_set index 0 as target [ 114.377810][ T6783] loop2: detected capacity change from 0 to 512 [ 114.422723][ T6783] EXT4-fs (loop2): 1 truncate cleaned up [ 114.495747][ T6783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.733143][ T6799] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1104: invalid indirect mapped block 4294967295 (level 1) [ 114.789783][ T6799] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1104: invalid indirect mapped block 65535 (level 2) [ 114.964657][ T6816] loop1: detected capacity change from 0 to 512 [ 114.986273][ T6816] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.015220][ T6816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.059525][ T6816] ext4 filesystem being mounted at /225/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.118052][ T6816] EXT4-fs error (device loop1): ext4_empty_dir:3082: inode #12: comm syz.1.1115: invalid size [ 115.134298][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.161684][ T6816] EXT4-fs (loop1): Remounting filesystem read-only [ 115.202855][ T6822] netlink: 'syz.5.1118': attribute type 1 has an invalid length. [ 115.236367][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.251655][ T5533] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 115.280557][ T5533] Quota error (device loop1): write_blk: dquota write failed [ 115.301896][ T5533] Quota error (device loop1): free_dqentry: Can't write quota data block 5 [ 115.323904][ T5533] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 115.347160][ T5533] Quota error (device loop1): write_blk: dquota write failed [ 115.366264][ T5533] Quota error (device loop1): free_dqentry: Can't write quota data block 5 [ 115.554936][ T6840] loop6: detected capacity change from 0 to 128 [ 115.670082][ T6843] netlink: 'syz.3.1129': attribute type 1 has an invalid length. [ 115.711046][ T6843] netlink: 'syz.3.1129': attribute type 4 has an invalid length. [ 115.745162][ T6843] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1129'. [ 115.805724][ T6854] loop1: detected capacity change from 0 to 512 [ 115.825629][ T6854] EXT4-fs (loop1): orphan cleanup on readonly fs [ 115.845035][ T6854] EXT4-fs (loop1): 1 orphan inode deleted [ 115.861932][ T30] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 115.923417][ T30] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 115.970592][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1135'. [ 115.984357][ T30] loop1: lost filesystem error report for type 5 error -117 [ 115.985066][ T6854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.989905][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1135'. [ 116.057725][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.107165][ T6864] pimreg: entered allmulticast mode [ 116.126698][ T6864] pimreg: left allmulticast mode [ 116.177596][ T28] audit: type=1400 audit(1776593852.830:498): avc: denied { setopt } for pid=6872 comm="syz.2.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 116.251943][ T6882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1143'. [ 116.252765][ T6878] loop6: detected capacity change from 0 to 512 [ 116.266952][ T6882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.282171][ T6882] bond1: option ad_select: unable to set because the bond device is up [ 116.287221][ T6878] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.320503][ T6878] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.334070][ T6878] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.357059][ T6878] EXT4-fs error (device loop6): ext4_empty_dir:3082: inode #12: comm syz.6.1141: invalid size [ 116.365324][ T6886] netlink: 'syz.3.1144': attribute type 13 has an invalid length. [ 116.377447][ T6878] EXT4-fs (loop6): Remounting filesystem read-only [ 116.397281][ T5670] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.407962][ T36] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 116.419764][ T36] Quota error (device loop6): write_blk: dquota write failed [ 116.427706][ T36] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 117.736240][ T6921] netlink: 'syz.6.1156': attribute type 13 has an invalid length. [ 119.044394][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 119.044411][ T28] audit: type=1400 audit(1776593855.700:503): avc: denied { name_bind } for pid=6975 comm="syz.2.1182" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 119.112185][ T28] audit: type=1400 audit(1776593855.700:504): avc: denied { write } for pid=6972 comm="syz.3.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 119.146601][ T6980] loop3: detected capacity change from 0 to 512 [ 119.157094][ T6980] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 119.207183][ T6976] loop6: detected capacity change from 0 to 8192 [ 119.207419][ T6980] EXT4-fs error (device loop3): ext4_init_orphan_info:618: comm syz.3.1179: orphan file block 0: bad magic [ 119.335905][ T6980] loop3: lost filesystem error report for type 5 error -117 [ 119.336098][ T6980] EXT4-fs (loop3): Remounting filesystem read-only [ 119.343654][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 119.343677][ C0] EXT4-fs (loop3): initial error at time 1776593855: ext4_init_orphan_info:618 [ 119.343702][ C0] EXT4-fs (loop3): last error at time 1776593855: ext4_init_orphan_info:618 [ 119.382016][ T6980] EXT4-fs (loop3): mount failed [ 119.457092][ T6986] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 119.464836][ T6986] FAT-fs (loop6): Filesystem has been set read-only [ 119.510181][ T28] audit: type=1400 audit(1776593856.160:505): avc: denied { connect } for pid=6968 comm="syz.5.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 119.851932][ T7017] netlink: 'syz.6.1194': attribute type 12 has an invalid length. [ 119.884598][ T28] audit: type=1400 audit(1776593856.540:506): avc: denied { open } for pid=7018 comm="syz.1.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 119.939627][ T28] audit: type=1400 audit(1776593856.540:507): avc: denied { kernel } for pid=7018 comm="syz.1.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 120.204836][ T7030] ªªªªªª: renamed from vlan0 (while UP) [ 120.310859][ T28] audit: type=1400 audit(1776593856.970:508): avc: denied { tracepoint } for pid=7041 comm="syz.5.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 120.344997][ T7043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7043 comm=syz.3.1202 [ 120.366703][ T28] audit: type=1400 audit(1776593857.020:509): avc: denied { bind } for pid=7045 comm="syz.6.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 120.390894][ T7046] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1206'. [ 120.455445][ T7043] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1202'. [ 120.477281][ T28] audit: type=1400 audit(1776593857.130:510): avc: denied { read } for pid=7048 comm="syz.6.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 120.631610][ T7059] syzkaller1: entered promiscuous mode [ 120.647016][ T7059] syzkaller1: entered allmulticast mode [ 120.658738][ T7061] netlink: 'syz.6.1212': attribute type 1 has an invalid length. [ 120.702710][ T7061] bond1: (slave geneve2): making interface the new active one [ 120.711173][ T7061] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 120.726922][ T36] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 120.746648][ T36] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 120.779567][ T36] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 120.808833][ T36] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 120.826794][ T28] audit: type=1400 audit(1776593857.480:511): avc: denied { shutdown } for pid=7069 comm="syz.6.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.941852][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1219'. [ 120.979979][ T7079] erspan0: entered promiscuous mode [ 120.992751][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1219'. [ 120.994358][ T7079] macvtap1: entered promiscuous mode [ 121.039128][ T7079] macvtap1: entered allmulticast mode [ 121.060327][ T7079] erspan0: entered allmulticast mode [ 121.075539][ T7080] erspan0: left allmulticast mode [ 121.088293][ T7080] erspan0: left promiscuous mode [ 121.154047][ T7084] lo: Caught tx_queue_len zero misconfig [ 121.357342][ T7102] netlink: 'syz.1.1229': attribute type 12 has an invalid length. [ 121.486440][ T28] audit: type=1400 audit(1776593858.140:512): avc: denied { listen } for pid=7106 comm="syz.3.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.589439][ T7112] loop1: detected capacity change from 0 to 1024 [ 121.612242][ T7112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.662049][ T7112] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.765912][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 121.795319][ T7128] lo: Caught tx_queue_len zero misconfig [ 121.881322][ T7136] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1243'. [ 121.914209][ T7138] loop3: detected capacity change from 0 to 512 [ 121.931066][ T7140] loop6: detected capacity change from 0 to 512 [ 121.951335][ T7138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.964998][ T7138] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.014158][ T7144] netlink: 'syz.1.1245': attribute type 13 has an invalid length. [ 122.087247][ T5109] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.147213][ T7151] sctp: [Deprecated]: syz.6.1247 (pid 7151) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.147213][ T7151] Use struct sctp_sack_info instead [ 122.277235][ T7156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7156 comm=syz.1.1249 [ 123.716008][ T7190] netlink: 'syz.3.1262': attribute type 1 has an invalid length. [ 123.769674][ T7190] bond2: (slave geneve2): making interface the new active one [ 123.794503][ T7190] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 123.812850][ T7198] netlink: 'syz.2.1261': attribute type 13 has an invalid length. [ 123.855133][ T5538] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 123.865134][ T5538] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 123.915537][ T7207] loop5: detected capacity change from 0 to 512 [ 123.933381][ T7207] ext4: Unknown parameter 'smackfstransmute' [ 124.084483][ T7217] loop1: detected capacity change from 0 to 512 [ 124.128765][ T5538] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 124.139609][ T5538] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 124.257059][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 124.257077][ T28] audit: type=1400 audit(1776593860.910:517): avc: denied { cmd } for pid=7232 comm="syz.5.1285" path="socket:[17934]" dev="sockfs" ino=17934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 124.471917][ T28] audit: type=1400 audit(1776593861.120:518): avc: denied { append } for pid=7261 comm="syz.2.1298" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.495221][ T7263] loop2: detected capacity change from 0 to 2048 [ 124.517634][ T28] audit: type=1400 audit(1776593861.170:519): avc: denied { read } for pid=7265 comm="syz.3.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.551044][ T7263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.576616][ T28] audit: type=1400 audit(1776593861.230:520): avc: denied { map } for pid=7261 comm="syz.2.1298" path="/274/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 124.617421][ T7261] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 124.632462][ T28] audit: type=1400 audit(1776593861.230:521): avc: denied { execute } for pid=7261 comm="syz.2.1298" path="/274/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 124.657300][ T7261] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 124.670003][ T7261] EXT4-fs (loop2): This should not happen!! Data will be lost [ 124.670003][ T7261] [ 124.680224][ T7261] EXT4-fs (loop2): Total free blocks count 0 [ 124.686807][ T7261] EXT4-fs (loop2): Free/Dirty block details [ 124.693341][ T7261] EXT4-fs (loop2): free_blocks=4096 [ 124.698814][ T7261] EXT4-fs (loop2): dirty_blocks=512 [ 124.704523][ T7261] EXT4-fs (loop2): Block reservation details [ 124.710780][ T7261] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 124.732168][ T261] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 124.747391][ T3316] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 125.210275][ T7277] loop2: detected capacity change from 0 to 512 [ 125.416964][ T7290] loop6: detected capacity change from 0 to 764 [ 125.453037][ T7290] rock: directory entry would overflow storage [ 125.464246][ T7290] rock: sig=0x5245, size=8, remaining=5 [ 125.670171][ T7299] loop5: detected capacity change from 0 to 8192 [ 125.678298][ T7299] vfat: Unknown parameter '0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff' [ 125.834930][ T28] audit: type=1400 audit(1776593862.490:522): avc: denied { mount } for pid=7309 comm="syz.5.1315" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 125.876088][ T28] audit: type=1400 audit(1776593862.520:523): avc: denied { unmount } for pid=7309 comm="syz.5.1315" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 126.344193][ T7366] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.379262][ T7366] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.444979][ T7366] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.471015][ T7366] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.539093][ T7366] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.574497][ T7366] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.646489][ T7366] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.682175][ T7366] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.759995][ T5558] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.777695][ T5558] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.801930][ T5558] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.817867][ T5558] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.840049][ T5558] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.858339][ T5558] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.881508][ T30] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.895198][ T30] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.079046][ T7379] netlink: 'syz.6.1340': attribute type 4 has an invalid length. [ 127.127065][ T7379] netlink: 'syz.6.1340': attribute type 4 has an invalid length. [ 127.160796][ T7376] syz.3.1349 (7376) used greatest stack depth: 9328 bytes left [ 127.550987][ T7413] batman_adv: batadv0: Adding interface: dummy0 [ 127.566759][ T7413] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.601366][ T7413] batman_adv: batadv0: Interface activated: dummy0 [ 127.628247][ T7419] batadv0: mtu less than device minimum [ 127.645209][ T7419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 127.656379][ T7419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 127.667557][ T7419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 127.679099][ T7419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 127.690894][ T7419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 127.702073][ T7419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 127.713330][ T7419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 127.724415][ T7419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 127.735380][ T7419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 127.784874][ T28] audit: type=1400 audit(1776593864.440:524): avc: denied { create } for pid=7422 comm="syz.6.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 127.859737][ T28] audit: type=1400 audit(1776593864.510:525): avc: denied { write } for pid=7422 comm="syz.6.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 128.124036][ T7437] loop1: detected capacity change from 0 to 8192 [ 128.144727][ T7437] vfat: Unknown parameter '0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff' [ 128.406197][ T7457] loop6: detected capacity change from 0 to 512 [ 128.442801][ T7457] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 128.487015][ T7457] EXT4-fs (loop6): 1 truncate cleaned up [ 128.505007][ T7457] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.584028][ T5670] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.061237][ T7472] loop2: detected capacity change from 0 to 1024 [ 129.085908][ T7472] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 129.085908][ T7472] [ 129.118078][ T7472] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 129.151841][ T7481] loop3: detected capacity change from 0 to 512 [ 129.170681][ T7476] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 129.183796][ T7481] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.215504][ T7485] netlink: 'syz.5.1376': attribute type 6 has an invalid length. [ 129.232472][ T7481] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1374: bad orphan inode 1 [ 129.249029][ T28] audit: type=1400 audit(1776593865.900:526): avc: denied { create } for pid=7488 comm="syz.1.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 129.271317][ T7481] loop3: lost filesystem error report for type 5 error -117 [ 129.272819][ T7481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.318167][ T28] audit: type=1400 audit(1776593865.970:527): avc: denied { rename } for pid=7480 comm="syz.3.1374" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 129.362066][ T28] audit: type=1400 audit(1776593865.970:528): avc: denied { write } for pid=7488 comm="syz.1.1379" path="socket:[20587]" dev="sockfs" ino=20587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 129.399853][ T7493] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 129.427954][ T5109] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.446746][ T7498] netlink: 'syz.2.1383': attribute type 1 has an invalid length. [ 129.514617][ T7498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.558556][ T7503] bond2: entered promiscuous mode [ 129.566996][ T7503] bond2: entered allmulticast mode [ 129.838641][ T7531] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 129.948994][ T7534] loop5: detected capacity change from 0 to 8192 [ 130.194613][ T9] IPVS: starting estimator thread 0... [ 130.288193][ T7561] loop6: detected capacity change from 0 to 1024 [ 130.314233][ T7561] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.335090][ T7553] IPVS: using max 2544 ests per chain, 127200 per kthread [ 130.349953][ T7561] SELinux: Context system_u:object_r:syslog_conf_t:s0 is not valid (left unmapped). [ 130.355852][ T28] audit: type=1400 audit(1776593867.000:529): avc: denied { mac_admin } for pid=7560 comm="syz.6.1408" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 130.386107][ T7572] loop5: detected capacity change from 0 to 128 [ 130.395183][ T7572] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 130.407475][ T28] audit: type=1400 audit(1776593867.020:530): avc: denied { relabelto } for pid=7560 comm="syz.6.1408" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslog_conf_t:s0" [ 130.435627][ T28] audit: type=1400 audit(1776593867.020:531): avc: denied { map } for pid=7560 comm="syz.6.1408" path="/129/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslog_conf_t:s0" [ 130.440588][ T7572] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 130.463582][ T28] audit: type=1400 audit(1776593867.020:532): avc: denied { read write execute } for pid=7560 comm="syz.6.1408" path="/129/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslog_conf_t:s0" [ 130.513892][ T5670] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.519164][ T28] audit: type=1400 audit(1776593867.050:533): avc: denied { open } for pid=7560 comm="syz.6.1408" path="/129/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslog_conf_t:s0" [ 130.600926][ T28] audit: type=1326 audit(1776593867.260:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7578 comm="syz.6.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c197ec819 code=0x7ffc0000 [ 130.630151][ T36] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 130.688746][ T28] audit: type=1326 audit(1776593867.280:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7578 comm="syz.6.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c197ec819 code=0x7ffc0000 [ 130.717755][ T28] audit: type=1326 audit(1776593867.280:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7578 comm="syz.6.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c197ec819 code=0x7ffc0000 [ 130.795953][ T7594] netlink: 'syz.2.1418': attribute type 1 has an invalid length. [ 130.800609][ T7589] loop5: detected capacity change from 0 to 2048 [ 130.804045][ T7594] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1418'. [ 130.854176][ T7589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.996389][ T7607] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.001682][ T7588] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 131.003947][ T7607] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.027424][ T7588] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 131.070397][ T7588] EXT4-fs (loop5): This should not happen!! Data will be lost [ 131.070397][ T7588] [ 131.088610][ T7588] EXT4-fs (loop5): Total free blocks count 0 [ 131.100957][ T7588] EXT4-fs (loop5): Free/Dirty block details [ 131.122315][ T7588] EXT4-fs (loop5): free_blocks=4096 [ 131.127766][ T7588] EXT4-fs (loop5): dirty_blocks=768 [ 131.133250][ T7588] EXT4-fs (loop5): Block reservation details [ 131.157028][ T7607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.170368][ T7588] EXT4-fs (loop5): i_reserved_data_blocks=48 [ 131.183189][ T7607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.219504][ T5558] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 736 with error 28 [ 131.244022][ T3944] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 131.307187][ T5558] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.321454][ T5558] netdevsim netdevsim6 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 131.346875][ T5558] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.367046][ T5558] netdevsim netdevsim6 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 131.386237][ T5558] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.408944][ T5558] netdevsim netdevsim6 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 131.498523][ T5558] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.526855][ T5558] netdevsim netdevsim6 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 132.089957][ T7659] loop1: detected capacity change from 0 to 512 [ 132.134740][ T7659] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 132.158126][ T7659] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1433: iget: bogus i_mode (2) [ 132.174662][ T7659] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 132.176392][ T7659] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1433: couldn't read orphan inode 15 (err -117) [ 132.187103][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 132.187332][ C1] EXT4-fs (loop1): initial error at time 1776593868: ext4_orphan_get:1397: inode 15 [ 132.187560][ C1] EXT4-fs (loop1): last error at time 1776593868: ext4_orphan_get:1397: inode 15 [ 132.228791][ T7659] loop1: lost filesystem error report for type 5 error -117 [ 132.231023][ T7659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.338380][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.369810][ T7711] loop1: detected capacity change from 0 to 2048 [ 132.391293][ T7711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.433694][ T7710] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 132.449061][ T7710] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 132.463917][ T7710] EXT4-fs (loop1): This should not happen!! Data will be lost [ 132.463917][ T7710] [ 132.474076][ T7710] EXT4-fs (loop1): Total free blocks count 0 [ 132.480097][ T7710] EXT4-fs (loop1): Free/Dirty block details [ 132.486271][ T7710] EXT4-fs (loop1): free_blocks=4096 [ 132.491601][ T7710] EXT4-fs (loop1): dirty_blocks=512 [ 132.497007][ T7710] EXT4-fs (loop1): Block reservation details [ 132.503176][ T7710] EXT4-fs (loop1): i_reserved_data_blocks=32 [ 132.521063][ T5542] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 132.543295][ T3313] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 132.587679][ T7721] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.595356][ T7721] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.596818][ T7725] loop1: detected capacity change from 0 to 512 [ 132.615063][ T7725] EXT4-fs: Ignoring removed orlov option [ 132.632915][ T7725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.645835][ T7725] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.674851][ T7721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.685672][ T7721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.700752][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.742405][ T5544] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.752145][ T5544] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.761851][ T5544] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.771312][ T5544] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.095845][ T7746] loop1: detected capacity change from 0 to 4096 [ 133.121186][ T7746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.201824][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.211497][ T7744] loop2: detected capacity change from 0 to 32768 [ 133.858475][ T7761] loop2: detected capacity change from 0 to 1024 [ 133.867694][ T7761] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 134.154521][ T7757] chnl_net:caif_netlink_parms(): no params data found [ 134.249043][ T7757] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.256918][ T7757] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.264570][ T7757] bridge_slave_0: entered allmulticast mode [ 134.271492][ T7757] bridge_slave_0: entered promiscuous mode [ 134.278272][ T7789] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 134.288135][ T7789] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 134.298979][ T81] bridge_slave_1: left allmulticast mode [ 134.304907][ T81] bridge_slave_1: left promiscuous mode [ 134.311301][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.319898][ T81] bridge_slave_0: left allmulticast mode [ 134.326460][ T81] bridge_slave_0: left promiscuous mode [ 134.332576][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.363913][ T81] bond1 (unregistering): (slave geneve2): Releasing active interface [ 134.416431][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.426027][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.436167][ T81] bond0 (unregistering): Released all slaves [ 134.445138][ T81] bond1 (unregistering): Released all slaves [ 134.461220][ T7757] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.470526][ T7757] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.477834][ T7757] bridge_slave_1: entered allmulticast mode [ 134.485024][ T7757] bridge_slave_1: entered promiscuous mode [ 134.503990][ T7757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.516286][ T81] hsr_slave_0: left promiscuous mode [ 134.522479][ T81] hsr_slave_1: left promiscuous mode [ 134.529860][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.542622][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.589602][ T81] team0 (unregistering): Port device team_slave_1 removed [ 134.600055][ T81] team0 (unregistering): Port device team_slave_0 removed [ 134.636120][ T7757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.655710][ T7757] team0: Port device team_slave_0 added [ 134.662896][ T7757] team0: Port device team_slave_1 added [ 134.678185][ T7757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.689853][ T7757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.717011][ T7757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.735617][ T7757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.747393][ T7757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.790279][ T7757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.823845][ T7757] hsr_slave_0: entered promiscuous mode [ 134.831833][ T7757] hsr_slave_1: entered promiscuous mode [ 134.840678][ T7757] debugfs: 'hsr0' already exists in 'hsr' [ 134.848612][ T7757] Cannot create hsr debugfs directory [ 134.952850][ T3039] 8021q: adding VLAN 0 to HW filter on device eth9 [ 134.968084][ T7811] set_capacity_and_notify: 1 callbacks suppressed [ 134.968100][ T7811] loop2: detected capacity change from 0 to 32768 [ 134.979943][ T7757] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 134.992118][ T7757] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 135.008127][ T7757] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 135.008375][ T7827] loop1: detected capacity change from 0 to 128 [ 135.027996][ T7827] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.032375][ T7757] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 135.048810][ T7757] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 135.058016][ T7757] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 135.061379][ T7811] loop2: p1 p3 < p5 p6 > p4 < p7 p8 p9 > [ 135.066171][ T7757] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 135.082151][ T7827] ext4 filesystem being mounted at /293/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.090071][ T7757] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 135.114665][ T7811] loop2: p1 start 146641443 is beyond EOD, [ 135.126056][ T7827] EXT4-fs error (device loop1): dx_make_map:1296: inode #2: block 20: comm syz.1.1473: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 135.127336][ T7811] truncated [ 135.152859][ T7827] EXT4-fs error (device loop1) in do_split:2027: Corrupt filesystem [ 135.172121][ T7757] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.173584][ T7811] loop2: p6 start 50334720 is beyond EOD, truncated [ 135.179349][ T7757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.186434][ T7811] loop2: p7 start 146641443 is beyond EOD, truncated [ 135.193748][ T7757] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.203057][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.207613][ T7757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.217686][ T7811] loop2: p9 start 50334720 is beyond EOD, truncated [ 135.305215][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.327615][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.434210][ T3039] 8021q: adding VLAN 0 to HW filter on device eth10 [ 135.459147][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 135.469930][ T3498] Bluetooth: hci0: unexpected event 0x07 length: 0 < 255 [ 135.472090][ T7757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.505539][ T7757] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.524179][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.531316][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.533720][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 135.541733][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 135.549669][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 135.559190][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p8, 10) failed: No such file or directory [ 135.594738][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.601953][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.632821][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 135.632842][ T28] audit: type=1400 audit(1776593872.290:583): avc: denied { getopt } for pid=7872 comm="syz.1.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 135.786607][ T7890] veth1_to_bond: entered allmulticast mode [ 135.797814][ T28] audit: type=1326 audit(1776593872.450:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7888 comm="syz.1.1486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f667f4cc819 code=0x0 [ 135.825330][ T7757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.898588][ T7903] veth1_to_bond: left allmulticast mode [ 135.906846][ T3039] 8021q: adding VLAN 0 to HW filter on device eth11 [ 135.999148][ T28] audit: type=1326 audit(1776593872.650:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc022c819 code=0x7ffc0000 [ 136.033618][ T28] audit: type=1326 audit(1776593872.660:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc022c819 code=0x7ffc0000 [ 136.059684][ T28] audit: type=1326 audit(1776593872.660:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc022c819 code=0x7ffc0000 [ 136.094481][ T28] audit: type=1326 audit(1776593872.660:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc022c819 code=0x7ffc0000 [ 136.100189][ T7757] veth0_vlan: entered promiscuous mode [ 136.123984][ T28] audit: type=1326 audit(1776593872.660:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc022c819 code=0x7ffc0000 [ 136.148204][ T28] audit: type=1326 audit(1776593872.660:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9cc022c819 code=0x7ffc0000 [ 136.152616][ T7757] veth1_vlan: entered promiscuous mode [ 136.178367][ T28] audit: type=1326 audit(1776593872.700:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc022c819 code=0x7ffc0000 [ 136.203937][ T28] audit: type=1326 audit(1776593872.700:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7916 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc022c819 code=0x7ffc0000 [ 136.237274][ T7757] veth0_macvtap: entered promiscuous mode [ 136.246117][ T7757] veth1_macvtap: entered promiscuous mode [ 136.258513][ T7757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.270494][ T3039] 8021q: adding VLAN 0 to HW filter on device eth12 [ 136.279231][ T7757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.292649][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.308108][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.317471][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.328136][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.645348][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1495'. [ 137.520546][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 137.556165][ T7970] loop5: detected capacity change from 0 to 4096 [ 137.569794][ T7970] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.583725][ T7976] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.643332][ T3944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.687467][ T7976] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.775119][ T7976] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.999088][ T7976] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.088322][ T5542] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.110221][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 138.135111][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 138.144934][ T5542] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.160187][ T5542] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.183082][ T5542] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.235957][ T8017] loop1: detected capacity change from 0 to 4096 [ 138.265374][ T8017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.529817][ T8030] loop7: detected capacity change from 0 to 2048 [ 138.543622][ T8030] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.636240][ T8030] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1523: bg 0: block 234: padding at end of block bitmap is not set [ 138.659936][ T8030] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 694 with error 28 [ 138.673502][ T8030] EXT4-fs (loop7): This should not happen!! Data will be lost [ 138.673502][ T8030] [ 138.674068][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.693542][ T8030] EXT4-fs (loop7): Total free blocks count 0 [ 138.699732][ T8030] EXT4-fs (loop7): Free/Dirty block details [ 138.706677][ T8030] EXT4-fs (loop7): free_blocks=0 [ 138.730446][ T8030] EXT4-fs (loop7): dirty_blocks=704 [ 138.740468][ T8030] EXT4-fs (loop7): Block reservation details [ 138.762534][ T8030] EXT4-fs (loop7): i_reserved_data_blocks=44 [ 138.865993][ T7757] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 138.892913][ T7757] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.967331][ T8046] syzkaller1: entered promiscuous mode [ 138.976757][ T8046] syzkaller1: entered allmulticast mode [ 138.986832][ T8046] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 22 [ 139.075397][ T8055] loop1: detected capacity change from 0 to 128 [ 139.090399][ T8055] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.183802][ T8068] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.1536'. [ 139.210838][ T8068] net_ratelimit: 10 callbacks suppressed [ 139.210855][ T8068] netlink: zone id is out of range [ 139.233012][ T8068] netlink: zone id is out of range [ 139.240568][ T8068] netlink: zone id is out of range [ 139.266579][ T10] IPVS: starting estimator thread 0... [ 139.331059][ T8068] netlink: zone id is out of range [ 139.340056][ T8068] netlink: set zone limit has 8 unknown bytes [ 139.370536][ T8073] IPVS: using max 2256 ests per chain, 112800 per kthread [ 139.519480][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1544'. [ 139.570017][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1544'. [ 139.616171][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1544'. [ 139.652221][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1544'. [ 139.735100][ T8108] loop2: detected capacity change from 0 to 512 [ 139.735337][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1544'. [ 139.787403][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1544'. [ 140.469949][ T8156] loop3: detected capacity change from 0 to 4096 [ 140.491987][ T8156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.532960][ T8156] SELinux: failed to load policy [ 140.673229][ T5109] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.717569][ T8173] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1563'. [ 141.045101][ T8213] loop5: detected capacity change from 0 to 2048 [ 141.084470][ T8213] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.122067][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 141.122087][ T28] audit: type=1400 audit(1776593877.770:626): avc: denied { getopt } for pid=8215 comm="syz.2.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.267746][ T8213] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1565: bg 0: block 234: padding at end of block bitmap is not set [ 141.319577][ T8213] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 278 with error 28 [ 141.355826][ T8213] EXT4-fs (loop5): This should not happen!! Data will be lost [ 141.355826][ T8213] [ 141.385476][ T8213] EXT4-fs (loop5): Total free blocks count 0 [ 141.400201][ T8213] EXT4-fs (loop5): Free/Dirty block details [ 141.415698][ T8213] EXT4-fs (loop5): free_blocks=0 [ 141.433377][ T8213] EXT4-fs (loop5): dirty_blocks=288 [ 141.446055][ T8213] EXT4-fs (loop5): Block reservation details [ 141.460899][ T8213] EXT4-fs (loop5): i_reserved_data_blocks=18 [ 142.142595][ T3944] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 142.190047][ T3944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.209282][ T8236] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.216576][ T8236] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.290745][ T28] audit: type=1400 audit(1776593878.940:627): avc: denied { create } for pid=8248 comm="syz.5.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.313739][ T8249] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1576'. [ 142.340359][ T8249] netlink: 'syz.5.1576': attribute type 7 has an invalid length. [ 142.352737][ T8236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.364801][ T8236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.376025][ T8249] netlink: 'syz.5.1576': attribute type 8 has an invalid length. [ 142.399210][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1576'. [ 142.445016][ T12] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.474866][ T12] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.503196][ T12] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.534052][ T12] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.719478][ T28] audit: type=1400 audit(1776593879.370:628): avc: denied { bind } for pid=8274 comm="syz.1.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.775761][ T28] audit: type=1400 audit(1776593879.400:629): avc: denied { listen } for pid=8274 comm="syz.1.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.804070][ T8279] af_packet: tpacket_rcv: packet too big, clamped from 65386 to 4294967272. macoff=96 [ 142.819881][ T8280] loop1: detected capacity change from 0 to 2048 [ 142.845629][ T8280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.989974][ T8280] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1587: bg 0: block 234: padding at end of block bitmap is not set [ 143.010435][ T28] audit: type=1400 audit(1776593879.660:630): avc: denied { getopt } for pid=8291 comm="syz.7.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.053233][ T8280] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 396 with error 28 [ 143.088311][ T8280] EXT4-fs (loop1): This should not happen!! Data will be lost [ 143.088311][ T8280] [ 143.101093][ T8280] EXT4-fs (loop1): Total free blocks count 0 [ 143.114487][ T8280] EXT4-fs (loop1): Free/Dirty block details [ 143.137439][ T8280] EXT4-fs (loop1): free_blocks=0 [ 143.151875][ T8280] EXT4-fs (loop1): dirty_blocks=400 [ 143.162675][ T8280] EXT4-fs (loop1): Block reservation details [ 143.181825][ T8280] EXT4-fs (loop1): i_reserved_data_blocks=25 [ 143.495916][ T3313] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 143.528983][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.580375][ T28] audit: type=1400 audit(1776593880.230:631): avc: denied { override_creds } for pid=8314 comm="syz.5.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 143.705730][ T8327] loop2: detected capacity change from 0 to 512 [ 143.760253][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1609'. [ 143.781674][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1609'. [ 143.992759][ T28] audit: type=1400 audit(1776593880.650:632): avc: denied { create } for pid=8339 comm="syz.7.1612" name=01 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 143.996422][ T8334] bio_check_eod: 29 callbacks suppressed [ 143.996442][ T8334] syz.2.1607: attempt to access beyond end of device [ 143.996442][ T8334] loop2: rw=0, sector=432, nr_sectors = 128 limit=512 [ 144.155642][ T5531] kworker/u8:8: attempt to access beyond end of device [ 144.155642][ T5531] loop2: rw=1, sector=560, nr_sectors = 2048 limit=512 [ 144.174838][ T5531] kworker/u8:8: attempt to access beyond end of device [ 144.174838][ T5531] loop2: rw=1, sector=2608, nr_sectors = 2800 limit=512 [ 144.206429][ T5531] kworker/u8:8: attempt to access beyond end of device [ 144.206429][ T5531] loop2: rw=1, sector=5408, nr_sectors = 11056 limit=512 [ 144.339277][ T8363] gretap2: entered promiscuous mode [ 144.597095][ T8371] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1623'. [ 144.606835][ T8371] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1623'. [ 144.641121][ T28] audit: type=1400 audit(1776593881.300:633): avc: denied { sys_module } for pid=8372 comm="syz.1.1624" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 144.707676][ T28] audit: type=1400 audit(1776593881.360:634): avc: denied { connect } for pid=8372 comm="syz.1.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.707922][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1624'. [ 144.778288][ T28] audit: type=1400 audit(1776593881.430:635): avc: denied { unlink } for pid=7757 comm="syz-executor" name=01 dev="tmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 144.998658][ T8386] loop3: detected capacity change from 0 to 2048 [ 145.013629][ T8386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.086406][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1630'. [ 145.087438][ T8386] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1629: bg 0: block 234: padding at end of block bitmap is not set [ 145.095810][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1630'. [ 145.113887][ T8386] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1296 with error 28 [ 145.122682][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1630'. [ 145.131987][ T5558] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.145846][ T8386] EXT4-fs (loop3): This should not happen!! Data will be lost [ 145.145846][ T8386] [ 145.150815][ T5558] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.168058][ T8386] EXT4-fs (loop3): Total free blocks count 0 [ 145.169563][ T5558] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.183756][ T5558] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.190348][ T8386] EXT4-fs (loop3): Free/Dirty block details [ 145.198825][ T8386] EXT4-fs (loop3): free_blocks=0 [ 145.204155][ T8386] EXT4-fs (loop3): dirty_blocks=1296 [ 145.209567][ T8386] EXT4-fs (loop3): Block reservation details [ 145.216048][ T8386] EXT4-fs (loop3): i_reserved_data_blocks=81 [ 145.248347][ T8397] loop5: detected capacity change from 0 to 128 [ 145.257655][ T8397] EXT4-fs: Ignoring removed orlov option [ 145.266344][ T3306] udevd[3306]: incorrect ext4 checksum on /dev/loop5 [ 145.278367][ T8397] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 145.345536][ T8401] netlink: 'syz.5.1633': attribute type 1 has an invalid length. [ 145.423345][ T5109] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 145.449688][ T5109] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.813377][ T8427] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.829471][ T8427] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 145.898555][ T8436] loop2: detected capacity change from 0 to 2048 [ 145.913725][ T8427] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.930132][ T8427] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 145.970765][ T8436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.014561][ T8427] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.032962][ T8427] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 146.062077][ T8436] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1647: bg 0: block 234: padding at end of block bitmap is not set [ 146.080432][ T8436] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 562 with error 28 [ 146.093070][ T8436] EXT4-fs (loop2): This should not happen!! Data will be lost [ 146.093070][ T8436] [ 146.104258][ T8436] EXT4-fs (loop2): Total free blocks count 0 [ 146.110789][ T8436] EXT4-fs (loop2): Free/Dirty block details [ 146.116943][ T8436] EXT4-fs (loop2): free_blocks=0 [ 146.123097][ T8427] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.133932][ T8427] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 146.144713][ T8436] EXT4-fs (loop2): dirty_blocks=576 [ 146.151470][ T8436] EXT4-fs (loop2): Block reservation details [ 146.157612][ T8436] EXT4-fs (loop2): i_reserved_data_blocks=36 [ 146.185349][ T8431] loop7: detected capacity change from 0 to 512 [ 146.201122][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 146.212283][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 146.212299][ T28] audit: type=1326 audit(1776593882.870:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8444 comm="syz.5.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb7d5a0c819 code=0x7ffc0000 [ 146.222114][ T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 146.317864][ T8431] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 146.344421][ T3316] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 146.350343][ T8431] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.1648: iget: bogus i_mode (2) [ 146.382069][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.389055][ T8431] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 146.395410][ T8431] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.1648: couldn't read orphan inode 15 (err -117) [ 146.398066][ T8449] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.406210][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 146.418123][ T8449] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.444601][ C1] EXT4-fs (loop7): initial error at time 1776593883: ext4_orphan_get:1397: inode 15 [ 146.455580][ C1] EXT4-fs (loop7): last error at time 1776593883: ext4_orphan_get:1397: inode 15 [ 146.475504][ T8431] loop7: lost filesystem error report for type 5 error -117 [ 146.492100][ T8449] batman_adv: batadv0: Interface deactivated: dummy0 [ 146.510466][ T8431] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.627162][ T8449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.641536][ T8449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.682213][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 146.713613][ T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 146.748140][ T28] audit: type=1326 audit(1776593883.400:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8475 comm="syz.2.1659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cc022c819 code=0x0 [ 146.820256][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 146.838219][ T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 146.866825][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 146.882005][ T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 146.892381][ T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.901242][ T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.909814][ T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.921877][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.934539][ T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.950434][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.960480][ T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.969402][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.021992][ T7757] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.213923][ T8507] syzkaller0: entered promiscuous mode [ 147.225609][ T8507] syzkaller0: entered allmulticast mode [ 147.513404][ T8529] loop7: detected capacity change from 0 to 512 [ 147.532824][ T28] audit: type=1400 audit(1776593884.190:664): avc: denied { relabelfrom } for pid=8530 comm="syz.1.1670" name="SCTPv6" dev="sockfs" ino=23531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 147.557676][ T8531] SELinux: Context system_u:object_r:hostname_exec_t:s0 is not valid (left unmapped). [ 147.568581][ T8533] __nla_validate_parse: 1 callbacks suppressed [ 147.568612][ T8533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1669'. [ 147.582101][ T28] audit: type=1400 audit(1776593884.220:665): avc: denied { relabelto } for pid=8530 comm="syz.1.1670" name="SCTPv6" dev="sockfs" ino=23531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 trawcon="system_u:object_r:hostname_exec_t:s0" [ 147.619856][ T8529] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.1668: inode has both inline data and extents flags [ 147.656027][ T8529] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 147.656253][ T8529] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.1668: couldn't read orphan inode 15 (err -117) [ 147.666169][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 147.666189][ C0] EXT4-fs (loop7): initial error at time 1776593884: ext4_orphan_get:1397: inode 15 [ 147.666234][ C0] EXT4-fs (loop7): last error at time 1776593884: ext4_orphan_get:1397: inode 15 [ 147.739099][ T28] audit: type=1400 audit(1776593884.390:666): avc: denied { relabelfrom } for pid=8539 comm="syz.1.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 147.776527][ T8529] loop7: lost filesystem error report for type 5 error -117 [ 147.777098][ T8529] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.786525][ T28] audit: type=1400 audit(1776593884.390:667): avc: denied { relabelto } for pid=8539 comm="syz.1.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 147.921663][ T28] audit: type=1400 audit(1776593884.570:668): avc: denied { mounton } for pid=8527 comm="syz.7.1668" path="/39/file0/bus" dev="loop7" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 148.030389][ T8529] loop7: detected capacity change from 512 to 0 [ 148.030658][ T8564] EXT4-fs error (device loop7): __ext4_get_inode_loc_noinmem:5008: inode #18: block 9: comm syz.7.1668: unable to read itable block [ 148.050610][ C0] I/O error, dev loop7, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 148.070390][ T8564] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 148.084767][ T8564] EXT4-fs (loop7): I/O error while writing superblock [ 148.162875][ T7757] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 148.186669][ T12] EXT4-fs error (device loop7): __ext4_get_inode_loc_noinmem:5008: inode #2: block 5: comm kworker/u8:0: unable to read itable block [ 148.201413][ T12] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 148.210133][ T12] EXT4-fs (loop7): I/O error while writing superblock [ 148.229609][ T7757] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.251918][ T7757] Buffer I/O error on dev loop7, logical block 1, lost sync page write [ 148.273629][ T7757] EXT4-fs (loop7): I/O error while writing superblock [ 148.548769][ T5558] bridge_slave_1: left allmulticast mode [ 148.555336][ T5558] bridge_slave_1: left promiscuous mode [ 148.570735][ T5558] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.586698][ T5558] bridge_slave_0: left allmulticast mode [ 148.592692][ T5558] bridge_slave_0: left promiscuous mode [ 148.606187][ T5558] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.708232][ T5558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.732497][ T8581] loop2: detected capacity change from 0 to 164 [ 148.742237][ T5558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.776815][ T5558] bond0 (unregistering): Released all slaves [ 148.832957][ T8540] syz.5.1671 (8540) used greatest stack depth: 6136 bytes left [ 148.883969][ T5558] hsr_slave_0: left promiscuous mode [ 148.901681][ T5558] hsr_slave_1: left promiscuous mode [ 148.909979][ T5558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.940789][ T5558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.041323][ T8581] isofs_fill_super: bread failed, dev=loop2, iso_blknum=41, block=82 [ 149.249689][ T5558] team0 (unregistering): Port device team_slave_1 removed [ 149.287027][ T5558] team0 (unregistering): Port device team_slave_0 removed [ 149.489605][ T8601] syzkaller0: entered promiscuous mode [ 149.505672][ T8601] syzkaller0: entered allmulticast mode [ 149.557622][ T8618] loop5: detected capacity change from 0 to 164 [ 149.588902][ T8618] rock: directory entry would overflow storage [ 149.616121][ T8618] rock: sig=0x4543, size=28, remaining=18 [ 149.781457][ T8590] chnl_net:caif_netlink_parms(): no params data found [ 149.820845][ T3039] 8021q: adding VLAN 0 to HW filter on device eth13 [ 149.916409][ T8643] loop5: detected capacity change from 0 to 4096 [ 149.935995][ T8590] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.943275][ T8590] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.956387][ T8590] bridge_slave_0: entered allmulticast mode [ 149.964610][ T8643] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.964784][ T8590] bridge_slave_0: entered promiscuous mode [ 149.985053][ T8590] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.994345][ T8590] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.077914][ T8590] bridge_slave_1: entered allmulticast mode [ 150.115067][ T8590] bridge_slave_1: entered promiscuous mode [ 150.202317][ T8590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.244443][ T8590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.321251][ T8590] team0: Port device team_slave_0 added [ 150.330152][ T3944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.348795][ T8590] team0: Port device team_slave_1 added [ 150.401212][ T8590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.424122][ T8590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.507768][ T8590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.581615][ T8590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.599386][ T8590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.626336][ T8689] sctp: [Deprecated]: syz.5.1715 (pid 8689) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.626336][ T8689] Use struct sctp_sack_info instead [ 150.648121][ T8590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.686119][ T28] audit: type=1400 audit(1776593887.340:669): avc: denied { write } for pid=8693 comm="syz.5.1717" path="socket:[24844]" dev="sockfs" ino=24844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.772624][ T8590] hsr_slave_0: entered promiscuous mode [ 150.790539][ T8590] hsr_slave_1: entered promiscuous mode [ 150.804246][ T8590] debugfs: 'hsr0' already exists in 'hsr' [ 150.816841][ T8590] Cannot create hsr debugfs directory [ 150.853678][ T3039] 8021q: adding VLAN 0 to HW filter on device eth14 [ 151.047536][ T8590] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 151.066002][ T8590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 151.075276][ T8590] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 151.094051][ T8590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 151.113432][ T8590] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 151.133122][ T28] audit: type=1400 audit(1776593887.790:670): avc: denied { write } for pid=8730 comm="syz.3.1722" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 151.157818][ T8590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 151.168063][ T8590] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 151.178384][ T8590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 151.250512][ T3039] 8021q: adding VLAN 0 to HW filter on device eth15 [ 151.271819][ T8590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.296246][ T8590] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.309385][ T5531] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.316694][ T5531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.347134][ T5544] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.354462][ T5544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.679133][ T8590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.754647][ T3039] 8021q: adding VLAN 0 to HW filter on device eth16 [ 151.761201][ T28] audit: type=1326 audit(1776593888.410:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8784 comm="syz.5.1731" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fb7d5a06597 code=0x0 [ 151.829437][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1732'. [ 152.035611][ T8590] veth0_vlan: entered promiscuous mode [ 152.048665][ T8590] veth1_vlan: entered promiscuous mode [ 152.084598][ T8590] veth0_macvtap: entered promiscuous mode [ 152.092685][ T8590] veth1_macvtap: entered promiscuous mode [ 152.104323][ T8590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.116665][ T8590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.139653][ T5533] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.159863][ T5533] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.177104][ T5533] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.199020][ T5533] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.250621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.379024][ T8831] netlink: 'syz.8.1740': attribute type 29 has an invalid length. [ 152.388641][ T8831] netlink: 'syz.8.1740': attribute type 29 has an invalid length. [ 152.399204][ T8831] netlink: 500 bytes leftover after parsing attributes in process `syz.8.1740'. [ 152.480876][ T8843] loop3: detected capacity change from 0 to 512 [ 152.490879][ T8843] EXT4-fs: test_dummy_encryption option not supported [ 152.541373][ T28] audit: type=1400 audit(1776593889.190:672): avc: denied { read } for pid=8846 comm="syz.1.1747" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 152.567010][ T28] audit: type=1400 audit(1776593889.190:673): avc: denied { open } for pid=8846 comm="syz.1.1747" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 152.605240][ T8852] loop3: detected capacity change from 0 to 512 [ 152.625675][ T8852] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 152.655158][ T8852] EXT4-fs (loop3): 1 truncate cleaned up [ 152.661820][ T8852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.827822][ T8866] loop2: detected capacity change from 0 to 8192 [ 152.861606][ T5109] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.013561][ T8879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.118892][ T8885] SELinux: failed to load policy [ 153.331696][ T8897] netlink: 'syz.5.1768': attribute type 21 has an invalid length. [ 153.350191][ T8897] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1768'. [ 153.369330][ T8897] netlink: 'syz.5.1768': attribute type 1 has an invalid length. [ 153.628512][ T28] audit: type=1400 audit(1776593890.280:674): avc: denied { create } for pid=8916 comm="syz.2.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 153.664978][ T28] audit: type=1400 audit(1776593890.320:675): avc: denied { connect } for pid=8916 comm="syz.2.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 153.753140][ T8922] syzkaller0: refused to change device tx_queue_len [ 153.837623][ T8930] loop5: detected capacity change from 0 to 1024 [ 153.847002][ T8930] EXT4-fs: inline encryption not supported [ 153.871063][ T8930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.958268][ T3944] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.136960][ T28] audit: type=1400 audit(1776593890.790:676): avc: denied { ioctl } for pid=8951 comm="syz.1.1792" path="socket:[25547]" dev="sockfs" ino=25547 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.340834][ T8965] loop1: detected capacity change from 0 to 1024 [ 154.349474][ T8965] EXT4-fs: inline encryption not supported [ 154.368627][ T8965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.445353][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.609085][ T8983] loop1: detected capacity change from 0 to 2048 [ 154.634149][ T8983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.713580][ T8983] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1805: bg 0: block 234: padding at end of block bitmap is not set [ 154.734109][ T8983] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1218 with error 28 [ 154.751363][ T8991] loop2: detected capacity change from 0 to 512 [ 154.758574][ T8983] EXT4-fs (loop1): This should not happen!! Data will be lost [ 154.758574][ T8983] [ 154.765939][ T8991] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 154.780490][ T8983] EXT4-fs (loop1): Total free blocks count 0 [ 154.789918][ T8991] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 154.800488][ T8983] EXT4-fs (loop1): Free/Dirty block details [ 154.807041][ T8983] EXT4-fs (loop1): free_blocks=0 [ 154.812557][ T8983] EXT4-fs (loop1): dirty_blocks=1232 [ 154.818137][ T8983] EXT4-fs (loop1): Block reservation details [ 154.819167][ T8991] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1806: Corrupt directory, running e2fsck is recommended [ 154.826385][ T8983] EXT4-fs (loop1): i_reserved_data_blocks=77 [ 154.871288][ T8991] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 154.879583][ T8991] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.1806: corrupted in-inode xattr: invalid ea_ino [ 154.882000][ T3313] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 154.893775][ T8991] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 154.905009][ T8991] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1806: couldn't read orphan inode 15 (err -117) [ 154.909886][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.914457][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 154.914478][ C1] EXT4-fs (loop2): initial error at time 1776593891: ext4_iget_extra_inode:5128: inode 15 [ 154.914508][ C1] EXT4-fs (loop2): last error at time 1776593891: ext4_iget_extra_inode:5128: inode 15 [ 154.915376][ T8991] loop2: lost filesystem error report for type 5 error -117 [ 154.966223][ T8991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.994500][ T8991] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #2: comm syz.2.1806: corrupted xattr block 255: invalid header [ 155.008206][ T8999] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1809'. [ 155.029413][ T8999] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1809'. [ 155.039643][ T8991] SELinux: (dev loop2, type ext4) getxattr errno 117 [ 155.049824][ T8999] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1809'. [ 155.064990][ T8991] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.118911][ T9007] loop3: detected capacity change from 0 to 256 [ 155.177205][ T8991] loop2: detected capacity change from 0 to 764 [ 155.234232][ T8991] rock: directory entry would overflow storage [ 155.245144][ T8991] rock: sig=0x4654, size=5, remaining=4 [ 155.344673][ T35] IPVS: starting estimator thread 0... [ 155.440792][ T9030] IPVS: using max 2544 ests per chain, 127200 per kthread [ 155.505527][ T9045] loop2: detected capacity change from 0 to 512 [ 155.515850][ T9045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.579921][ T9051] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.651573][ T9051] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.694538][ T9051] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.765258][ T9051] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.826627][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.841899][ T5533] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.860761][ T5533] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.875791][ T5533] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.892196][ T5533] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.892545][ T28] audit: type=1400 audit(1776593892.550:677): avc: denied { read } for pid=9061 comm="syz.2.1832" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 155.942674][ T28] audit: type=1400 audit(1776593892.550:678): avc: denied { open } for pid=9061 comm="syz.2.1832" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 156.039633][ T8457] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 156.054482][ T8457] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 156.148425][ T9075] xt_hashlimit: size too large, truncated to 1048576 [ 156.291710][ T28] audit: type=1400 audit(1776593892.950:679): avc: denied { listen } for pid=9081 comm="syz.3.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 156.388942][ T28] audit: type=1400 audit(1776593893.040:680): avc: denied { append } for pid=9085 comm="syz.5.1841" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 156.645926][ T9120] delete_channel: no stack [ 157.232281][ T9125] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.248053][ T9130] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 157.257045][ T9130] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 157.282180][ T9125] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.305792][ T9130] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1859'. [ 157.333624][ T9130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.352993][ T9130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.377450][ T9130] bond0 (unregistering): Released all slaves [ 157.402625][ T9143] xt_hashlimit: size too large, truncated to 1048576 [ 157.413354][ T9125] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.472371][ T9125] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.550353][ T5544] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.570939][ T5544] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.585200][ T5544] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.594253][ T5544] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.864000][ T9161] netlink: 'syz.1.1872': attribute type 5 has an invalid length. [ 157.871945][ T9161] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1872'. [ 158.101322][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 158.101340][ T28] audit: type=1326 audit(1776593894.760:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.3.1871" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdac947c819 code=0x0 [ 158.335386][ T9199] set_capacity_and_notify: 1 callbacks suppressed [ 158.335407][ T9199] loop5: detected capacity change from 0 to 764 [ 158.537400][ T9202] gretap1: entered promiscuous mode [ 158.642111][ T9204] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1889'. [ 158.666310][ T9204] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1889'. [ 158.729984][ T9207] ipip0: entered promiscuous mode [ 158.837625][ T9220] netlink: 'syz.3.1896': attribute type 10 has an invalid length. [ 158.864906][ T9220] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.882314][ T9220] bond0: (slave team0): Enslaving as an active interface with an up link [ 158.943635][ T9228] loop2: detected capacity change from 0 to 512 [ 158.972722][ T9228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.055411][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.267268][ T28] audit: type=1400 audit(1776593895.920:683): avc: denied { read append } for pid=9253 comm="syz.3.1912" name="file0" dev="tmpfs" ino=1431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 159.297518][ T8461] IPVS: starting estimator thread 0... [ 159.345836][ T28] audit: type=1400 audit(1776593895.920:684): avc: denied { open } for pid=9253 comm="syz.3.1912" path="/273/file0" dev="tmpfs" ino=1431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 159.430950][ T9255] IPVS: using max 2496 ests per chain, 124800 per kthread [ 159.597143][ T9258] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.661695][ T9270] loop5: detected capacity change from 0 to 512 [ 159.960786][ T9279] syz.5.1919: attempt to access beyond end of device [ 159.960786][ T9279] loop5: rw=0, sector=432, nr_sectors = 128 limit=512 [ 160.222874][ T5531] kworker/u8:8: attempt to access beyond end of device [ 160.222874][ T5531] loop5: rw=1, sector=560, nr_sectors = 15904 limit=512 [ 160.250222][ T9293] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.332406][ T9293] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.403548][ T9293] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.477309][ T9293] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.522069][ T9302] loop1: detected capacity change from 0 to 4096 [ 160.553683][ T9302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.587478][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1934'. [ 160.625076][ T5558] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.655573][ T5558] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.696819][ T5558] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.713290][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.757963][ T5558] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.774836][ T9324] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1942'. [ 160.872702][ T9332] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 160.928616][ T9341] loop1: detected capacity change from 0 to 512 [ 160.957645][ T9341] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1949: inode has both inline data and extents flags [ 160.977405][ T9341] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 160.977635][ T9341] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1949: couldn't read orphan inode 15 (err -117) [ 160.986853][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 160.986873][ C0] EXT4-fs (loop1): initial error at time 1776593897: ext4_orphan_get:1397: inode 15 [ 160.986906][ C0] EXT4-fs (loop1): last error at time 1776593897: ext4_orphan_get:1397: inode 15 [ 161.025484][ T9341] loop1: lost filesystem error report for type 5 error -117 [ 161.026195][ T9341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.230955][ T9341] loop1: detected capacity change from 512 to 0 [ 161.237632][ C0] I/O error, dev loop1, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2 [ 161.247362][ C0] I/O error, dev loop1, sector 20 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2 [ 161.257003][ C0] I/O error, dev loop1, sector 18 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 161.276092][ T9344] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:5008: inode #18: block 9: comm syz.1.1949: unable to read itable block [ 161.292701][ T9344] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 161.301187][ T9344] EXT4-fs (loop1): I/O error while writing superblock [ 161.332983][ T3313] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 161.396310][ T5531] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:5008: inode #2: block 5: comm kworker/u8:8: unable to read itable block [ 161.419296][ T5531] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 161.443236][ T5531] EXT4-fs (loop1): I/O error while writing superblock [ 161.471329][ T5288] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.490983][ T5288] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 161.516844][ T5288] EXT4-fs (loop1): I/O error while writing superblock [ 162.018930][ T3427] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 162.029295][ T9384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.059269][ T3427] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 162.065912][ T9367] chnl_net:caif_netlink_parms(): no params data found [ 162.075455][ T9384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.191012][ T9367] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.198204][ T9367] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.205562][ T9367] bridge_slave_0: entered allmulticast mode [ 162.215297][ T9367] bridge_slave_0: entered promiscuous mode [ 162.242007][ T9367] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.257837][ T9367] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.275082][ T9367] bridge_slave_1: entered allmulticast mode [ 162.289813][ T9367] bridge_slave_1: entered promiscuous mode [ 162.361366][ T9367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.394558][ T9367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.423443][ T9367] team0: Port device team_slave_0 added [ 162.433979][ T9367] team0: Port device team_slave_1 added [ 162.467602][ T9367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.483274][ T9367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.536737][ T9367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.548479][ T9367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.577354][ T9367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.613179][ T9367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.666783][ T9367] hsr_slave_0: entered promiscuous mode [ 162.673603][ T9367] hsr_slave_1: entered promiscuous mode [ 162.679509][ T9367] debugfs: 'hsr0' already exists in 'hsr' [ 162.687046][ T9367] Cannot create hsr debugfs directory [ 162.785685][ T9367] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 162.795043][ T9367] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 162.803834][ T9367] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 162.812821][ T9367] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 162.820625][ T9367] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 162.829245][ T9367] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 162.837351][ T9367] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 162.847118][ T9367] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 162.864641][ T9367] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.871754][ T9367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.879407][ T9367] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.886809][ T9367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.923675][ T9367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.936035][ T5544] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.944163][ T5544] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.957682][ T9367] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.968803][ T5558] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.975997][ T5558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.996572][ T5558] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.004175][ T5558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.081673][ T9367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.227830][ T9367] veth0_vlan: entered promiscuous mode [ 163.238995][ T9367] veth1_vlan: entered promiscuous mode [ 163.256620][ T9367] veth0_macvtap: entered promiscuous mode [ 163.265411][ T9367] veth1_macvtap: entered promiscuous mode [ 163.277089][ T9367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.291416][ T9367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.303418][ T5531] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.316547][ T5531] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.328055][ T5531] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.350466][ T5531] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.468760][ T9457] bond1: (slave lo): Releasing backup interface [ 163.481060][ T9457] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 163.507017][ T9457] bridge_slave_0: left allmulticast mode [ 163.523910][ T9457] bridge_slave_0: left promiscuous mode [ 163.537034][ T9457] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.554043][ T9457] bridge_slave_1: left allmulticast mode [ 163.566391][ T9457] bridge_slave_1: left promiscuous mode [ 163.580478][ T9457] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.597468][ T9457] bond0: (slave bond_slave_0): Releasing backup interface [ 163.609604][ T9457] bond0: (slave bond_slave_1): Releasing backup interface [ 163.624075][ T9457] team0: Port device team_slave_0 removed [ 163.635885][ T9457] bond4: (slave veth1_to_team): Removing an active aggregator [ 163.651691][ T9457] bond4: (slave veth1_to_team): Releasing backup interface [ 163.669441][ T9457] team0: Port device team_slave_1 removed [ 163.682954][ T9457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.700609][ T9457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.715876][ T9457] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 164.185290][ T9482] netlink: 'syz.3.1966': attribute type 1 has an invalid length. [ 164.204651][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1966'. [ 164.281054][ T9484] loop3: detected capacity change from 0 to 512 [ 164.498227][ T9487] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.578943][ T9485] syz.3.1967: attempt to access beyond end of device [ 164.578943][ T9485] loop3: rw=0, sector=432, nr_sectors = 128 limit=512 [ 164.756413][ T30] kworker/u8:1: attempt to access beyond end of device [ 164.756413][ T30] loop3: rw=1, sector=560, nr_sectors = 2048 limit=512 [ 164.785598][ T30] kworker/u8:1: attempt to access beyond end of device [ 164.785598][ T30] loop3: rw=1, sector=2608, nr_sectors = 2048 limit=512 [ 164.815300][ T30] kworker/u8:1: attempt to access beyond end of device [ 164.815300][ T30] loop3: rw=1, sector=4656, nr_sectors = 2048 limit=512 [ 164.834743][ T30] kworker/u8:1: attempt to access beyond end of device [ 164.834743][ T30] loop3: rw=1, sector=6704, nr_sectors = 2048 limit=512 [ 164.853067][ T30] kworker/u8:1: attempt to access beyond end of device [ 164.853067][ T30] loop3: rw=1, sector=8752, nr_sectors = 2064 limit=512 [ 164.870724][ T30] kworker/u8:1: attempt to access beyond end of device [ 164.870724][ T30] loop3: rw=1, sector=10816, nr_sectors = 2056 limit=512 [ 164.887944][ T30] kworker/u8:1: attempt to access beyond end of device [ 164.887944][ T30] loop3: rw=1, sector=12872, nr_sectors = 2056 limit=512 [ 165.071453][ T28] audit: type=1400 audit(1776593901.730:685): avc: denied { create } for pid=9501 comm="syz.8.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 165.115063][ T28] audit: type=1400 audit(1776593901.750:686): avc: denied { write } for pid=9501 comm="syz.8.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 165.224615][ T28] audit: type=1400 audit(1776593901.880:687): avc: denied { setopt } for pid=9506 comm="syz.8.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 165.820411][ T9522] netlink: 'syz.5.1984': attribute type 10 has an invalid length. [ 166.036946][ T28] audit: type=1400 audit(1776593902.690:688): avc: denied { ioctl } for pid=9532 comm="syz.3.1989" path="socket:[27904]" dev="sockfs" ino=27904 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 166.221433][ T9540] loop5: detected capacity change from 0 to 256 [ 166.373703][ T9487] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.805487][ T9550] loop8: detected capacity change from 0 to 512 [ 166.974931][ T9555] bio_check_eod: 1 callbacks suppressed [ 166.974950][ T9555] syz.8.1995: attempt to access beyond end of device [ 166.974950][ T9555] loop8: rw=0, sector=432, nr_sectors = 128 limit=512 [ 166.994268][ T9557] loop3: detected capacity change from 0 to 128 [ 167.103712][ T9557] syz.3.1998: attempt to access beyond end of device [ 167.103712][ T9557] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 167.123808][ T5533] kworker/u8:9: attempt to access beyond end of device [ 167.123808][ T5533] loop8: rw=1, sector=560, nr_sectors = 2048 limit=512 [ 167.138937][ T9557] syz.3.1998: attempt to access beyond end of device [ 167.138937][ T9557] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 167.156851][ T5533] kworker/u8:9: attempt to access beyond end of device [ 167.156851][ T5533] loop8: rw=1, sector=2608, nr_sectors = 2200 limit=512 [ 167.174416][ T9487] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.186035][ T9557] syz.3.1998: attempt to access beyond end of device [ 167.186035][ T9557] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 167.200948][ T9561] ref_ctr_offset mismatch. inode: 0x806 offset: 0x0 ref_ctr_offset(old): 0x14 ref_ctr_offset(new): 0x0 [ 167.206964][ T5533] kworker/u8:9: attempt to access beyond end of device [ 167.206964][ T5533] loop8: rw=1, sector=4808, nr_sectors = 2048 limit=512 [ 167.226634][ T9557] syz.3.1998: attempt to access beyond end of device [ 167.226634][ T9557] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 167.240820][ T9557] syz.3.1998: attempt to access beyond end of device [ 167.240820][ T9557] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 167.258357][ T5533] kworker/u8:9: attempt to access beyond end of device [ 167.258357][ T5533] loop8: rw=1, sector=6856, nr_sectors = 2056 limit=512 [ 167.287098][ T9487] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.362722][ T5533] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.384748][ T5533] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.411231][ T5544] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.421083][ T5544] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.556296][ T9578] team0 (unregistering): Port device team_slave_0 removed [ 167.583720][ T9578] team0 (unregistering): Port device team_slave_1 removed [ 167.620865][ T28] audit: type=1400 audit(1776593904.280:689): avc: denied { ioctl } for pid=9581 comm="syz.3.2007" path="socket:[28112]" dev="sockfs" ino=28112 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 167.651159][ T28] audit: type=1400 audit(1776593904.310:690): avc: denied { bind } for pid=9581 comm="syz.3.2007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 171.144501][ T9591] loop9: detected capacity change from 0 to 512 [ 171.305790][ T9602] can0: slcan on ttyS3. [ 171.380481][ T9602] can0 (unregistered): slcan off ttyS3. [ 171.747713][ T9615] loop8: detected capacity change from 0 to 164 [ 171.798293][ T9641] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 171.850571][ T9641] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2019'. [ 171.878850][ T9641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.899115][ T9641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.919234][ T9641] bond0 (unregistering): Released all slaves [ 171.978089][ T9615] isofs_fill_super: bread failed, dev=loop8, iso_blknum=41, block=82 [ 171.995568][ T9642] loop9: detected capacity change from 0 to 8192 [ 172.296797][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2026'. [ 172.489002][ T28] audit: type=1400 audit(1776593909.140:691): avc: denied { read } for pid=9668 comm="syz.8.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 173.336495][ T9691] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 173.506002][ T28] audit: type=1326 audit(1776593910.160:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.9.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58caefc819 code=0x7ffc0000 [ 173.542697][ T9692] loop8: detected capacity change from 0 to 8192 [ 173.554574][ T28] audit: type=1326 audit(1776593910.160:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.9.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58caefc819 code=0x7ffc0000 [ 173.623180][ T28] audit: type=1326 audit(1776593910.190:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.9.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58caefc819 code=0x7ffc0000 [ 173.690345][ T28] audit: type=1326 audit(1776593910.190:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.9.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58caefc819 code=0x7ffc0000 [ 173.721310][ T9705] netlink: 'syz.9.2046': attribute type 34 has an invalid length. [ 173.722198][ T9703] siw: device registration error -23 [ 173.750355][ T28] audit: type=1326 audit(1776593910.190:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.9.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58caefc819 code=0x7ffc0000 [ 173.792167][ T9703] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2045'. [ 173.795241][ T9707] loop9: detected capacity change from 0 to 1024 [ 173.810312][ T28] audit: type=1326 audit(1776593910.190:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.9.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f58caefc819 code=0x7ffc0000 [ 173.843506][ T9707] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 173.852193][ T9707] System zones: 0-1, 3-36 [ 173.878985][ T9707] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.2047: bad orphan inode 134217728 [ 173.889914][ T9707] loop9: lost filesystem error report for type 5 error -117 [ 173.890001][ T28] audit: type=1326 audit(1776593910.190:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.9.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58caefc819 code=0x7ffc0000 [ 173.892276][ T9703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.897440][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 173.921634][ T9707] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.929928][ C1] EXT4-fs (loop9): initial error at time 1776593910: ext4_orphan_get:1423 [ 173.929959][ C1] EXT4-fs (loop9): last error at time 1776593910: ext4_orphan_get:1423 [ 173.930144][ T28] audit: type=1326 audit(1776593910.190:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.9.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58caefc819 code=0x7ffc0000 [ 173.990340][ T28] audit: type=1326 audit(1776593910.200:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9695 comm="syz.9.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f58caefc819 code=0x7ffc0000 [ 174.026103][ T9703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.048440][ T9709] loop3: detected capacity change from 0 to 8192 [ 174.069729][ T9703] bond0 (unregistering): (slave team0): Releasing backup interface [ 174.087340][ T9703] bond0 (unregistering): Released all slaves [ 174.253504][ T9367] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.739874][ T9730] loop3: detected capacity change from 0 to 512 [ 174.901427][ T9731] bio_check_eod: 78 callbacks suppressed [ 174.901455][ T9731] syz.3.2055: attempt to access beyond end of device [ 174.901455][ T9731] loop3: rw=0, sector=432, nr_sectors = 128 limit=512 [ 175.112373][ T5544] kworker/u8:14: attempt to access beyond end of device [ 175.112373][ T5544] loop3: rw=1, sector=560, nr_sectors = 15904 limit=512 [ 175.353092][ T9741] loop9: detected capacity change from 0 to 2048 [ 175.409484][ T9741] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.518642][ T9367] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.216400][ T9775] chnl_net:caif_netlink_parms(): no params data found [ 177.328211][ T9775] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.345530][ T9775] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.362601][ T9775] bridge_slave_0: entered allmulticast mode [ 177.376402][ T9775] bridge_slave_0: entered promiscuous mode [ 177.391115][ T9775] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.406164][ T9775] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.421578][ T9775] bridge_slave_1: entered allmulticast mode [ 177.434806][ T9775] bridge_slave_1: entered promiscuous mode [ 177.478006][ T9775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.672854][ T9775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.753877][ T9775] team0: Port device team_slave_0 added [ 178.768748][ T9797] loop9: detected capacity change from 0 to 128 [ 178.774251][ T9775] team0: Port device team_slave_1 added [ 178.804277][ T9801] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 178.834262][ T9794] loop8: detected capacity change from 0 to 8192 [ 178.844412][ T9775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.855992][ T9794] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.873680][ T9775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.904340][ T9775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.916790][ T9775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.924463][ T9775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.985068][ T9797] syz.9.2077: attempt to access beyond end of device [ 178.985068][ T9797] loop9: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 179.005895][ T9797] syz.9.2077: attempt to access beyond end of device [ 179.005895][ T9797] loop9: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 179.009277][ T9775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.030711][ T9797] syz.9.2077: attempt to access beyond end of device [ 179.030711][ T9797] loop9: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 179.053844][ T9797] syz.9.2077: attempt to access beyond end of device [ 179.053844][ T9797] loop9: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 179.075612][ T9775] hsr_slave_0: entered promiscuous mode [ 179.081881][ T9775] hsr_slave_1: entered promiscuous mode [ 179.087754][ T9797] syz.9.2077: attempt to access beyond end of device [ 179.087754][ T9797] loop9: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 179.101973][ T9775] debugfs: 'hsr0' already exists in 'hsr' [ 179.107865][ T9775] Cannot create hsr debugfs directory [ 179.113697][ T9797] syz.9.2077: attempt to access beyond end of device [ 179.113697][ T9797] loop9: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 179.134841][ T9797] syz.9.2077: attempt to access beyond end of device [ 179.134841][ T9797] loop9: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 179.148860][ T9797] syz.9.2077: attempt to access beyond end of device [ 179.148860][ T9797] loop9: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 179.333483][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 179.333501][ T28] audit: type=1326 audit(1776593915.990:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9817 comm="syz.3.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac947c819 code=0x7ffc0000 [ 179.365446][ T28] audit: type=1326 audit(1776593915.990:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9817 comm="syz.3.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac947c819 code=0x7ffc0000 [ 179.389689][ T28] audit: type=1326 audit(1776593915.990:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9817 comm="syz.3.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac947c819 code=0x7ffc0000 [ 179.421900][ T28] audit: type=1326 audit(1776593915.990:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9817 comm="syz.3.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdac947c819 code=0x7ffc0000 [ 179.445592][ T28] audit: type=1326 audit(1776593915.990:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9817 comm="syz.3.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac947c819 code=0x7ffc0000 [ 179.483562][ T28] audit: type=1326 audit(1776593915.990:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9817 comm="syz.3.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac947c819 code=0x7ffc0000 [ 179.511197][ T28] audit: type=1326 audit(1776593915.990:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9817 comm="syz.3.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac947c819 code=0x7ffc0000 [ 179.535800][ T28] audit: type=1326 audit(1776593915.990:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9817 comm="syz.3.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdac947c819 code=0x7ffc0000 [ 179.597300][ T28] audit: type=1326 audit(1776593915.990:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9817 comm="syz.3.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac947c819 code=0x7ffc0000 [ 179.627014][ T9775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 179.636964][ T9775] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 179.645284][ T9775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 179.652176][ T28] audit: type=1326 audit(1776593915.990:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9817 comm="syz.3.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac947c819 code=0x7ffc0000 [ 179.678478][ T9775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 179.687731][ T9775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 179.699252][ T9775] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 179.710334][ T9775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 179.719209][ T9775] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 179.760911][ T8461] ================================================================== [ 179.769109][ T8461] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 179.776129][ T8461] [ 179.778473][ T8461] read-write to 0xffff888237d2a8e4 of 4 bytes by task 35 on cpu 1: [ 179.786570][ T8461] wq_worker_running+0x9b/0x120 [ 179.791957][ T8461] synchronize_rcu_expedited+0x5f8/0x770 [ 179.797932][ T8461] try_check_zero+0x191/0x260 [ 179.802717][ T8461] process_srcu+0xd5/0xda0 [ 179.807328][ T8461] process_scheduled_works+0x4f0/0x9c0 [ 179.813063][ T8461] worker_thread+0x58a/0x780 [ 179.817673][ T8461] kthread+0x22a/0x280 [ 179.821749][ T8461] ret_from_fork+0x146/0x330 [ 179.826386][ T8461] ret_from_fork_asm+0x1a/0x30 [ 179.831243][ T8461] [ 179.833573][ T8461] read to 0xffff888237d2a8e4 of 4 bytes by task 8461 on cpu 0: [ 179.841442][ T8461] kick_pool+0x49/0x2d0 [ 179.845627][ T8461] __queue_work+0x899/0xaa0 [ 179.850138][ T8461] queue_work_on+0xa9/0x140 [ 179.854655][ T8461] wg_packet_encrypt_worker+0xbf3/0xd70 [ 179.860229][ T8461] process_scheduled_works+0x4f0/0x9c0 [ 179.865893][ T8461] worker_thread+0x58a/0x780 [ 179.870572][ T8461] kthread+0x22a/0x280 [ 179.874911][ T8461] ret_from_fork+0x146/0x330 [ 179.879531][ T8461] ret_from_fork_asm+0x1a/0x30 [ 179.884453][ T8461] [ 179.886867][ T8461] value changed: 0x00000000 -> 0x00000001 [ 179.892668][ T8461] [ 179.894990][ T8461] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 179.901145][ T8461] CPU: 0 UID: 0 PID: 8461 Comm: kworker/0:14 Tainted: G W syzkaller #0 PREEMPT(full) [ 179.912427][ T8461] Tainted: [W]=WARN [ 179.916422][ T8461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 179.926821][ T8461] Workqueue: wg-crypt-wg1 wg_packet_encrypt_worker [ 179.933414][ T8461] ================================================================== [ 180.252352][ T5558] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.300937][ T5558] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.371520][ T5558] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.431498][ T5558] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.631872][ T5558] bond3 (unregistering): (slave bridge1): Releasing active interface [ 180.772039][ T5558] bond0 (unregistering): Released all slaves [ 180.779414][ T5558] bond1 (unregistering): Released all slaves [ 180.787858][ T5558] bond2 (unregistering): Released all slaves [ 180.796344][ T5558] bond3 (unregistering): Released all slaves [ 180.804908][ T5558] bond4 (unregistering): Released all slaves [ 180.836397][ T5558] hsr_slave_0: left promiscuous mode [ 180.842864][ T5558] hsr_slave_1: left promiscuous mode [ 181.183468][ T5558] IPVS: stop unused estimator thread 0... [ 181.232618][ T5558] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.272224][ T5558] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.313435][ T5558] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.362313][ T5558] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.445580][ T5558] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.456969][ T3039] 8021q: adding VLAN 0 to HW filter on device eth1 [ 181.472063][ T5558] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.541983][ T5558] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.571183][ T3039] 8021q: adding VLAN 0 to HW filter on device eth2 [ 181.592427][ T5558] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.683115][ T5558] bridge_slave_1: left allmulticast mode [ 181.689000][ T5558] bridge_slave_1: left promiscuous mode [ 181.694804][ T5558] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.702774][ T5558] bridge_slave_0: left allmulticast mode [ 181.708560][ T5558] bridge_slave_0: left promiscuous mode [ 181.714723][ T5558] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.723694][ T5558] bridge_slave_1: left allmulticast mode [ 181.729379][ T5558] bridge_slave_1: left promiscuous mode [ 181.735935][ T5558] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.744313][ T5558] bridge_slave_0: left allmulticast mode [ 181.750089][ T5558] bridge_slave_0: left promiscuous mode [ 181.756037][ T5558] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.864179][ T5558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.874777][ T5558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.884607][ T5558] bond0 (unregistering): Released all slaves [ 181.942324][ T3039] 8021q: adding VLAN 0 to HW filter on device eth3 [ 181.987649][ T5558] hsr_slave_0: left promiscuous mode [ 181.993625][ T5558] hsr_slave_1: left promiscuous mode [ 181.999844][ T5558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.008064][ T5558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.016107][ T5558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.024198][ T5558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.033801][ T5558] hsr_slave_0: left promiscuous mode [ 182.039804][ T5558] hsr_slave_1: left promiscuous mode [ 182.045838][ T5558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.053430][ T5558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.061667][ T5558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.069203][ T5558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.085302][ T5558] veth1_macvtap: left promiscuous mode [ 182.091022][ T5558] veth0_macvtap: left promiscuous mode [ 182.096812][ T5558] veth1_vlan: left promiscuous mode [ 182.102436][ T5558] veth0_vlan: left promiscuous mode [ 182.108409][ T5558] veth1_macvtap: left promiscuous mode [ 182.114035][ T5558] veth0_macvtap: left promiscuous mode [ 182.119548][ T5558] veth1_vlan: left promiscuous mode [ 182.124841][ T5558] veth0_vlan: left promiscuous mode [ 182.215011][ T5558] team0 (unregistering): Port device team_slave_1 removed [ 182.225328][ T5558] team0 (unregistering): Port device team_slave_0 removed [ 182.309892][ T3039] 8021q: adding VLAN 0 to HW filter on device eth4 [ 182.413214][ T3039] 8021q: adding VLAN 0 to HW filter on device eth17 [ 182.516794][ T3039] 8021q: adding VLAN 0 to HW filter on device eth18 [ 182.621215][ T3039] 8021q: adding VLAN 0 to HW filter on device eth19 [ 182.685810][ T5558] IPVS: stop unused estimator thread 0... [ 182.729996][ T3039] 8021q: adding VLAN 0 to HW filter on device eth20 [ 182.839489][ T3039] 8021q: adding VLAN 0 to HW filter on device eth21 [ 182.908542][ T5558] bridge_slave_1: left allmulticast mode [ 182.914708][ T5558] bridge_slave_1: left promiscuous mode [ 182.921521][ T5558] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.929534][ T5558] bridge_slave_0: left allmulticast mode [ 182.935724][ T5558] bridge_slave_0: left promiscuous mode [ 182.941813][ T5558] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.022639][ T5558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.032474][ T5558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.042390][ T5558] bond0 (unregistering): Released all slaves [ 183.050125][ T3039] 8021q: adding VLAN 0 to HW filter on device eth22 [ 183.075097][ T5558] hsr_slave_0: left promiscuous mode [ 183.080964][ T5558] hsr_slave_1: left promiscuous mode [ 183.086805][ T5558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.094726][ T5558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.137036][ T5558] team0 (unregistering): Port device team_slave_1 removed [ 183.147060][ T5558] team0 (unregistering): Port device team_slave_0 removed [ 183.187908][ T3039] 8021q: adding VLAN 0 to HW filter on device eth23 [ 183.293630][ T3039] 8021q: adding VLAN 0 to HW filter on device eth24 [ 183.400464][ T3039] 8021q: adding VLAN 0 to HW filter on device eth25 [ 183.504791][ T3039] 8021q: adding VLAN 0 to HW filter on device eth26 [ 183.610240][ T3039] 8021q: adding VLAN 0 to HW filter on device eth27 [ 183.711063][ T3039] 8021q: adding VLAN 0 to HW filter on device eth28