last executing test programs: 1m25.793374201s ago: executing program 2 (id=128): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r2, r1}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) 1m25.769150992s ago: executing program 2 (id=129): syz_emit_ethernet(0x7e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004500007000000000080190780a010102ac1414aa0b009078032c0000450000000000000000890000e0"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x100}, 0x0) 1m25.711028873s ago: executing program 2 (id=131): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') readv(r2, &(0x7f0000000580)=[{&(0x7f0000000680)=""/188, 0xbc}], 0x1) 1m25.365337242s ago: executing program 2 (id=135): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x1, 0x504, &(0x7f0000002580)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000e00)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x6200, 0x0, 0x0, 0x18, 0xd, "ef359f415eb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e60600000005b9aafab4af903018e2f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x4]}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000080)='$', 0x1, 0x0, 0x0, 0x0, r2}]) 1m24.99637127s ago: executing program 2 (id=139): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'wlc\x00', 0x1, 0x80002, 0x64}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m24.729218888s ago: executing program 2 (id=142): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "ec094e471cc80f218dbc1c56a936a7e3971a8c35c47e580400", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1m24.673285838s ago: executing program 32 (id=142): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "ec094e471cc80f218dbc1c56a936a7e3971a8c35c47e580400", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1m21.505870414s ago: executing program 1 (id=175): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m21.25812109s ago: executing program 1 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r1 = dup(r0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) 1m20.385879951s ago: executing program 1 (id=188): socketpair(0x1, 0x20000000000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89b0, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) 1m20.250394435s ago: executing program 1 (id=189): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x1, 0x504, &(0x7f0000002580)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000e00)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x6200, 0x0, 0x0, 0x18, 0xd, "ef359f415eb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e60600000005b9aafab4af903018e2f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x4]}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000080)='$', 0x1, 0x0, 0x0, 0x0, r2}]) 1m19.715230068s ago: executing program 1 (id=196): socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 1m19.338519186s ago: executing program 1 (id=202): r0 = syz_open_procfs(0x0, 0x0) accept$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001940)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0, 0x3}, 0x80, 0x10000, 0x0, 0x8, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m19.326057676s ago: executing program 33 (id=202): r0 = syz_open_procfs(0x0, 0x0) accept$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001940)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0, 0x3}, 0x80, 0x10000, 0x0, 0x8, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m6.272964669s ago: executing program 5 (id=414): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000008c0)={[{@usrquota}, {@nolazytime}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@errors_remount}]}, 0x7, 0x605, &(0x7f00000001c0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r0, 0x0, 0x2000c801) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m5.492308317s ago: executing program 5 (id=419): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x1}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x6889, 0x1f280, 0x1, 0x399}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000713000/0x3000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffff78}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e00001001000000f0ffffff0400000034000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32, @ANYRES32, @ANYBLOB="0300000001000000040000000e"], 0x50) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1e, 0x0, 0x0) 1m5.37578453s ago: executing program 4 (id=420): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m5.197856934s ago: executing program 5 (id=421): mkdirat(0xffffffffffffff9c, 0x0, 0x80) r0 = socket(0x40000000015, 0x5, 0x0) unshare(0x22020600) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 1m4.686455947s ago: executing program 5 (id=423): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000001080)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') 1m4.654645437s ago: executing program 5 (id=426): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) 1m4.5462847s ago: executing program 4 (id=429): r0 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r0, 0x402, 0x8000003b) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000034) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x40000029) close(r2) 1m4.459665052s ago: executing program 4 (id=432): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000001c0012800b0001006272696467650000"], 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0xe, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @broadcast}, 0x14) 1m4.453290412s ago: executing program 5 (id=433): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000020000000c"], 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="1f41a57a87e9fe81be4bf1ba98a09c0374b1c8bc1c502cdcf71bcea72e85388275cda5dd04b4879e8569d4fc9722cd14a07feb4e9eba0825004e8ace4de5fe4233bf877d4c06fd6d1e86dc85139a2beb6baa1be4d0771e6a82e6f00e9c9e5dd05c6515574f3a18a3510e6d2bfe295ff53023f5787dfcdbf0a3dedf81cfd8bc0261a5e366aa34970921171acccf641d7122958610e4897343", 0x98}], 0x1}}], 0x1, 0x4044010) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0x80, 0x2}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1m4.398960144s ago: executing program 34 (id=433): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000020000000c"], 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="1f41a57a87e9fe81be4bf1ba98a09c0374b1c8bc1c502cdcf71bcea72e85388275cda5dd04b4879e8569d4fc9722cd14a07feb4e9eba0825004e8ace4de5fe4233bf877d4c06fd6d1e86dc85139a2beb6baa1be4d0771e6a82e6f00e9c9e5dd05c6515574f3a18a3510e6d2bfe295ff53023f5787dfcdbf0a3dedf81cfd8bc0261a5e366aa34970921171acccf641d7122958610e4897343", 0x98}], 0x1}}], 0x1, 0x4044010) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0x80, 0x2}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1m4.334233595s ago: executing program 4 (id=435): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f0000001880)='./file0/../file0\x00', 0x9) 1m4.281019217s ago: executing program 4 (id=436): timer_create(0x9, &(0x7f0000002c00)={0x0, 0x25, 0x1}, &(0x7f0000002c40)=0x0) timer_settime(r0, 0x0, &(0x7f00000000c0), &(0x7f00000001c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x18}}, 0x4000000) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@private, @in6=@private1}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000003c0)=0xe8) 1m4.050372182s ago: executing program 4 (id=439): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="2fee", 0x2}], 0x1, 0x0, 0x0, 0x40010}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m4.047937742s ago: executing program 35 (id=439): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="2fee", 0x2}], 0x1, 0x0, 0x0, 0x40010}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m0.897715617s ago: executing program 6 (id=477): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000080)={0x0, 0x2710}, 0x10) write(r0, &(0x7f0000000000)='\"', 0x1) 1m0.80872338s ago: executing program 6 (id=479): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) 1m0.730298782s ago: executing program 6 (id=480): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$eJzs3MFrHFUcB/BftqlZU5tErdX2oA+9eBqaHDwJEiQFyYJSG6EVhCmZ6JJxN2SWwIoYe/Lq0b9BPHpTxH8gV/8Cb7mIpxzEEXZSk60NmlqyRT+fy/zIb76Z99hl4S3v7f7rX368uVFlG/kgWlNT0dqKSAcpUrTinhdXm+ut26vLnc7KjZSuL99cfC2lNPfSD+9/+s3LPw4uvPft3Hczsbfwwf4vSz/vXd67sv/7zY+6VepWqdcfpDzd6fcH+Z2ySOvdajNL6Z2yyKsidXtVsT3W3yj7W1vDlPfWL85ubRdVlfLeMG0WwzTop8H2MOUf5t1eyrIsXZwNTnT+729Z+/qgrr+PqOvz8UTUdV0/GbMxFU/FxZiLzyPi6Xgmno1L8Vxcjufjhbgyuusshg8AAAAAAAAAAAAAAAAAAAD/Hwej0/zj5/8vHJ7/n48F5/8BAAAAAAAAAAAAAAAAAADgDLx76/bqcqezciOldkT5xc7azlpzbfrLG9GNMoq4FvPxW4xO/zea+vpbnZVraeRcROwe5nd31s6N5xdHPydwmJ8e9e7lF5t8irvlsfxMzDb5dkQUsRTzcenY89tH+aUH5tvx6ivHnp/FfL0b0Y8y1kfPPsp/tpjSm2937stfHd0HAAAA/wVZ+tPC+Pq3Wb9n2Un9Jn+K7wfuW19Px9Xpyc6diGr4yWZelsX2eNH+y18mVsw8HsM4TdH6N/GZOLHVGmt99VPEpGf6WBTtw/fyo/iHU5OfzkMUdx/J3MeLCX8wcSaOXvRJjwQAAAAAAAAAAIDT+Cf7AX+Nh95FOB0P2Fn2xmSmCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MEOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAoQIAAP//uXHE5A==") getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r1, 0x0, 0x1002, 0x9) write$UHID_INPUT(r1, &(0x7f0000001440)={0x8, {"715b1a6a9fca300288d0d6f164694e9be52056879d4f7f9e17a2f387a1e887ad9fea8a741f3a85292a8ca98e1512418fbd5b5beafe58966442a9c6d52bdef586966362501755a16514ded809c856f4e58261695dbfb4d87cd5d13b78c6cf696afecb55cca3e7607479bc2ceded20d446347481aa05e3083992814f23f6ba955daa8c5988fcc3e1f4a1657a94b74a6161fb233fa5146129889ae615315f974fd1e2c6db572e40a4ec1325c81eff25243f2fbe74fc9cc389297c04d98213ca54c33fe33622c7ebe8f6e9712c07be77c43bddb575411faf61123d450d3c608e581d9d1fd5562abd932bbdf70ff573330754d8f2a3c38906aefc04f438f74482b6e4ec9501b6b43d08d910bda4fc230cfbdc06b2447775f53c6aa87b73a284167aee5e05fc8d867afd4b6b8c3ec81a23be5df245d8e21aa8a630de4b680f34fee2af9de02aeaf31aa7d15edbee78a2a7a621305217678c619a19d41e927e798df495ff28a6485e978bb29cf5f82e31ee8e142134e0845f5c1eaa9664c7dbbfcfcd9dc0567fd447f25de86bea1c28e8a9973e3d5f00e74d022f2b9a97ff08f404af3911f7f086643bfd9004c2500b1684e73c885374cb382bcb37fc82a31c79991b2547fbbba3c005b4d88825488599a8cf0cdaebb4d137232516c9f897d72d034a5b69d03be18c0a0958495e3c0f9b7b31f7684236be8772de10aef1446909f13fb49b4516d00f889efe72769585f4e1ffaa5fc9c0dbfa7b05efbaa14a3e240cf7603c6a487f4155f92bc22c262f496e2f30eef1b95cf28235c0273f295a136f122539ceccb412f7c08a019efb4c270a417db7deb6973a6d0370df72d12456b2d2187c4abdb632bc6323eaaa10f6e8c829d9b556b04498de35a355907c9a17b99b2effaca8ffbfe486493740f3dded005e8bf91b417e2cde579f9232c04807dd2f2da29faf183dee67430972a0c85ee9e9319a7b55b03b3db7d2623f3b16da80eee507de1f18b298a045f32970903d4ee04f99c8a6c086c93f465ad8493f3f2e0579993374b1941818c67c448c4e218e64467ea9755042b593a33f5f909ba7eb4c14be439964ff2c5ff2367710438f2d306e721042b39499b21b034cf9a95048a43e8d96eb88c7e372ee61e7a909b6e947d416b2ac672fa3683771cf6986bda28ccd50c448e31985adf2b836349d8e1ac3ea17dd9256bac1f3c47f39953fceddef2e12b9956ad44347142d836ef531528fd9cbc0c132ac6e270c9f5e4d950d62b788dfb1e337be9629a02f945897bdd5168d73d78ec3a7651465949f5027dcd0affb6b24063499d4afb57b80aa62efaefe607fb9073c79d7083c629bf11a56527fe85a41c3b347c7ef54c85a6e6d046994101ae7627e74d14337a9bb042f5f0aeca0a6199dedb3e4b1aa30760131e8d76d43d9991ac1b3c443b25d7c4c8153d1c7763e6f2fda8c404697668f6aa61f8e28d568320ed190ca635c74d9948adcaa53776a2db303b848723b414bd192511f557f2a426822acecfa3ce6f9bfd60c0144b1a55294387238fbb196addf0502ee9af4108682d056f8965ce4fca03d8ecdcf5f302eaea2de59bf663b15bf8a20ce874ff7d3958fe6da3301b678c2930129b3cb4413400388a59ae939c58d96043d93a57a980ed6b9f35751e059ef6c06cffa4f5c3f8ba1ba67f0160390ec77311e4e67d921bb40a29d448f274da50115c2c67baa3d6f39f9ddfaf3e67392d9e3802c353f0b855c927d6a45e445f58526a09793bcc2e72163fb1b7a779d99f230bd95e5bce797cacb0b8343dcf1be080f18040fe288b157b01b074d25fe44ab6b3c0362f1931f6b174412a8d6a2a645270e7430b3884ac16930105786e469d1d8bcf9ed4010ee3accf78ecc138a8b11c15798eeb29ef4fc3bc5b376807348e1647148c35a1aa3d7ed05dc3a11274887f04f035837a9ea81fcb5eaccd4f43f2f6bbf3c426f72e1423c9175c2b234be0fd3c40c15e5e35c5c7359c894e95f82797c48fdca7ef07a6fa6f0dd0bb9a24c4aa9050000000000005c67e60f8814f67d86caba122def954662ae2c6f4f99cfbb55214c61216e8c8f84e9b172129642d754a49c923c6c6f1ba820e99a513308a03c9a080be7224244f2bc1d99d93ddcb25a3d2e0a6b4b868f877760b019c8c475c3e0b90109c21c309e7bc0ffc48753aeb70e7884c8eac52b2fb8576ae917199bfeea255da4b54667320798db03440fabaebb1e8e181506bf93ac67ba128a14c9dcc45d9f07ddfea21e7da2bf4215bc73e82e9a7187cd5fa7c17f7710f2cdf59bb22ce786328af52f17349c42ca7bce681619246b8b467b7b4c60125ea5687e1cd9bf36a67023759a8baeccb60e84c7102f284436584d0508486d96af8ea8358f7ac1f9a21c1229eda8a1a273b999a74f39d3851b6aec92d120f2c4ca0b2852844b5529eb40db91749f221568850f23f089dd704434b6fe736ab7eb67ebd52943000770e0a57c6ff7c1420a225fdeca0cddcf4083a3f5f9fb37490dfdf2c8aae282558c8a4af6ec41f7788d6340053ff69311489323c403becde20ae84c6a8968717e8923c13723be082aab3edd7cf0fd1b2a1f64692911d9e49c4d7d20f8c9364c454fdb51ff376abbae26df57ab7d458772a919879ea7caada2c17fb0011ecc8ced3d7dfa39250fc3c8cc9d0f377860d8b58fd81952f50d732adc73e470c1f5778a49d7f3d507e5ab5cb798420f3a56d9d3ad76b75e5d41921a7ae04099968867c816f6d44c4a41cefbe31623d6899a00c28454bdc0ea17f284dcb39a0221989e3c2bbcc5556e8f870bbf98be4b57be438797995d221ecd0515e4c89c431ff7b595f35527911371cc324cd4c76d4ea68cfdd1eed120ec16e89e4ec4c5ac28039de8b3aa451e1e55631d599612e94630ad3d67ba79e03c4ff023e8ddfd10c09517df736a01af5488a87f551c7e8e41dd0d0d10c58f3053cbdef2c4fd72e51c2d9724360687ab6d0395023626bbfcab24737a50bb27d78ebfe11b5e40a71b2141254074b3dca3cf45456ea1860704b0d5da04710667bf6454c81b33b5b429d2764afd13338d60b928140c05e0b7f41c6fb19b911216ca2357d8171b3673b454b5017bbf34dabdf5fd0d7fb602399ec434f40bc0450cd6e418713c68b349b7deb3ef014b8ec7a62f686b37b1c3a8b60340d0bbf09a6965013c68317d7a2e07bcd3bcaa7cd2cbf34d64534e1ff9cb4ba32d9a5cde63e2da7dfdfcc86886a0ee01fa0d95b78a12085d6dfb62d622041e97d8f03f4727e865be656d9286d628a8950b55dc71058b6dec200049738824a8200023be3f93e740f2a8d241e57deeb642ff28140ee91424db3cf2fafdd8a7d9fc80a7a54da30029ef65df2e7900059ab1141985376e7f9f46e712b4536ed49778e0629d284f56eef0906d21536427333d8a7d6d7e74591031a526eea16a627c5d9f399ec4628a26d9812b68b501716b602564504ab8f16e76a19c608ac550fa52fb80af1e81b48abf13c9996cf47f34d8e943b7d48de31c0d5d794af157c16209d3c0632c2801ab17f05de2c2fb9b9b8c0a257c18a832ac743c9341042af1e56619154fc4f7b20c8de3edbb1636f0a098ed6f6858c27905b00798fd8bedda5eaeeb12ff19943dad0a7f069a9e01dfc9730568784a07c0a6b01623b11a1e6f86cab4d95bf256cd28b00c17b5df66dd4c393471f0f18c68aeae404f5f3fb66bbfd62f1511b35caddad004408fe3b182edf81ad50ac3a639121236968c6be1ba7f7bee6409a91f4c7caf077c2a94c6d8d547cc680a1d7e6cd57c328f6e21312ab76491565c5f4271cbf64ed2be12d770e927cba3cfa0fb89452285a69fe205bc9943eee4466ca8f9998997e2c1a1fe782c9e2241c51dc008bb8f6fe9a49edefae6f43d3e0cd207439745dfd4c347058a4ec3c3bbd56f3108b9a034600f78dc5c889621a6b78e2f7256034d53ae7877de459b6895d5849eb4a8099a62a4bd50d5b4d48cf82fae64985e1e22435fe5d5a4b9119eed5d8ee03a6d1675b7b75d47b8e20a44c05812b36cc2e31947a02c48262c5a875e562dbd4a1a8d045a37afabb28079d3904f53d466e5abab09b8e5e0a56dbae4c4cd9bc6640b47cc6616b2e7cf19c6e9591d32ab0cf87880c81d63948a508ad0cbd50e348d399daf51efb2b96ef9d56a8ba89d04bf5e7d4f7353f71d1a6cb78da6644574664d08e848cf97bab16d6acf70f0e8a06dad5c741cb5eb483f809c4c35307595f00d00bf6a1474aef94cfc913d08c612387172aabc802c17753c6ccd752eaa81e7eefd61c037f958e23bcb9c1510ea47bcaefa72f070809de9f79faede74c87231411b17b353382974bcd334cf983c85ad9e1844cdbd9181a5bb976c35b6a638ae8dd20119858f8c525d735779b2f8e244ed2fc0d900445fe1fe775b4bcb1d2e8d456fd6234ddfcad7fe7abf716d9f4b4a6ee83be812cdda17ec43a895a5c03e5359cce3de61d9736f8a4d66051891b1431f2e61a324f252bd0e9b32e23bd31a5405642bbd2cdc5d3e45b56530568f05a72d475a7d3505b26d9fcdaeb30a62ddf09bcd9e59c1f34e375149782b8019a7a9883fd93397acb338af428f1e015a671b5c11651d3c0168f747fdc6e1fb084bdcbd760adce881492b2bbb76c0a1327e76c9c7ce0afff2f80ec30f2be04d9f93a9b291cc01bcc03f7b67e16a7f1bcc838aab9240df99691a2781da614fdcecf5115382e1357460f4b8e3a577d3ae922379eadc2416d40028c785905bb43a41f5fb7189a8704b8e492c86bd82d0560f81796693e74f08739b632e5226d3c3a963caf5db455ac20288d472611e7dc243531fd66718e94daa2bf93a30a38e6a497a50f2472a72bf9c4689e54105c44cd074bb87e087735791b436d6553c5f2b61ff75dc64ba597b77f7ea42a0ec14dc08107e7bbe97ae519beb5e18a8859493afd097d4609a3a2025fe9603b85f2b1350336d92e15d0bdea3a42bb8775ff2b38babf2ec27e77452c93a05a798ec789a6a012047481ea8e1a8dfc77a9f0f6ddebb9f3503702b147f663f01f70cdfc29afe0cfd7823823fa2e139ea7d1a010a67bb3a31e620aff5cbe1a99ac3cd0f91c472dd021213edf5a9225941b575e27f99c0cb94eb9598a443ec7665335305895ebc28e3f8d34adf6aa37084f823d293ba9dcb2f73d88457d0a55c9202dd309a9b36daa4e50c8f9c93ec7644a7a730b6b947f0f2381a34d67bce50e790a7655a34a2f70723f360af014befa4fd3dbbb8bc2f1461eb48b987a8b772b3ad31a1077c59ef45e4b2870739454ef56402115ab427527e67b6a6a97b2bb3d7a2c13d2a55d1032a64b83efc13939589e46abd78bcc493529cf38581fe3160b2c6eb5a9ac6cee0b05618e51450af077fba0dc943089f112e67a2c654ad94157e95295219d0bbab3a02a2c9ec08ce9d904a703760dc41a7943d52561aeb5519e82d0d390365cfd796434c3decf733d8f09789af0b990f4f9b791cf0d677f34d85fc2b3583b21737955cbaa098963bfa39755f335329f265db75c5d406a0a91ed76563a3ed5f3d2877c2b4b81dc1eaccde6d642c0d8791482e27c64103fc87a55ae91e7adf49ddc1dace5c3108d6a496d678ec5ba09b2a9e6990cb63ac3e4b787661800d11c73da87bf5d297c1fb531aa105d30464b0e023e4212a0d4a0ac119c1568280d49d084729e680a0f453a725ed08454fa874cf22f5718e2afd995a1d7acbe92e0a49307f1b322367dc12b3673708024a85fcc643bd00", 0x1000}}, 0x1006) 1m0.429310869s ago: executing program 6 (id=482): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 1m0.240668863s ago: executing program 6 (id=485): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x6, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r2, 0x3, 0x6, @local}, 0x10) close(r0) 59.95840644s ago: executing program 6 (id=486): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0x7f) vmsplice(r1, &(0x7f0000000900)=[{&(0x7f0000000680)="f802f9a32485a6870d76f1602da04126b3989aef5bb2caf3fc0502b9cfbbf1de", 0x20}], 0x1, 0x2) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 59.95831489s ago: executing program 36 (id=486): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0x7f) vmsplice(r1, &(0x7f0000000900)=[{&(0x7f0000000680)="f802f9a32485a6870d76f1602da04126b3989aef5bb2caf3fc0502b9cfbbf1de", 0x20}], 0x1, 0x2) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 2.503827889s ago: executing program 7 (id=1341): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.459782501s ago: executing program 7 (id=1343): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2.04243501s ago: executing program 9 (id=1351): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RWRITE(r0, &(0x7f0000000100)={0xb, 0x77, 0x2, 0x4}, 0xff53) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.978085242s ago: executing program 9 (id=1353): setpriority(0x1, 0x1, 0x3ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 1.675153899s ago: executing program 3 (id=1358): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000000000000200000d000000000000000002000000010000000200000000000000000000020000000000"], 0x0, 0x43, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd986c45630002008daa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.543896143s ago: executing program 7 (id=1359): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff7, 0x0, 0xed, 0x6}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x6f4fef9cab2ede47, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) 1.22301488s ago: executing program 0 (id=1360): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000002800000004"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x5, 0x50, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20) 1.20914004s ago: executing program 7 (id=1361): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x2, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7d, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) 1.152120582s ago: executing program 0 (id=1362): setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000001c0)={{}, {0x1, 0x5}, [], {0x4, 0x4}, [], {0x10, 0x2}}, 0x24, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xe}, 0x50) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.128406712s ago: executing program 0 (id=1363): sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x100, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r0, 0x11e, 0x1, &(0x7f0000000080)=0x5, 0x4) listen(r0, 0x8) 1.001074085s ago: executing program 7 (id=1364): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x7}, @window={0x3, 0xfffb, 0x7}, @mss={0x2, 0x8007}, @window={0x3, 0x0, 0xb}, @mss={0x2, 0x2}, @timestamp, @window={0x3, 0xfffe, 0x4000}, @window={0x3, 0xe40, 0x100}], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) 952.650827ms ago: executing program 3 (id=1365): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x3bd5, &(0x7f0000000040)={0x0, 0xc89b, 0xc000, 0x8, 0x2000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x221a, 0x7721, 0x16, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0xe, 0x0) 916.601807ms ago: executing program 0 (id=1366): select(0x0, 0x0, 0x0, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x300, 0x100, 0xdc, 0xfffffffffffffff8}, 0x0) io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={[0x4]}, 0x8}) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)=';', 0x1, 0x8080, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 403.20753ms ago: executing program 9 (id=1370): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2b, 0x1, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x40) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1000000}}], 0x14, 0x0, 0x0) 403.0963ms ago: executing program 3 (id=1371): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x8}) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x4f, 0x0, 0x0, 0x2000000000000}, 0x0, &(0x7f0000000240)={0x1c, 0x0, 0x0, 0x3, 0x10000, 0x5, 0x5}, 0x0, 0x0) 402.92613ms ago: executing program 8 (id=1372): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8}, 0x8}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002440)={{r0}, &(0x7f00000023c0), &(0x7f0000002400)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 373.37873ms ago: executing program 8 (id=1373): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 357.519881ms ago: executing program 3 (id=1374): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000200)={[{@grpid}, {}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nodelalloc}, {@minixdf}, {@init_itable}]}, 0x0, 0xbaf, &(0x7f00000017c0)="$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") r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r2 = dup(r1) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x204818, &(0x7f0000000080)={[{@map_off}, {@check_strict}, {@hide}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@unhide}, {@unhide}, {@map_acorn}, {@dmode={'dmode', 0x3d, 0x8}}]}, 0x1, 0x552, &(0x7f0000000580)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000900)) 310.902522ms ago: executing program 8 (id=1375): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 294.910802ms ago: executing program 8 (id=1376): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r1], 0xfe33) 256.936913ms ago: executing program 9 (id=1377): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x81, 0x9, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0)=r3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 255.502943ms ago: executing program 3 (id=1378): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='clear_refs\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 218.737384ms ago: executing program 3 (id=1379): ioperm(0x3, 0x1, 0xfffffffffffffe01) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1) 218.274624ms ago: executing program 8 (id=1380): socket(0x10, 0x803, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x0, 0x0, 0x100000}) r2 = syz_open_procfs(r1, &(0x7f0000000140)='io\x00') pread64(r2, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009) 198.083595ms ago: executing program 9 (id=1381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 190.932255ms ago: executing program 8 (id=1382): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0x8, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x354}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 162.529825ms ago: executing program 9 (id=1383): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$9p(r1, &(0x7f0000000280)="d5dcfb", 0x3) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) 140.345446ms ago: executing program 7 (id=1384): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 60.381208ms ago: executing program 0 (id=1385): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x58eb, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x101ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffb}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='+'], 0x50) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) 0s ago: executing program 0 (id=1386): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x4000000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r1], 0x28}}, 0x0) kernel console output (not intermixed with test programs): [ 51.261802][ T3434] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 51.293956][ T3434] EXT4-fs (loop0): This should not happen!! Data will be lost [ 51.293956][ T3434] [ 51.303809][ T4076] loop1: detected capacity change from 512 to 49 [ 51.311683][ T4090] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #18: comm syz.1.189: corrupted xattr block 52: invalid header [ 51.333648][ T3298] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 51.356967][ T4090] EXT4-fs error (device loop1): ext4_write_dquot:7021: comm syz.1.189: Failed to commit dquot type 1 [ 51.371925][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 51.375753][ T4090] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Out of memory [ 51.392068][ T4090] EXT4-fs error (device loop1): ext4_ext_truncate:4557: inode #18: comm syz.1.189: mark_inode_dirty error [ 51.437635][ T3887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.452840][ T4090] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Out of memory [ 51.474467][ T4090] EXT4-fs error (device loop1): ext4_truncate:4691: inode #18: comm syz.1.189: mark_inode_dirty error [ 51.610689][ T3305] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 4: comm syz-executor: path /27/file0: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 51.666345][ T3305] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Out of memory [ 51.688296][ T3305] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #2: comm syz-executor: mark_inode_dirty error [ 51.705891][ T3887] veth0_vlan: entered promiscuous mode [ 51.716645][ T3887] veth1_vlan: entered promiscuous mode [ 51.735613][ T3887] veth0_macvtap: entered promiscuous mode [ 51.747673][ T3887] veth1_macvtap: entered promiscuous mode [ 51.762248][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.785531][ T4126] loop2: detected capacity change from 0 to 7 [ 51.793005][ T3887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.843768][ T4128] netlink: 'syz.0.200': attribute type 4 has an invalid length. [ 51.851208][ T3887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.881945][ T68] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.890942][ T68] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.903365][ T4128] netlink: 'syz.0.200': attribute type 4 has an invalid length. [ 51.915312][ T68] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.924782][ T68] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.992564][ T313] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.084975][ T313] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.172247][ T313] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.224174][ T313] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.336270][ T313] bridge_slave_1: left allmulticast mode [ 52.342580][ T313] bridge_slave_1: left promiscuous mode [ 52.348752][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.364811][ T313] bridge_slave_0: left allmulticast mode [ 52.376138][ T313] bridge_slave_0: left promiscuous mode [ 52.383301][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.452934][ T313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.466449][ T313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.482098][ T313] bond0 (unregistering): Released all slaves [ 52.560137][ T313] hsr_slave_0: left promiscuous mode [ 52.572885][ T313] hsr_slave_1: left promiscuous mode [ 52.590989][ T313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.615087][ T313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.634311][ T313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.656441][ T313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.685823][ T313] veth1_macvtap: left promiscuous mode [ 52.701856][ T313] veth0_macvtap: left promiscuous mode [ 52.713803][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 52.713818][ T28] audit: type=1400 audit(3931689614.071:324): avc: denied { write } for pid=4157 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.761336][ T313] veth1_vlan: left promiscuous mode [ 52.769556][ T313] veth0_vlan: left promiscuous mode [ 52.802876][ T28] audit: type=1400 audit(3931689614.161:325): avc: denied { write } for pid=4168 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.946597][ T4171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.207'. [ 52.972832][ T313] team0 (unregistering): Port device team_slave_1 removed [ 52.986509][ T313] team0 (unregistering): Port device team_slave_0 removed [ 53.009247][ T4174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.207'. [ 53.109963][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 53.338388][ T4137] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.345613][ T4137] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.352982][ T4137] bridge_slave_0: entered allmulticast mode [ 53.359895][ T4137] bridge_slave_0: entered promiscuous mode [ 53.369403][ T4137] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.381079][ T4137] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.388351][ T4137] bridge_slave_1: entered allmulticast mode [ 53.394994][ T4137] bridge_slave_1: entered promiscuous mode [ 53.441441][ T28] audit: type=1326 audit(3931689614.791:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.3.216" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6f568de59 code=0x0 [ 53.445196][ T4208] gre1: entered promiscuous mode [ 53.553995][ T4137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.580177][ T28] audit: type=1400 audit(3931689614.931:327): avc: denied { write } for pid=4193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.595666][ T4137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.661080][ T28] audit: type=1400 audit(3931689615.011:328): avc: denied { write } for pid=4221 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.666523][ T4223] loop4: detected capacity change from 0 to 512 [ 53.700235][ T4137] team0: Port device team_slave_0 added [ 53.717374][ T4137] team0: Port device team_slave_1 added [ 53.730534][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 53.737869][ T28] audit: type=1400 audit(3931689615.051:329): avc: denied { mount } for pid=4224 comm="syz.0.220" name="/" dev="ramfs" ino=7142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 53.784488][ T4137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.792543][ T4223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.806191][ T4223] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.816974][ T4137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.847291][ T28] audit: type=1400 audit(3931689615.201:330): avc: denied { write } for pid=4222 comm="syz.4.219" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.861756][ T4137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.880003][ T28] audit: type=1400 audit(3931689615.201:331): avc: denied { add_name } for pid=4222 comm="syz.4.219" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.903178][ T4137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.910236][ T4137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.926672][ T3297] EXT4-fs error (device loop4): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 53.936419][ T28] audit: type=1400 audit(3931689615.271:332): avc: denied { write } for pid=3297 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.968765][ T4137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.979455][ T3297] EXT4-fs (loop4): Remounting filesystem read-only [ 53.988479][ T28] audit: type=1400 audit(3931689615.271:333): avc: denied { remove_name } for pid=3297 comm="syz-executor" name=6C6F73742B0F6F756E64 dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.012796][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.030166][ T364] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 54.043959][ T364] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 54.078550][ T4137] hsr_slave_0: entered promiscuous mode [ 54.086601][ T4137] hsr_slave_1: entered promiscuous mode [ 54.106633][ T4137] debugfs: 'hsr0' already exists in 'hsr' [ 54.120134][ T4137] Cannot create hsr debugfs directory [ 54.305819][ T4248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 54.450638][ T4137] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 54.454145][ T4270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.231'. [ 54.484589][ T4137] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.505774][ T4137] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 54.544414][ T4137] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.563255][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 54.591336][ T4137] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 54.612188][ T4137] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.623295][ T4137] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 54.646403][ T4137] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.672898][ T4284] netlink: 28 bytes leftover after parsing attributes in process `syz.5.238'. [ 54.687106][ T4284] netlink: 28 bytes leftover after parsing attributes in process `syz.5.238'. [ 54.709240][ T4284] netlink: 28 bytes leftover after parsing attributes in process `syz.5.238'. [ 54.732852][ T4284] netlink: 28 bytes leftover after parsing attributes in process `syz.5.238'. [ 54.829708][ T4305] loop4: detected capacity change from 0 to 512 [ 54.853316][ T4137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.885818][ T4137] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.893419][ T4305] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.913011][ T4310] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 54.928650][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.935903][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.950652][ T4305] EXT4-fs (loop4): 1 truncate cleaned up [ 54.957002][ T4305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.984715][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.991886][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.097264][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.113441][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 55.165348][ T128] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 55.184214][ T128] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 55.196325][ T4335] loop0: detected capacity change from 0 to 512 [ 55.248174][ T4335] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.341292][ T4137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.396171][ T4335] mmap: syz.0.248 (4335) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.564031][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.593119][ T4137] veth0_vlan: entered promiscuous mode [ 55.602325][ T4137] veth1_vlan: entered promiscuous mode [ 55.653468][ T4137] veth0_macvtap: entered promiscuous mode [ 55.682475][ T4137] veth1_macvtap: entered promiscuous mode [ 55.705923][ T4137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.743565][ T4137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.767237][ T3434] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.777046][ T3434] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.792668][ T3434] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.801944][ T3434] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.958670][ T4391] netlink: 16 bytes leftover after parsing attributes in process `syz.0.259'. [ 56.163625][ T4360] loop3: detected capacity change from 0 to 32768 [ 56.308368][ T4360] loop3: p1 p3 < > [ 56.525093][ T4421] netlink: 'syz.4.271': attribute type 3 has an invalid length. [ 56.587862][ T283] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.598262][ T283] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 56.697068][ T4431] xt_hashlimit: max too large, truncated to 1048576 [ 56.738233][ T4426] loop3: detected capacity change from 0 to 4096 [ 56.743279][ T4431] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 56.757305][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 56.767940][ T4426] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 57.158011][ T4455] loop3: detected capacity change from 0 to 4096 [ 57.208717][ T4455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.398647][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 57.798177][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 57.798194][ T28] audit: type=1400 audit(3931689619.151:381): avc: denied { create } for pid=4491 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 57.873429][ T28] audit: type=1400 audit(3931689619.161:382): avc: denied { bind } for pid=4491 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 57.903781][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.936688][ T4494] loop0: detected capacity change from 0 to 512 [ 57.946256][ T4494] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.980228][ T4494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.004218][ T28] audit: type=1400 audit(3931689619.361:383): avc: denied { create } for pid=4499 comm="syz.5.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.023998][ T28] audit: type=1400 audit(3931689619.371:384): avc: denied { bind } for pid=4499 comm="syz.5.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.034177][ T4494] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.044575][ T28] audit: type=1400 audit(3931689619.371:385): avc: denied { connect } for pid=4499 comm="syz.5.304" laddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.075172][ T28] audit: type=1400 audit(3931689619.381:386): avc: denied { write } for pid=4499 comm="syz.5.304" laddr=172.20.20.187 faddr=172.20.20.170 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.134848][ T28] audit: type=1400 audit(3931689619.491:387): avc: denied { create } for pid=4501 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.168275][ T28] audit: type=1400 audit(3931689619.491:388): avc: denied { ioctl } for pid=4501 comm="syz.3.302" path="socket:[9301]" dev="sockfs" ino=9301 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.204656][ T28] audit: type=1400 audit(3931689619.521:389): avc: denied { write } for pid=4493 comm="syz.0.301" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.231918][ T28] audit: type=1400 audit(3931689619.531:390): avc: denied { write } for pid=4493 comm="syz.0.301" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.257470][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.332002][ T4511] loop0: detected capacity change from 0 to 512 [ 58.341208][ T4511] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.353809][ T4511] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 58.370031][ T4511] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 58.388969][ T4511] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 58.397351][ T4511] System zones: 0-2, 18-18, 34-35 [ 58.403636][ T4511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.416735][ T4511] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.761782][ T4542] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 58.945304][ T4548] loop5: detected capacity change from 0 to 128 [ 58.955836][ T4548] msdos filesystem being mounted at /30/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 58.975003][ T4548] syz.5.322: attempt to access beyond end of device [ 58.975003][ T4548] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 58.988998][ T4548] syz.5.322: attempt to access beyond end of device [ 58.988998][ T4548] loop5: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 59.003990][ T4548] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 59.012672][ T4548] syz.5.322: attempt to access beyond end of device [ 59.012672][ T4548] loop5: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 59.026557][ T4548] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 59.036912][ T4548] syz.5.322: attempt to access beyond end of device [ 59.036912][ T4548] loop5: rw=524288, sector=154, nr_sectors = 8 limit=128 [ 59.050984][ T4548] syz.5.322: attempt to access beyond end of device [ 59.050984][ T4548] loop5: rw=0, sector=154, nr_sectors = 8 limit=128 [ 59.064382][ T4548] syz.5.322: attempt to access beyond end of device [ 59.064382][ T4548] loop5: rw=0, sector=154, nr_sectors = 8 limit=128 [ 59.077787][ T4548] syz.5.322: attempt to access beyond end of device [ 59.077787][ T4548] loop5: rw=0, sector=154, nr_sectors = 8 limit=128 [ 59.091417][ T4548] syz.5.322: attempt to access beyond end of device [ 59.091417][ T4548] loop5: rw=0, sector=154, nr_sectors = 8 limit=128 [ 59.104854][ T4548] syz.5.322: attempt to access beyond end of device [ 59.104854][ T4548] loop5: rw=0, sector=154, nr_sectors = 8 limit=128 [ 59.118395][ T4548] syz.5.322: attempt to access beyond end of device [ 59.118395][ T4548] loop5: rw=0, sector=154, nr_sectors = 8 limit=128 [ 59.332365][ T4553] loop3: detected capacity change from 0 to 512 [ 59.398539][ T4553] EXT4-fs (loop3): 1 orphan inode deleted [ 59.410395][ T313] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 1 [ 59.422031][ T313] loop3: lost filesystem error report for type 5 error -117 [ 59.433429][ T3549] Bluetooth: hci0: command 0x1003 tx timeout [ 59.448310][ T3813] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 59.458942][ T4553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.479061][ T4553] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.609548][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.854652][ T68] Bluetooth: hci0: Frame reassembly failed (-84) [ 60.409516][ T4584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.337'. [ 60.422270][ T4584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.337'. [ 60.705853][ T4595] netlink: 'syz.0.340': attribute type 10 has an invalid length. [ 60.830201][ T4600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.862271][ T4600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.902126][ T4605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.342'. [ 61.593071][ T4642] loop6: detected capacity change from 0 to 128 [ 61.695364][ T4642] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.709905][ T4642] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.775121][ T4642] vfat filesystem being mounted at /14/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 61.909882][ T3813] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 62.123236][ T4665] xt_hashlimit: size too large, truncated to 1048576 [ 62.204654][ T4678] xt_hashlimit: max too large, truncated to 1048576 [ 62.289061][ T4685] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 62.845634][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 62.845649][ T28] audit: type=1400 audit(3931689624.201:435): avc: denied { write } for pid=4710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.902267][ T4736] syz_tun: entered allmulticast mode [ 62.929583][ T4734] syz_tun: left allmulticast mode [ 62.937899][ T28] audit: type=1400 audit(3931689624.291:436): avc: denied { write } for pid=4737 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.508576][ T28] audit: type=1400 audit(3931689624.861:437): avc: denied { write } for pid=4770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.577527][ T28] audit: type=1400 audit(3931689624.911:438): avc: denied { append } for pid=4789 comm="syz.4.391" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 63.643123][ T28] audit: type=1400 audit(3931689624.931:439): avc: denied { write } for pid=4791 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.952154][ T28] audit: type=1400 audit(3931689625.311:440): avc: denied { write } for pid=4803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.079957][ T28] audit: type=1400 audit(3931689625.431:441): avc: denied { write } for pid=4868 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.202598][ T4804] loop4: detected capacity change from 0 to 32768 [ 64.245937][ T4804] loop4: p1 p3 < > [ 64.248572][ T28] audit: type=1400 audit(3931689625.601:442): avc: denied { sqpoll } for pid=4872 comm="syz.6.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 64.566202][ T4152] udevd[4152]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 64.576703][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 64.738078][ T4902] GUP no longer grows the stack in syz.6.408 (4902): 200000004000-20000000a000 (200000002000) [ 64.764249][ T4902] CPU: 0 UID: 0 PID: 4902 Comm: syz.6.408 Not tainted syzkaller #0 PREEMPT(lazy) [ 64.764349][ T4902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 64.764390][ T4902] Call Trace: [ 64.764398][ T4902] [ 64.764408][ T4902] __dump_stack+0x1d/0x30 [ 64.764435][ T4902] dump_stack_lvl+0x95/0xd0 [ 64.764537][ T4902] dump_stack+0x15/0x1b [ 64.764567][ T4902] __get_user_pages+0x1b27/0x1f10 [ 64.764692][ T4902] ? __rcu_read_unlock+0x4e/0x70 [ 64.764733][ T4902] get_user_pages_remote+0x1d5/0x6b0 [ 64.764784][ T4902] __access_remote_vm+0x156/0x4d0 [ 64.764844][ T4902] access_remote_vm+0x32/0x40 [ 64.764951][ T4902] proc_pid_cmdline_read+0x334/0x710 [ 64.765003][ T4902] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 64.765057][ T4902] vfs_readv+0x417/0x6d0 [ 64.765124][ T4902] __x64_sys_preadv+0xfd/0x1c0 [ 64.765149][ T4902] x64_sys_call+0x2915/0x3020 [ 64.765176][ T4902] do_syscall_64+0x136/0x3c0 [ 64.765206][ T4902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.765241][ T4902] RIP: 0033:0x7f30e7cbde59 [ 64.765271][ T4902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.765299][ T4902] RSP: 002b:00007f30e6717028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 64.765330][ T4902] RAX: ffffffffffffffda RBX: 00007f30e7f45fa0 RCX: 00007f30e7cbde59 [ 64.765352][ T4902] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 64.765405][ T4902] RBP: 00007f30e7d53e6f R08: 00000000fffffff9 R09: 0000000000000000 [ 64.765426][ T4902] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 64.765445][ T4902] R13: 00007f30e7f46038 R14: 00007f30e7f45fa0 R15: 00007ffe7b24a068 [ 64.765474][ T4902] [ 65.012726][ T28] audit: type=1400 audit(3931689626.371:443): avc: denied { read } for pid=4912 comm="syz.6.412" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.034875][ T4909] loop0: detected capacity change from 0 to 2048 [ 65.096539][ T4909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.156773][ T28] audit: type=1400 audit(3931689626.511:444): avc: denied { write } for pid=4908 comm="syz.0.410" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.157104][ T4906] loop3: detected capacity change from 0 to 8192 [ 65.180511][ T4909] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 65.187047][ T4919] netlink: 'syz.6.413': attribute type 12 has an invalid length. [ 65.233613][ T4909] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 65.246020][ T4909] EXT4-fs (loop0): This should not happen!! Data will be lost [ 65.246020][ T4909] [ 65.256177][ T4909] EXT4-fs (loop0): Total free blocks count 0 [ 65.262331][ T4909] EXT4-fs (loop0): Free/Dirty block details [ 65.265080][ T4906] loop3: p2 p3 [ 65.268596][ T4909] EXT4-fs (loop0): free_blocks=4096 [ 65.277363][ T4909] EXT4-fs (loop0): dirty_blocks=16 [ 65.283653][ T4906] loop3: p3 start 117440512 is beyond EOD, truncated [ 65.291047][ T4909] EXT4-fs (loop0): Block reservation details [ 65.297205][ T4909] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 65.329181][ T4851] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 28 [ 65.344038][ T4920] loop5: detected capacity change from 0 to 1024 [ 65.358424][ T3298] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 65.371568][ T4920] EXT4-fs: Ignoring removed bh option [ 65.382261][ T4920] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 65.423926][ T4920] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 65.450018][ T4920] System zones: 0-1, 3-12 [ 65.464292][ T4920] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #3: block 1: comm syz.5.414: lblock 1 mapped to illegal pblock 1 (length 1) [ 65.493716][ T4920] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 65.494115][ T4920] EXT4-fs (loop5): Remounting filesystem read-only [ 65.503305][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 65.503333][ C1] EXT4-fs (loop5): initial error at time 3931689626: ext4_map_blocks:833: inode 3: block 1 [ 65.503481][ C1] EXT4-fs (loop5): last error at time 3931689626: ext4_map_blocks:833: inode 3: block 1 [ 65.573961][ T4931] loop4: detected capacity change from 0 to 512 [ 65.609206][ T2982] loop3: p2 p3 [ 65.619193][ T2982] loop3: p3 start 117440512 is beyond EOD, truncated [ 65.629354][ T4931] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #2: comm syz.4.417: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 65.639784][ T4920] EXT4-fs (loop5): 1 orphan inode deleted [ 65.655342][ T4920] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.678909][ T4931] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 65.679713][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 65.695282][ C0] EXT4-fs (loop4): last error at time 3931689627: ext4_ext_check_inode:521: inode 2 [ 65.724079][ T4931] EXT4-fs (loop4): get root inode failed [ 65.746495][ T4931] EXT4-fs (loop4): mount failed [ 65.830523][ T4931] loop4: detected capacity change from 0 to 512 [ 65.855179][ T3887] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.865748][ T4931] vfat filesystem being mounted at /88/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 65.898084][ T4152] udevd[4152]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 66.037501][ T4950] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 66.046740][ T4950] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 66.056017][ T4950] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 66.065274][ T4950] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 66.074443][ T4950] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 66.083602][ T4950] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 66.092780][ T4950] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 66.101975][ T4950] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 66.111207][ T4950] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 66.120381][ T4950] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 66.368691][ T4929] loop0: detected capacity change from 0 to 32768 [ 66.662821][ T4929] loop0: p1 p3 < > [ 66.825502][ T4997] loop3: detected capacity change from 0 to 256 [ 66.862949][ T4997] msdos filesystem being mounted at /87/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 66.906849][ T5003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.432'. [ 66.952706][ T4152] udevd[4152]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 66.954870][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 67.274636][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.378823][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.461113][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.562309][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.578843][ T5034] loop3: detected capacity change from 0 to 512 [ 67.786751][ T5034] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.442: bg 0: block 104: invalid block bitmap [ 67.801838][ T5062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 67.810974][ T5062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 67.823217][ T5034] loop3: lost filesystem error report for type 5 error -117 [ 67.824854][ T5034] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 67.833354][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 67.833522][ C1] EXT4-fs (loop3): initial error at time 3931689629: ext4_validate_block_bitmap:432 [ 67.833836][ C1] EXT4-fs (loop3): last error at time 3931689629: ext4_validate_block_bitmap:432 [ 67.874597][ T5034] loop3: lost filesystem error report for type 5 error -117 [ 67.876759][ T5034] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.442: invalid indirect mapped block 1 (level 1) [ 67.901728][ T5034] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 67.907659][ T5034] EXT4-fs (loop3): 1 truncate cleaned up [ 67.942983][ T5034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.004698][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 68.004718][ T28] audit: type=1400 audit(3931689629.361:456): avc: denied { write } for pid=5032 comm="syz.3.442" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.043345][ T12] bond0 (unregistering): Released all slaves [ 68.059587][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.129460][ T5007] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.146474][ T5007] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.161363][ T5007] bridge_slave_0: entered allmulticast mode [ 68.176326][ T5007] bridge_slave_0: entered promiscuous mode [ 68.186084][ T12] hsr_slave_0: left promiscuous mode [ 68.192563][ T12] hsr_slave_1: left promiscuous mode [ 68.207752][ T12] veth1_macvtap: left promiscuous mode [ 68.214970][ T12] veth0_macvtap: left promiscuous mode [ 68.220886][ T12] veth1_vlan: left promiscuous mode [ 68.226265][ T12] veth0_vlan: left promiscuous mode [ 68.264896][ T28] audit: type=1400 audit(3931689629.621:457): avc: denied { write } for pid=5078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.312255][ T28] audit: type=1400 audit(3931689629.671:458): avc: denied { write } for pid=5095 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.392473][ T5007] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.399642][ T5007] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.407067][ T5007] bridge_slave_1: entered allmulticast mode [ 68.413910][ T5007] bridge_slave_1: entered promiscuous mode [ 68.421733][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 68.473559][ T5007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.491656][ T5007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.516085][ T5007] team0: Port device team_slave_0 added [ 68.525599][ T5007] team0: Port device team_slave_1 added [ 68.543033][ T5007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.550123][ T5007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.576335][ T5007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.588035][ T5007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.595243][ T5007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.621457][ T5007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.645833][ T28] audit: type=1400 audit(3931689630.001:459): avc: denied { getopt } for pid=5105 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.683582][ T5007] hsr_slave_0: entered promiscuous mode [ 68.699500][ T5007] hsr_slave_1: entered promiscuous mode [ 68.856399][ T28] audit: type=1400 audit(3931689630.211:460): avc: denied { write } for pid=5110 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.889866][ T28] audit: type=1400 audit(3931689630.241:461): avc: denied { write } for pid=5124 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.012181][ T28] audit: type=1400 audit(3931689630.371:462): avc: denied { shutdown } for pid=5129 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.033783][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 69.147848][ T28] audit: type=1400 audit(3931689630.501:463): avc: denied { mount } for pid=5145 comm="syz.0.463" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 69.174693][ T4857] nci: nci_rsp_packet: unknown rsp opcode 0x621 [ 69.184304][ T5030] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.191603][ T5030] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.198864][ T5030] bridge_slave_0: entered allmulticast mode [ 69.205683][ T5030] bridge_slave_0: entered promiscuous mode [ 69.219994][ T5030] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.227249][ T5030] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.234523][ T5030] bridge_slave_1: entered allmulticast mode [ 69.241058][ T5030] bridge_slave_1: entered promiscuous mode [ 69.260081][ T5030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.279192][ T5030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.310592][ T5030] team0: Port device team_slave_0 added [ 69.318163][ T5030] team0: Port device team_slave_1 added [ 69.338959][ T5030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.346006][ T5030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.373123][ T5030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.384537][ T5030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.395974][ T5030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.422117][ T5030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.456989][ T5030] hsr_slave_0: entered promiscuous mode [ 69.466064][ T5030] hsr_slave_1: entered promiscuous mode [ 69.472298][ T5030] debugfs: 'hsr0' already exists in 'hsr' [ 69.478264][ T5030] Cannot create hsr debugfs directory [ 69.932956][ T5136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 69.943810][ T5007] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 69.960216][ T5007] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.971016][ T5007] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 69.982571][ T5007] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.003614][ T5030] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 70.031889][ T5030] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.042995][ T5173] loop0: detected capacity change from 0 to 512 [ 70.054879][ T5030] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 70.081629][ T5173] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 70.091353][ T5030] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.100168][ T5030] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 70.106963][ T5173] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 70.115556][ T5173] System zones: 0-1, 15-15, 18-18, 34-34 [ 70.123581][ T5030] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.131787][ T5030] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 70.138626][ T5173] EXT4-fs (loop0): orphan cleanup on readonly fs [ 70.145315][ T5173] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 70.163515][ T5030] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.180722][ T5173] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 70.201674][ T5007] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 70.224220][ T5007] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.237061][ T5173] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 70.251568][ T5173] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.472: bad orphan inode 16 [ 70.270839][ T5173] loop0: lost filesystem error report for type 5 error -117 [ 70.270958][ T5173] ext4_test_bit(bit=15, block=18) = 1 [ 70.283812][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 70.283837][ C0] EXT4-fs (loop0): initial error at time 3931689631: ext4_orphan_get:1425 [ 70.283861][ C0] EXT4-fs (loop0): last error at time 3931689631: ext4_orphan_get:1425 [ 70.305509][ T5007] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 70.319646][ T5173] is_bad_inode(inode)=0 [ 70.326531][ T5007] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.334377][ T5173] NEXT_ORPHAN(inode)=0 [ 70.335317][ T28] audit: type=1400 audit(3931689631.671:464): avc: denied { write } for pid=5171 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.341400][ T5173] max_ino=32 [ 70.369573][ T5173] i_nlink=2 [ 70.373360][ T5173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.458838][ T5030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.491610][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 70.516021][ T5030] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.547643][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.554781][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.573009][ T4849] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.580171][ T4849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.634941][ T5007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.716097][ T5226] loop6: detected capacity change from 0 to 8192 [ 70.725376][ T5007] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.755636][ T5226] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.778601][ T4849] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.785749][ T4849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.796346][ T5226] vfat filesystem being mounted at /41/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 70.813037][ T4849] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.820219][ T4849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.893027][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.003529][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 71.171120][ T5007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.202943][ T5030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.480308][ T4851] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.502906][ T5007] veth0_vlan: entered promiscuous mode [ 71.517474][ T5007] veth1_vlan: entered promiscuous mode [ 71.556674][ T5030] veth0_vlan: entered promiscuous mode [ 71.571235][ T4851] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.606233][ T5030] veth1_vlan: entered promiscuous mode [ 71.615681][ T5007] veth0_macvtap: entered promiscuous mode [ 71.642753][ T5007] veth1_macvtap: entered promiscuous mode [ 71.656786][ T4851] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.698536][ T5030] veth0_macvtap: entered promiscuous mode [ 71.713082][ T5007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.730511][ T4851] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.753665][ T5030] veth1_macvtap: entered promiscuous mode [ 71.767447][ T5007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.792872][ T4857] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.810671][ T4857] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.831570][ T4857] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.842103][ T4857] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.871478][ T5030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.988138][ T5030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.026699][ T4839] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.045033][ T4839] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.061033][ T5321] netlink: 'syz.0.493': attribute type 1 has an invalid length. [ 72.096076][ T4839] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.106015][ T4839] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.168151][ T5321] bond1: entered promiscuous mode [ 72.182020][ T5321] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.506336][ T5324] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.532430][ T5324] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 72.551666][ T5324] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 72.575673][ T5324] bond1: (slave ip6gre1): making interface the new active one [ 72.590284][ T5324] ip6gre1: entered promiscuous mode [ 72.597804][ T5324] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 72.633004][ T4851] bridge_slave_1: left allmulticast mode [ 72.648377][ T4851] bridge_slave_1: left promiscuous mode [ 72.666583][ T4851] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.698540][ T4851] bridge_slave_0: left allmulticast mode [ 72.706484][ T5334] loop7: detected capacity change from 0 to 512 [ 72.713924][ T4851] bridge_slave_0: left promiscuous mode [ 72.720875][ T5334] FAT-fs (loop7): data area starts beyond volume (199892 > 45184) [ 72.728845][ T5334] FAT-fs (loop7): Can't find a valid FAT filesystem [ 72.737480][ T4851] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.802780][ T35] IPVS: starting estimator thread 0... [ 72.867543][ T4851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.883388][ T4851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.893014][ T5341] IPVS: using max 2208 ests per chain, 110400 per kthread [ 72.907575][ T4851] bond0 (unregistering): Released all slaves [ 72.926349][ T5347] netlink: 12 bytes leftover after parsing attributes in process `syz.7.501'. [ 72.966373][ T4839] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.978568][ T5347] netlink: 12 bytes leftover after parsing attributes in process `syz.7.501'. [ 73.015728][ T4839] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.032395][ T4839] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.105261][ T4851] hsr_slave_0: left promiscuous mode [ 73.132774][ T4851] hsr_slave_1: left promiscuous mode [ 73.144027][ T4851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.159223][ T4851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.173779][ T4851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.194384][ T4851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.215031][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 73.215048][ T28] audit: type=1400 audit(3931689634.571:474): avc: denied { write } for pid=5350 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.251857][ T4851] veth1_macvtap: left promiscuous mode [ 73.271419][ T4851] veth0_macvtap: left promiscuous mode [ 73.290551][ T5370] loop0: detected capacity change from 0 to 512 [ 73.294498][ T4851] veth1_vlan: left promiscuous mode [ 73.302948][ T5370] EXT4-fs: Ignoring removed i_version option [ 73.317370][ T28] audit: type=1400 audit(3931689634.671:475): avc: denied { write } for pid=5371 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.323769][ T4851] veth0_vlan: left promiscuous mode [ 73.380206][ T5370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.395097][ T5370] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.504839][ T4851] team0 (unregistering): Port device team_slave_1 removed [ 73.515869][ T4851] team0 (unregistering): Port device team_slave_0 removed [ 73.554418][ T4839] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.747346][ T5368] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.755355][ T5368] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.827903][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.999482][ T5368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.052151][ T5368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.275928][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 74.330164][ T4839] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.371254][ T4839] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.407903][ T4839] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.428284][ T28] audit: type=1400 audit(3931689635.781:476): avc: denied { mounton } for pid=5419 comm="syz.8.440" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.460400][ T4839] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.498171][ T28] audit: type=1400 audit(3931689635.781:477): avc: denied { ioctl } for pid=5412 comm="syz.7.511" path="socket:[13731]" dev="sockfs" ino=13731 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.546310][ T4839] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.562038][ T4839] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.604676][ T4839] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.615015][ T4839] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.626209][ T5295] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.640763][ T5295] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.641270][ T28] audit: type=1400 audit(3931689636.001:478): avc: denied { accept } for pid=5428 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 74.648590][ T5295] bridge_slave_0: entered allmulticast mode [ 74.674864][ T5295] bridge_slave_0: entered promiscuous mode [ 74.720479][ T5295] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.732592][ T5295] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.740776][ T5295] bridge_slave_1: entered allmulticast mode [ 74.747708][ T5295] bridge_slave_1: entered promiscuous mode [ 74.769950][ T5295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.786356][ T5295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.840033][ T5295] team0: Port device team_slave_0 added [ 74.854606][ T5295] team0: Port device team_slave_1 added [ 74.881465][ T5295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.894182][ T5295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.921063][ T5295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.935348][ T5295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.942683][ T5295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.985403][ T5295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.024452][ T28] audit: type=1400 audit(3931689636.381:479): avc: denied { write } for pid=5433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.079644][ T5295] hsr_slave_0: entered promiscuous mode [ 75.089272][ T5295] hsr_slave_1: entered promiscuous mode [ 75.095381][ T5295] debugfs: 'hsr0' already exists in 'hsr' [ 75.101439][ T28] audit: type=1400 audit(3931689636.451:480): avc: denied { write } for pid=5449 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.124820][ T5295] Cannot create hsr debugfs directory [ 75.159558][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 75.282834][ T5295] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 75.318234][ T5295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.354692][ T5295] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 75.377348][ T5295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.392945][ T5295] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 75.443762][ T5295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.481929][ T5295] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 75.501034][ T28] audit: type=1400 audit(3931689636.861:481): avc: denied { write } for pid=5479 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.531308][ T5295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.599906][ T28] audit: type=1400 audit(3931689636.951:482): avc: denied { write } for pid=5522 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.647103][ T5295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.671645][ T5295] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.690194][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 75.710807][ T4854] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.717946][ T4854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.743011][ T28] audit: type=1326 audit(3931689637.101:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5535 comm="syz.8.529" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5cb9de59 code=0x7ffc0000 [ 75.761604][ T4854] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.775444][ T4854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.011208][ T5564] bridge0: port 3(vlan2) entered blocking state [ 76.084535][ T5564] bridge0: port 3(vlan2) entered disabled state [ 76.134893][ T5564] vlan2: entered allmulticast mode [ 76.171358][ T5564] geneve0: entered allmulticast mode [ 76.202109][ T5564] vlan2: entered promiscuous mode [ 76.242789][ T5564] geneve0: entered promiscuous mode [ 76.262467][ T5615] smc: net device lo applied user defined pnetid SYZ2 [ 76.301250][ T5615] smc: net device lo erased user defined pnetid SYZ2 [ 76.370069][ T5295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.382845][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 76.654091][ T5295] veth0_vlan: entered promiscuous mode [ 76.664115][ T5295] veth1_vlan: entered promiscuous mode [ 76.683191][ T5295] veth0_macvtap: entered promiscuous mode [ 76.691720][ T5295] veth1_macvtap: entered promiscuous mode [ 76.704370][ T5295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.719161][ T5295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.736591][ T4837] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.746091][ T4837] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.874389][ T4837] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.883932][ T4837] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.597319][ C1] net_ratelimit: 3319 callbacks suppressed [ 77.597358][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 78.682942][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 78.682961][ T28] audit: type=1326 audit(3931689640.041:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5815 comm="syz.7.571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe14c5de59 code=0x0 [ 78.903046][ T28] audit: type=1400 audit(3931689640.261:511): avc: denied { read } for pid=5837 comm="syz.0.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.008429][ T5847] loop9: detected capacity change from 0 to 4096 [ 79.043655][ T5847] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.082447][ T28] audit: type=1400 audit(3931689640.441:512): avc: denied { write } for pid=5846 comm="syz.9.582" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.201122][ T28] audit: type=1400 audit(3931689640.561:513): avc: denied { write } for pid=5846 comm="syz.9.582" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.332318][ T5864] loop7: detected capacity change from 0 to 512 [ 79.378483][ T5864] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.399849][ T5864] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.455823][ T28] audit: type=1400 audit(3931689640.811:514): avc: denied { write } for pid=5863 comm="syz.7.588" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.540523][ T28] audit: type=1400 audit(3931689640.891:515): avc: denied { write } for pid=5863 comm="syz.7.588" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.612185][ T5295] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.627714][ T5007] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.682011][ T28] audit: type=1400 audit(3931689641.031:516): avc: denied { create } for pid=5873 comm="syz.7.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 79.756633][ T28] audit: type=1400 audit(3931689641.081:517): avc: denied { sys_admin } for pid=5873 comm="syz.7.591" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 79.829899][ T28] audit: type=1400 audit(3931689641.141:518): avc: denied { bind } for pid=5877 comm="syz.9.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.922883][ T28] audit: type=1400 audit(3931689641.141:519): avc: denied { connect } for pid=5877 comm="syz.9.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.961300][ T5885] loop7: detected capacity change from 0 to 512 [ 80.047587][ T5885] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.081452][ T5885] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.180396][ T5007] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.250826][ T5850] kexec: Could not allocate control_code_buffer [ 80.498441][ T5926] loop2: detected capacity change from 0 to 7 [ 80.505921][ T5926] loop2: [ 80.985885][ T5944] loop8: detected capacity change from 0 to 128 [ 81.055332][ T5944] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 81.080218][ T5944] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 81.128504][ T5944] vfat filesystem being mounted at /22/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 81.535457][ T5970] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 82.023578][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 82.279024][ T6015] netlink: 'syz.0.641': attribute type 1 has an invalid length. [ 82.287241][ T6015] netlink: 224 bytes leftover after parsing attributes in process `syz.0.641'. [ 82.388210][ T6025] loop0: detected capacity change from 0 to 512 [ 82.395026][ T6025] EXT4-fs: test_dummy_encryption option not supported [ 82.622178][ T6038] loop0: detected capacity change from 0 to 512 [ 82.635709][ T6038] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.651: inode has both inline data and extents flags [ 82.654905][ T6038] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 82.655110][ T6038] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.651: couldn't read orphan inode 15 (err -117) [ 82.664355][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 82.664383][ C0] EXT4-fs (loop0): initial error at time 3931689644: ext4_orphan_get:1399: inode 15 [ 82.664422][ C0] EXT4-fs (loop0): last error at time 3931689644: ext4_orphan_get:1399: inode 15 [ 82.717760][ T6038] loop0: lost filesystem error report for type 5 error -117 [ 82.718307][ T6038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 82.743280][ T6042] loop8: detected capacity change from 0 to 128 [ 82.751317][ T6042] msdos filesystem being mounted at /26/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 82.772216][ T6042] bio_check_eod: 15065 callbacks suppressed [ 82.772306][ T6042] syz.8.652: attempt to access beyond end of device [ 82.772306][ T6042] loop8: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 82.795842][ T6042] syz.8.652: attempt to access beyond end of device [ 82.795842][ T6042] loop8: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 82.812017][ T6038] Invalid argument reading file caps for ./file0 [ 82.818415][ T6042] Buffer I/O error on dev loop8, logical block 79, lost async page write [ 82.829736][ T6042] syz.8.652: attempt to access beyond end of device [ 82.829736][ T6042] loop8: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 82.870055][ T6042] Buffer I/O error on dev loop8, logical block 80, lost async page write [ 82.872420][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 82.891808][ T6044] syz.8.652: attempt to access beyond end of device [ 82.891808][ T6044] loop8: rw=524288, sector=154, nr_sectors = 8 limit=128 [ 82.906677][ T6044] syz.8.652: attempt to access beyond end of device [ 82.906677][ T6044] loop8: rw=0, sector=154, nr_sectors = 8 limit=128 [ 82.920106][ T6044] syz.8.652: attempt to access beyond end of device [ 82.920106][ T6044] loop8: rw=0, sector=154, nr_sectors = 8 limit=128 [ 82.955487][ T6044] syz.8.652: attempt to access beyond end of device [ 82.955487][ T6044] loop8: rw=0, sector=154, nr_sectors = 8 limit=128 [ 82.985213][ T6044] syz.8.652: attempt to access beyond end of device [ 82.985213][ T6044] loop8: rw=0, sector=154, nr_sectors = 8 limit=128 [ 83.008324][ T6044] syz.8.652: attempt to access beyond end of device [ 83.008324][ T6044] loop8: rw=0, sector=154, nr_sectors = 8 limit=128 [ 83.024293][ T6044] syz.8.652: attempt to access beyond end of device [ 83.024293][ T6044] loop8: rw=0, sector=154, nr_sectors = 8 limit=128 [ 83.185604][ T6068] netlink: 'syz.9.662': attribute type 83 has an invalid length. [ 83.351751][ T6082] Illegal XDP return value 4294967274 on prog (id 121) dev N/A, expect packet loss! [ 83.380166][ T6086] loop7: detected capacity change from 0 to 128 [ 83.403133][ T6086] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.415641][ T6086] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.552834][ T5007] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.663266][ T6102] loop7: detected capacity change from 0 to 512 [ 83.670325][ T6102] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.712992][ T6102] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.725742][ T6102] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.738709][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 83.738736][ T28] audit: type=1400 audit(3931689645.091:535): avc: denied { write } for pid=6101 comm="syz.7.675" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.831352][ T5007] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.074623][ T6120] loop0: detected capacity change from 0 to 512 [ 84.082098][ T4839] Bluetooth: hci0: Frame reassembly failed (-84) [ 84.085555][ T28] audit: type=1400 audit(3931689645.441:536): avc: denied { read } for pid=6119 comm="syz.7.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.110619][ T6120] EXT4-fs: Ignoring removed bh option [ 84.116825][ T6120] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.141248][ T6120] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 84.160833][ T6120] EXT4-fs (loop0): 1 truncate cleaned up [ 84.171764][ T6120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.228961][ T28] audit: type=1400 audit(3931689645.581:537): avc: denied { write } for pid=6118 comm="syz.0.683" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.287718][ T28] audit: type=1400 audit(3931689645.641:538): avc: denied { write } for pid=6123 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.352464][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.355412][ T28] audit: type=1400 audit(3931689645.701:539): avc: denied { write } for pid=6137 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.672441][ T28] audit: type=1400 audit(3931689646.031:540): avc: denied { write } for pid=6147 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.744307][ T28] audit: type=1400 audit(3931689646.101:541): avc: denied { write } for pid=6164 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.109345][ T28] audit: type=1400 audit(3931689646.461:542): avc: denied { write } for pid=6171 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.175169][ T28] audit: type=1400 audit(3931689646.531:543): avc: denied { write } for pid=6184 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.235303][ T28] audit: type=1400 audit(3931689646.591:544): avc: denied { getopt } for pid=6193 comm="syz.0.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.268050][ T6197] netlink: 20 bytes leftover after parsing attributes in process `syz.8.698'. [ 85.281624][ T6198] sctp: [Deprecated]: syz.9.697 (pid 6198) Use of int in max_burst socket option. [ 85.281624][ T6198] Use struct sctp_assoc_value instead [ 85.335681][ T6202] sctp: [Deprecated]: syz.9.700 (pid 6202) Use of struct sctp_assoc_value in delayed_ack socket option. [ 85.335681][ T6202] Use struct sctp_sack_info instead [ 85.417573][ T6215] netlink: 12 bytes leftover after parsing attributes in process `syz.9.706'. [ 85.460973][ T6221] loop8: detected capacity change from 0 to 1024 [ 85.469163][ T6221] EXT4-fs: Ignoring removed bh option [ 85.497410][ T6221] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.574849][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.712'. [ 85.585865][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.712'. [ 85.595848][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.712'. [ 85.605343][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.712'. [ 85.614628][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.712'. [ 85.623854][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.712'. [ 85.712688][ T5030] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.866315][ T6244] loop0: detected capacity change from 0 to 128 [ 85.881953][ T6244] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.909367][ T6244] ext4 filesystem being mounted at /195/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.000951][ T3298] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.150152][ T3813] Bluetooth: hci0: command 0x1003 tx timeout [ 86.150660][ T3549] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 86.242920][ T6265] loop7: detected capacity change from 0 to 128 [ 86.257962][ T6265] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.274752][ T6265] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.307584][ T5007] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.811709][ T6294] netlink: 'syz.9.736': attribute type 1 has an invalid length. [ 86.838097][ T6294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.860368][ T6294] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 86.892659][ T6294] netlink: 'syz.9.736': attribute type 10 has an invalid length. [ 86.912516][ T6294] dummy0: entered promiscuous mode [ 86.934433][ T6294] bond1: (slave dummy0): Releasing backup interface [ 87.070812][ T6306] __nla_validate_parse: 29 callbacks suppressed [ 87.070834][ T6306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.741'. [ 87.252931][ T6309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.742'. [ 87.370765][ T6317] loop8: detected capacity change from 0 to 1024 [ 87.387553][ T6317] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.406063][ T6317] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.744: Invalid block bitmap block 0 in block_group 0 [ 87.420095][ T6317] loop8: lost filesystem error report for type 5 error -117 [ 87.420976][ T6317] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.744: Failed to acquire dquot type 0 [ 87.439916][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 87.439934][ C1] EXT4-fs (loop8): initial error at time 3931689648: ext4_read_block_bitmap_nowait:483 [ 87.439964][ C1] EXT4-fs (loop8): last error at time 3931689648: ext4_read_block_bitmap_nowait:483 [ 87.500439][ T6317] loop8: lost filesystem error report for type 5 error -117 [ 87.501065][ T6317] EXT4-fs error (device loop8): ext4_free_blocks:6718: comm syz.8.744: Freeing blocks not in datazone - block = 0, count = 4096 [ 87.567867][ T6317] loop8: lost filesystem error report for type 5 error -117 [ 87.568106][ T6317] EXT4-fs error (device loop8): ext4_read_inode_bitmap:141: comm syz.8.744: Invalid inode bitmap blk 0 in block_group 0 [ 87.589646][ T4865] EXT4-fs error (device loop8): ext4_release_dquot:7077: comm kworker/u8:19: Failed to release dquot type 0 [ 87.626159][ T4865] loop8: lost filesystem error report for type 5 error -117 [ 87.644917][ T6317] loop8: lost filesystem error report for type 5 error -117 [ 87.675697][ T6317] EXT4-fs error (device loop8) in ext4_free_inode:363: Corrupt filesystem [ 87.709206][ T6317] loop8: lost filesystem error report for type 5 error -117 [ 87.709334][ T6317] EXT4-fs (loop8): 1 orphan inode deleted [ 87.728661][ T6317] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.851124][ T5030] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.270549][ T6430] netlink: 'syz.7.754': attribute type 1 has an invalid length. [ 88.349992][ T6430] netlink: 'syz.7.754': attribute type 4 has an invalid length. [ 88.390309][ T6430] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.754'. [ 88.532876][ T6456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.762'. [ 88.666470][ T6463] loop9: detected capacity change from 0 to 512 [ 88.717321][ T6463] FAT-fs (loop9): data area starts beyond volume (199892 > 45184) [ 88.726783][ T6463] FAT-fs (loop9): Can't find a valid FAT filesystem [ 88.797140][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 88.797161][ T28] audit: type=1400 audit(3931689650.151:558): avc: denied { write } for pid=6460 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.863569][ T28] audit: type=1400 audit(3931689650.191:559): avc: denied { write } for pid=6474 comm="syz.3.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.936407][ T28] audit: type=1400 audit(3931689650.271:560): avc: denied { write } for pid=6477 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.995207][ T28] audit: type=1400 audit(3931689650.341:561): avc: denied { setopt } for pid=6483 comm="syz.9.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.033439][ T6488] netlink: 'syz.0.770': attribute type 1 has an invalid length. [ 89.088208][ T6488] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.148825][ T6488] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 89.184797][ T6488] netlink: 'syz.0.770': attribute type 10 has an invalid length. [ 89.200023][ T5600] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 89.228097][ T6488] netlink: 40 bytes leftover after parsing attributes in process `syz.0.770'. [ 89.253700][ T6488] dummy0: entered promiscuous mode [ 89.264498][ T28] audit: type=1400 audit(3931689650.621:562): avc: denied { write } for pid=6486 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.325575][ T6488] bond2: (slave dummy0): Removing an active aggregator [ 89.333224][ T4837] bond2: (slave dummy0): link status up again after 0 ms [ 89.346424][ T28] audit: type=1400 audit(3931689650.701:563): avc: denied { write } for pid=6507 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.358258][ T4837] bond2: Warning: Found an uninitialized port [ 89.384486][ T6488] bond2: (slave dummy0): Releasing backup interface [ 89.527400][ T6521] netlink: 'syz.0.777': attribute type 1 has an invalid length. [ 89.548149][ T6521] netlink: 'syz.0.777': attribute type 2 has an invalid length. [ 89.571334][ T6521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.777'. [ 89.716124][ T6527] loop0: detected capacity change from 0 to 1024 [ 89.734645][ T6527] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.763423][ T6527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.802689][ T28] audit: type=1400 audit(3931689651.161:564): avc: denied { write } for pid=6526 comm="syz.0.780" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.837788][ T28] audit: type=1400 audit(3931689651.181:565): avc: denied { read write } for pid=6526 comm="syz.0.780" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.860690][ T28] audit: type=1400 audit(3931689651.181:566): avc: denied { open } for pid=6526 comm="syz.0.780" path="/205/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.424113][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.489161][ T28] audit: type=1326 audit(3931689651.841:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6543 comm="syz.8.785" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d5cb9de59 code=0x7ffc0000 [ 90.517337][ T6544] loop8: detected capacity change from 0 to 128 [ 90.527920][ T6544] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.566892][ T6544] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.602280][ T5030] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.693742][ T6556] netlink: 'syz.8.788': attribute type 1 has an invalid length. [ 90.724275][ T6556] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.754468][ T6556] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 90.777560][ T6556] netlink: 'syz.8.788': attribute type 10 has an invalid length. [ 90.786049][ T6556] netlink: 40 bytes leftover after parsing attributes in process `syz.8.788'. [ 90.803740][ T6556] dummy0: entered promiscuous mode [ 90.812718][ T6556] bond1: (slave dummy0): Releasing backup interface [ 90.869222][ T6570] loop8: detected capacity change from 0 to 256 [ 90.887526][ T6570] vfat filesystem being mounted at /49/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 90.900592][ T6570] bio_check_eod: 6565 callbacks suppressed [ 90.900612][ T6570] syz.8.794: attempt to access beyond end of device [ 90.900612][ T6570] loop8: rw=2049, sector=1768, nr_sectors = 4 limit=256 [ 90.932665][ T6570] syz.8.794: attempt to access beyond end of device [ 90.932665][ T6570] loop8: rw=2049, sector=1772, nr_sectors = 4 limit=256 [ 90.946448][ T6570] Buffer I/O error on dev loop8, logical block 443, lost async page write [ 90.962027][ T6570] syz.8.794: attempt to access beyond end of device [ 90.962027][ T6570] loop8: rw=2049, sector=1768, nr_sectors = 4 limit=256 [ 90.975888][ T6570] Buffer I/O error on dev loop8, logical block 442, lost async page write [ 91.825343][ T6602] loop9: detected capacity change from 0 to 512 [ 91.888620][ T6602] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.913021][ T6602] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.120080][ T6607] uprobe: syz.0.809:6607 failed to unregister, leaking uprobe [ 92.294128][ T5295] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.356276][ T6623] netlink: 'syz.0.814': attribute type 12 has an invalid length. [ 92.390208][ T6625] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.434683][ T6625] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.470816][ T6635] netlink: 24 bytes leftover after parsing attributes in process `syz.0.819'. [ 92.488501][ T6625] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.538399][ T6625] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.628203][ T4837] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.641701][ T4837] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.653987][ T4837] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.666273][ T4837] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.722290][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.8.821'. [ 92.802204][ T6647] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.883265][ T6647] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.966864][ T6647] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.034958][ T6647] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.114587][ T4849] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.124476][ T4849] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.147029][ T4849] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.161626][ T4849] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.294363][ T6665] netlink: 'syz.9.829': attribute type 12 has an invalid length. [ 93.549529][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.557292][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.608417][ T6694] netlink: 24 bytes leftover after parsing attributes in process `syz.8.834'. [ 93.644659][ T6679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.657026][ T6679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.750765][ T4837] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.764970][ T4837] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.787131][ T4837] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.797130][ T4837] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.913733][ T6704] uprobe: syz.7.848:6704 failed to unregister, leaking uprobe [ 94.992694][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 94.992712][ T28] audit: type=1400 audit(3931689656.351:628): avc: denied { map } for pid=6825 comm="syz.7.859" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 95.130132][ T6831] loop7: detected capacity change from 0 to 512 [ 95.165322][ T6831] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.195887][ T28] audit: type=1400 audit(3931689656.551:629): avc: denied { write } for pid=6830 comm="syz.7.861" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.394167][ T5007] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.439460][ T6754] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.446827][ T6754] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.532926][ T6754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.543476][ T6754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.593977][ T6844] netlink: 'syz.3.866': attribute type 12 has an invalid length. [ 97.661964][ T49] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.671940][ T49] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.681369][ T49] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.698567][ T49] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.076298][ T6861] loop8: detected capacity change from 0 to 512 [ 98.080669][ T6848] loop9: detected capacity change from 0 to 512 [ 98.130646][ T6861] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.162234][ T6861] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.184036][ T28] audit: type=1400 audit(3931689659.541:630): avc: denied { write } for pid=6860 comm="syz.8.872" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.192922][ T6848] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.867: bg 0: block 104: invalid block bitmap [ 98.228592][ T6861] EXT4-fs (loop8): shut down requested (0) [ 98.256821][ T28] audit: type=1400 audit(3931689659.611:631): avc: denied { read } for pid=2964 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 98.297672][ T6848] loop9: lost filesystem error report for type 5 error -117 [ 98.299798][ T28] audit: type=1400 audit(3931689659.611:632): avc: denied { search } for pid=2964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.303482][ T6848] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 98.314836][ T28] audit: type=1400 audit(3931689659.611:633): avc: denied { write search } for pid=2964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.330856][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 98.363532][ T28] audit: type=1400 audit(3931689659.611:634): avc: denied { add_name } for pid=2964 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.368889][ C0] EXT4-fs (loop9): initial error at time 3931689659: ext4_validate_block_bitmap:432 [ 98.401473][ C0] EXT4-fs (loop9): last error at time 3931689659: ext4_validate_block_bitmap:432 [ 98.434948][ T5030] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.442476][ T6848] loop9: lost filesystem error report for type 5 error -117 [ 98.444634][ T49] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 98.463197][ T28] audit: type=1400 audit(3931689659.611:635): avc: denied { create } for pid=2964 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.476110][ T49] Quota error (device loop8): write_blk: dquota write failed [ 98.484934][ T28] audit: type=1400 audit(3931689659.611:636): avc: denied { append open } for pid=2964 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.492113][ T6848] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.867: invalid indirect mapped block 1 (level 1) [ 98.569745][ T49] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 98.580564][ T49] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 98.595356][ T6848] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 98.607261][ T6848] EXT4-fs (loop9): 1 truncate cleaned up [ 98.657793][ T6866] netlink: 16 bytes leftover after parsing attributes in process `syz.8.873'. [ 98.693498][ T6848] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.922954][ T5295] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.072392][ T6954] loop7: detected capacity change from 0 to 1024 [ 100.114217][ T6954] EXT4-fs: Ignoring removed bh option [ 100.141877][ T6954] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 100.164570][ T6954] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 100.176236][ T6954] System zones: 0-1, 3-12 [ 100.189261][ T6954] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #3: block 1: comm syz.7.879: lblock 1 mapped to illegal pblock 1 (length 1) [ 100.209662][ T6954] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 100.211980][ T6954] EXT4-fs (loop7): Remounting filesystem read-only [ 100.221173][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 100.221220][ C0] EXT4-fs (loop7): initial error at time 3931689661: ext4_map_blocks:833: inode 3: block 1 [ 100.221370][ C0] EXT4-fs (loop7): last error at time 3931689661: ext4_map_blocks:833: inode 3: block 1 [ 100.255580][ T6954] __quota_error: 6 callbacks suppressed [ 100.255694][ T6954] Quota error (device loop7): write_blk: dquota write failed [ 100.269452][ T6954] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 100.279935][ T6954] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 100.293738][ T6954] EXT4-fs (loop7): 1 orphan inode deleted [ 100.318388][ T6954] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.446488][ T5007] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.597543][ T6984] netlink: 36 bytes leftover after parsing attributes in process `syz.3.889'. [ 100.663823][ T6989] netlink: 36 bytes leftover after parsing attributes in process `syz.3.889'. [ 100.765143][ T28] audit: type=1400 audit(3931689662.121:639): avc: denied { bind } for pid=6991 comm="syz.7.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.809184][ T28] audit: type=1400 audit(3931689662.121:640): avc: denied { name_bind } for pid=6991 comm="syz.7.892" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 100.859735][ T28] audit: type=1400 audit(3931689662.121:641): avc: denied { node_bind } for pid=6991 comm="syz.7.892" saddr=fe80::bb src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 101.331545][ T7002] netlink: 84 bytes leftover after parsing attributes in process `syz.8.896'. [ 101.639582][ T28] audit: type=1400 audit(3931689662.991:642): avc: denied { append } for pid=7015 comm="syz.0.902" name="icmp6" dev="proc" ino=4026532756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 101.735721][ T7026] netlink: 16 bytes leftover after parsing attributes in process `syz.0.907'. [ 101.768215][ T7021] syzkaller0: entered promiscuous mode [ 101.782574][ T7021] syzkaller0: entered allmulticast mode [ 102.081471][ T28] audit: type=1400 audit(3931689663.431:643): avc: denied { setopt } for pid=7045 comm="syz.3.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.142914][ T28] audit: type=1400 audit(3931689663.471:644): avc: denied { connect } for pid=7045 comm="syz.3.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.504046][ T7051] netlink: 'syz.8.914': attribute type 12 has an invalid length. [ 102.751587][ T7061] loop7: detected capacity change from 0 to 512 [ 102.819696][ T7061] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.856897][ T7061] ext4 filesystem being mounted at /71/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.945253][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.918'. [ 102.956024][ T7061] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.917: corrupted xattr block 33: overlapping e_value [ 103.004091][ T7075] netlink: 16 bytes leftover after parsing attributes in process `syz.3.922'. [ 103.040655][ T7061] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 103.068212][ T7061] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.917: corrupted xattr block 33: overlapping e_value [ 103.082163][ T28] audit: type=1400 audit(3931689664.421:645): avc: denied { write } for pid=7060 comm="syz.7.917" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.128294][ T7061] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 103.150572][ T7061] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.917: corrupted xattr block 33: overlapping e_value [ 103.167405][ T7072] loop8: detected capacity change from 0 to 512 [ 103.173722][ T7061] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 103.209534][ T7072] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.921: bg 0: block 104: invalid block bitmap [ 103.233865][ T7072] loop8: lost filesystem error report for type 5 error -117 [ 103.236193][ T5007] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.243578][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 103.243594][ C1] EXT4-fs (loop8): initial error at time 3931689664: ext4_validate_block_bitmap:432 [ 103.243620][ C1] EXT4-fs (loop8): last error at time 3931689664: ext4_validate_block_bitmap:432 [ 103.265210][ T7072] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 103.288695][ T7072] loop8: lost filesystem error report for type 5 error -117 [ 103.304778][ T7072] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.921: invalid indirect mapped block 1 (level 1) [ 103.332542][ T7072] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 103.335249][ T7072] EXT4-fs (loop8): 1 truncate cleaned up [ 103.367478][ T7072] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.477109][ T5030] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.013113][ T7110] netlink: 16 bytes leftover after parsing attributes in process `syz.9.935'. [ 104.025528][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.936'. [ 104.042950][ T7106] tmpfs: Too small a size for current use [ 104.148799][ T7112] loop9: detected capacity change from 0 to 1024 [ 104.170344][ T7112] EXT4-fs: Ignoring removed bh option [ 104.191404][ T7112] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 104.216300][ T7112] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 104.230842][ T7112] System zones: 0-1, 3-12 [ 104.247291][ T7112] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #3: block 1: comm syz.9.938: lblock 1 mapped to illegal pblock 1 (length 1) [ 104.279790][ T7112] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 104.281576][ T7112] EXT4-fs (loop9): Remounting filesystem read-only [ 104.290772][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 104.290821][ C1] EXT4-fs (loop9): initial error at time 3931689665: ext4_map_blocks:833: inode 3: block 1 [ 104.290951][ C1] EXT4-fs (loop9): last error at time 3931689665: ext4_map_blocks:833: inode 3: block 1 [ 104.330818][ T7112] EXT4-fs (loop9): 1 orphan inode deleted [ 104.348693][ T7112] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.412510][ T5295] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.555825][ T7115] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.563575][ T7115] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.006364][ T7115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.016243][ T7115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.104863][ T7136] bridge0: port 3(team0) entered blocking state [ 105.114566][ T7136] bridge0: port 3(team0) entered disabled state [ 105.134324][ T7136] team0: entered allmulticast mode [ 105.143378][ T7136] team_slave_0: entered allmulticast mode [ 105.157515][ T7136] team_slave_1: entered allmulticast mode [ 105.173220][ T7136] team0: entered promiscuous mode [ 105.188223][ T7136] team_slave_0: entered promiscuous mode [ 105.205335][ T7136] team_slave_1: entered promiscuous mode [ 105.223709][ T68] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.232424][ T68] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.242641][ T68] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.260797][ T68] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.418781][ T7147] netlink: 'syz.9.961': attribute type 7 has an invalid length. [ 105.430330][ T7147] netlink: 'syz.9.961': attribute type 7 has an invalid length. [ 105.430301][ T68] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.449396][ T68] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.458733][ T68] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.467697][ T68] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.593323][ T7153] netlink: 16 bytes leftover after parsing attributes in process `syz.7.951'. [ 105.625821][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.964'. [ 105.639774][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 105.639793][ T28] audit: type=1400 audit(3931689666.991:654): avc: denied { open } for pid=7157 comm="syz.9.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 105.650445][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.952'. [ 105.695478][ T28] audit: type=1400 audit(3931689666.991:655): avc: denied { kernel } for pid=7157 comm="syz.9.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 105.904293][ T28] audit: type=1400 audit(3931689667.261:656): avc: denied { create } for pid=7177 comm="syz.7.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 106.609627][ T28] audit: type=1400 audit(3931689667.961:657): avc: denied { accept } for pid=7213 comm="syz.3.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.655448][ T28] audit: type=1400 audit(3931689668.011:658): avc: denied { tracepoint } for pid=7215 comm="syz.9.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 106.697724][ T28] audit: type=1400 audit(3931689668.031:659): avc: denied { write } for pid=7220 comm="syz.0.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 106.723714][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.8.985'. [ 106.739635][ T28] audit: type=1400 audit(3931689668.041:660): avc: denied { watch } for pid=7223 comm="syz.8.983" path="pipe:[24967]" dev="pipefs" ino=24967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 107.031002][ T7237] loop7: detected capacity change from 0 to 128 [ 107.059234][ T7237] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.074611][ T7239] loop8: detected capacity change from 0 to 1024 [ 107.103914][ T7239] EXT4-fs: Ignoring removed bh option [ 107.119160][ T7237] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.133451][ T7239] ext4: Unknown parameter 'uid<000000' [ 107.138986][ T7237] vfat filesystem being mounted at /83/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 107.707826][ T7265] netlink: 'syz.3.1001': attribute type 3 has an invalid length. [ 107.780821][ T7265] netlink: 'syz.3.1001': attribute type 3 has an invalid length. [ 107.978479][ T28] audit: type=1400 audit(3931689669.331:661): avc: denied { connect } for pid=7272 comm="syz.7.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.065441][ T7257] loop8: detected capacity change from 0 to 1024 [ 108.162814][ T7257] EXT4-fs: Ignoring removed bh option [ 108.212614][ T7257] EXT4-fs (loop8): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 108.365240][ T7257] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.474690][ T28] audit: type=1400 audit(3931689669.811:662): avc: denied { write } for pid=7256 comm="syz.8.998" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.712026][ T5030] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.872113][ T7315] netlink: 2036 bytes leftover after parsing attributes in process `syz.8.1019'. [ 108.900023][ T7315] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1019'. [ 109.085902][ T28] audit: type=1400 audit(3931689670.441:663): avc: denied { create } for pid=7321 comm="syz.9.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 109.363136][ T7337] bridge0: port 3(team0) entered blocking state [ 109.375555][ T7337] bridge0: port 3(team0) entered disabled state [ 109.390014][ T7337] team0: entered allmulticast mode [ 109.402077][ T7337] team_slave_0: entered allmulticast mode [ 109.415544][ T7337] team_slave_1: entered allmulticast mode [ 109.429957][ T7337] team0: entered promiscuous mode [ 109.442060][ T7337] team_slave_0: entered promiscuous mode [ 109.455535][ T7337] team_slave_1: entered promiscuous mode [ 109.468097][ T7337] bridge0: port 3(team0) entered blocking state [ 109.474740][ T7337] bridge0: port 3(team0) entered forwarding state [ 110.582791][ T7430] 9pnet_fd: Insufficient options for proto=fd [ 110.609208][ T7430] loop9: detected capacity change from 0 to 256 [ 110.635476][ T7430] vfat filesystem being mounted at /103/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 110.662095][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 110.662115][ T28] audit: type=1326 audit(3931689672.021:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.3.1040" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f568de59 code=0x7ffc0000 [ 110.720283][ T28] audit: type=1326 audit(3931689672.021:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.3.1040" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff6f568de59 code=0x7ffc0000 [ 110.751470][ T28] audit: type=1400 audit(3931689672.021:674): avc: denied { read } for pid=7429 comm="syz.3.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 110.771544][ T28] audit: type=1326 audit(3931689672.021:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.3.1040" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f568de59 code=0x7ffc0000 [ 110.798937][ T28] audit: type=1326 audit(3931689672.021:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.3.1040" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f568de59 code=0x7ffc0000 [ 110.835264][ T28] audit: type=1326 audit(3931689672.051:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.3.1040" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6f568de59 code=0x7ffc0000 [ 110.861117][ T28] audit: type=1326 audit(3931689672.051:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.3.1040" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff6f568de59 code=0x7ffc0000 [ 110.887482][ T28] audit: type=1326 audit(3931689672.061:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.3.1040" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff6f568de59 code=0x7ffc0000 [ 110.913210][ T28] audit: type=1400 audit(3931689672.081:680): avc: denied { listen } for pid=7444 comm="syz.8.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 110.934719][ T28] audit: type=1400 audit(3931689672.081:681): avc: denied { accept } for pid=7444 comm="syz.8.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.581435][ T7463] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1050'. [ 112.066556][ T7475] loop7: detected capacity change from 0 to 512 [ 112.135960][ T7475] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1052: bg 0: block 104: invalid block bitmap [ 112.149871][ T7475] loop7: lost filesystem error report for type 5 error -117 [ 112.150659][ T7475] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 112.160117][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 112.161282][ C0] EXT4-fs (loop7): initial error at time 3931689673: ext4_validate_block_bitmap:432 [ 112.162218][ C0] EXT4-fs (loop7): last error at time 3931689673: ext4_validate_block_bitmap:432 [ 112.223838][ T7475] loop7: lost filesystem error report for type 5 error -117 [ 112.228694][ T7475] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1052: invalid indirect mapped block 1 (level 1) [ 112.254306][ T7475] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 112.257109][ T7475] EXT4-fs (loop7): 1 truncate cleaned up [ 112.283544][ T7475] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.318204][ T5007] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.653153][ T7502] loop7: detected capacity change from 0 to 1024 [ 112.698557][ T7502] EXT4-fs: Ignoring removed bh option [ 112.718097][ T7502] EXT4-fs (loop7): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 112.809876][ T7502] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.903567][ T7520] netlink: 240 bytes leftover after parsing attributes in process `syz.9.1070'. [ 112.989517][ T5007] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.568454][ T7535] loop7: detected capacity change from 0 to 512 [ 113.788065][ T7535] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1076: bg 0: block 104: invalid block bitmap [ 113.801283][ T7535] loop7: lost filesystem error report for type 5 error -117 [ 113.804488][ T7535] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 113.813962][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 113.814349][ C1] EXT4-fs (loop7): initial error at time 3931689675: ext4_validate_block_bitmap:432 [ 113.814666][ C1] EXT4-fs (loop7): last error at time 3931689675: ext4_validate_block_bitmap:432 [ 113.861860][ T7535] loop7: lost filesystem error report for type 5 error -117 [ 113.866140][ T7535] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1076: invalid indirect mapped block 1 (level 1) [ 113.908725][ T7535] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 113.912081][ T7535] EXT4-fs (loop7): 1 truncate cleaned up [ 113.974700][ T7535] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.079322][ T5007] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.193429][ T7557] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 114.225018][ T7557] batman_adv: batadv0: Adding interface: gretap1 [ 114.231930][ T7557] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.273847][ T7557] batman_adv: batadv0: Interface activated: gretap1 [ 114.633176][ T7574] loop7: detected capacity change from 0 to 1024 [ 114.682443][ T7574] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.771399][ T5007] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.893911][ T7584] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1100'. [ 114.934868][ T7584] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1100'. [ 115.388676][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1117'. [ 116.341852][ T7655] netlink: 'syz.9.1131': attribute type 1 has an invalid length. [ 116.364686][ T7655] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.429881][ T7655] bond2: (slave veth3): Enslaving as an active interface with a down link [ 116.469372][ T7655] dummy0: left promiscuous mode [ 116.481839][ T7655] bond2: (slave dummy0): making interface the new active one [ 116.491106][ T7655] dummy0: entered promiscuous mode [ 116.496449][ T7655] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 116.729496][ T7676] netlink: 2024 bytes leftover after parsing attributes in process `syz.7.1137'. [ 116.738740][ T7676] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1137'. [ 118.800734][ T7824] loop9: detected capacity change from 0 to 1024 [ 118.826544][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 118.826576][ T28] audit: type=1326 audit(3931689680.181:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.7.1163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe14c5de59 code=0x7ffc0000 [ 118.865597][ T28] audit: type=1326 audit(3931689680.181:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.7.1163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe14c5de59 code=0x7ffc0000 [ 118.877585][ T7824] EXT4-fs: Ignoring removed bh option [ 118.891755][ T28] audit: type=1326 audit(3931689680.181:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.7.1163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe14c5de59 code=0x7ffc0000 [ 118.957207][ T28] audit: type=1326 audit(3931689680.221:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.7.1163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fbe14c5de59 code=0x7ffc0000 [ 119.004494][ T7824] EXT4-fs (loop9): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 119.048995][ T28] audit: type=1326 audit(3931689680.221:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.7.1163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe14c5de59 code=0x7ffc0000 [ 119.110473][ T28] audit: type=1326 audit(3931689680.221:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.7.1163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe14c5de59 code=0x7ffc0000 [ 119.135095][ T7824] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.136556][ T28] audit: type=1326 audit(3931689680.221:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.7.1163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe14c5de59 code=0x7ffc0000 [ 119.136659][ T28] audit: type=1326 audit(3931689680.221:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.7.1163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe14c5de59 code=0x7ffc0000 [ 119.200421][ T28] audit: type=1326 audit(3931689680.221:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.7.1163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fbe14c5de59 code=0x7ffc0000 [ 119.225882][ T28] audit: type=1326 audit(3931689680.221:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.7.1163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe14c5de59 code=0x7ffc0000 [ 119.583354][ T5295] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.238431][ T7966] hsr0: entered promiscuous mode [ 120.257648][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1184'. [ 120.316870][ T7969] loop9: detected capacity change from 0 to 2048 [ 120.372723][ T7969] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.468120][ T7985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1192'. [ 120.499646][ T7989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1194'. [ 120.531733][ T5295] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.930498][ T8030] tipc: Started in network mode [ 120.940007][ T8030] tipc: Node identity d2918e68b3c3, cluster identity 4711 [ 120.956371][ T8030] tipc: Enabled bearer , priority 0 [ 120.971436][ T8030] +: renamed from syzkaller0 [ 120.984684][ T8030] tipc: Disabling bearer [ 121.017545][ T8032] netlink: 'syz.8.1205': attribute type 4 has an invalid length. [ 121.045393][ T8032] netlink: 'syz.8.1205': attribute type 4 has an invalid length. [ 121.141268][ T8044] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1210'. [ 122.724688][ T8117] loop8: detected capacity change from 0 to 1024 [ 122.740893][ T8117] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 122.749228][ T8117] System zones: 0-1, 3-12 [ 122.754757][ T8117] EXT4-fs (loop8): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.799467][ T5030] EXT4-fs (loop8): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 123.573012][ T8132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1247'. [ 123.893015][ T8163] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1261'. [ 123.912399][ T8169] loop8: detected capacity change from 0 to 512 [ 123.933288][ T8169] EXT4-fs: Ignoring removed bh option [ 123.970177][ T8169] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 124.000335][ T8169] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 124.033288][ T8169] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 124.053008][ T8169] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 124.096619][ T8169] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.212357][ T5030] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.339286][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1270'. [ 124.985540][ T8234] netlink: 'syz.7.1287': attribute type 9 has an invalid length. [ 124.994431][ T8234] netlink: 399 bytes leftover after parsing attributes in process `syz.7.1287'. [ 125.694915][ T8241] loop7: detected capacity change from 0 to 512 [ 125.744922][ T8241] EXT4-fs: Invalid want_extra_isize 4 [ 126.114909][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1300'. [ 126.135375][ T8263] vlan2: entered promiscuous mode [ 126.172494][ T8263] bond0: entered promiscuous mode [ 126.186458][ T8263] bond_slave_0: entered promiscuous mode [ 126.217587][ T8263] bond_slave_1: entered promiscuous mode [ 126.516041][ T8272] batman_adv: batadv0: Interface deactivated: gretap1 [ 126.621728][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 126.621747][ T28] audit: type=1400 audit(3931689687.981:762): avc: denied { ioctl } for pid=8283 comm="syz.8.1308" path="socket:[26173]" dev="sockfs" ino=26173 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 126.682594][ T28] audit: type=1326 audit(3931689688.041:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.0.1310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f47dade59 code=0x7ffc0000 [ 126.734916][ T28] audit: type=1326 audit(3931689688.041:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.0.1310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f47dade59 code=0x7ffc0000 [ 126.760502][ T28] audit: type=1326 audit(3931689688.041:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.0.1310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f47dade59 code=0x7ffc0000 [ 126.786182][ T28] audit: type=1326 audit(3931689688.041:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.0.1310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f47dade59 code=0x7ffc0000 [ 126.817596][ T28] audit: type=1326 audit(3931689688.041:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.0.1310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f47dade59 code=0x7ffc0000 [ 126.860639][ T28] audit: type=1326 audit(3931689688.041:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.0.1310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f47dade59 code=0x7ffc0000 [ 126.886438][ T28] audit: type=1326 audit(3931689688.041:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.0.1310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f47dade59 code=0x7ffc0000 [ 126.914524][ T28] audit: type=1326 audit(3931689688.041:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.0.1310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f47dade59 code=0x7ffc0000 [ 127.019294][ T28] audit: type=1326 audit(3931689688.041:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8292 comm="syz.0.1310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3f47dade59 code=0x7ffc0000 [ 128.261693][ T5602] dummy0: left promiscuous mode [ 128.920631][ T8374] io-wq is not configured for unbound workers [ 129.863055][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1359'. [ 130.537647][ T8524] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.548599][ T8524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.579011][ T8524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.587753][ T8524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.598097][ T8524] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 130.608835][ T8524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.624237][ T8524] veth1_vlan: left promiscuous mode [ 130.630636][ T8524] veth0_vlan: left promiscuous mode [ 130.638889][ T8524] veth0_vlan: entered promiscuous mode [ 130.647067][ T8524] veth1_vlan: entered promiscuous mode [ 130.656575][ T8524] veth1_macvtap: left promiscuous mode [ 130.663259][ T8524] veth0_macvtap: left promiscuous mode [ 130.670016][ T8524] veth0_macvtap: entered promiscuous mode [ 130.676874][ T8524] veth1_macvtap: entered promiscuous mode [ 130.689959][ T8524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.699791][ T8524] 8021q: adding VLAN 0 to HW filter on device eth0 [ 130.708197][ T8524] 8021q: adding VLAN 0 to HW filter on device eth1 [ 130.717150][ T8524] 8021q: adding VLAN 0 to HW filter on device eth2 [ 130.725872][ T8524] 8021q: adding VLAN 0 to HW filter on device eth3 [ 130.738159][ T5405] bridge0: entered promiscuous mode [ 130.747446][ T4859] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.754611][ T4859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.764816][ T4859] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.772001][ T4859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.811253][ T12] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.819643][ T12] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.828867][ T12] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.843144][ T12] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.062112][ T8539] netlink: 11575 bytes leftover after parsing attributes in process `syz.8.1376'. [ 131.101102][ T8543] dvmrp1: entered allmulticast mode [ 131.212185][ T8556] loop7: detected capacity change from 0 to 256 [ 131.220062][ T8556] vfat filesystem being mounted at /161/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 131.529678][ T8558] ================================================================== [ 131.537835][ T8558] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 131.545946][ T8558] [ 131.548308][ T8558] write to 0xffff88812b3f02e0 of 8 bytes by task 8556 on cpu 0: [ 131.555974][ T8558] filemap_splice_read+0x52a/0x790 [ 131.561121][ T8558] splice_direct_to_actor+0x261/0x680 [ 131.566571][ T8558] do_splice_direct+0x119/0x1a0 [ 131.571468][ T8558] do_sendfile+0x37d/0x640 [ 131.575936][ T8558] __x64_sys_sendfile64+0x105/0x150 [ 131.581187][ T8558] x64_sys_call+0x2dc4/0x3020 [ 131.585913][ T8558] do_syscall_64+0x136/0x3c0 [ 131.590542][ T8558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.596468][ T8558] [ 131.598822][ T8558] write to 0xffff88812b3f02e0 of 8 bytes by task 8558 on cpu 1: [ 131.606526][ T8558] filemap_splice_read+0x52a/0x790 [ 131.611671][ T8558] splice_direct_to_actor+0x261/0x680 [ 131.617099][ T8558] do_splice_direct+0x119/0x1a0 [ 131.621998][ T8558] do_sendfile+0x37d/0x640 [ 131.626476][ T8558] __x64_sys_sendfile64+0x105/0x150 [ 131.631725][ T8558] x64_sys_call+0x2dc4/0x3020 [ 131.636472][ T8558] do_syscall_64+0x136/0x3c0 [ 131.641107][ T8558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.647071][ T8558] [ 131.649426][ T8558] value changed: 0x00000000000002e8 -> 0x00000000000002e9 [ 131.656567][ T8558] [ 131.658926][ T8558] Reported by Kernel Concurrency Sanitizer on: [ 131.665121][ T8558] CPU: 1 UID: 0 PID: 8558 Comm: syz.7.1384 Not tainted syzkaller #0 PREEMPT(lazy) [ 131.674448][ T8558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 131.684561][ T8558] ==================================================================