last executing test programs: 3.963860014s ago: executing program 4 (id=946): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x17e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) 3.820202823s ago: executing program 4 (id=947): socket(0x10, 0x803, 0x0) socketpair(0x2c, 0x800, 0x0, &(0x7f0000000080)) msgget$private(0x0, 0x3ac) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.896355888s ago: executing program 4 (id=955): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYBLOB="42a00200231c040008001b"], 0x3c}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.773518135s ago: executing program 3 (id=956): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "60e275d0b2200a48", "b0da4bf7118d3e7c6d77d16f84c0fb72", "540f6dff", "7dc06d519e8c2cc4"}, 0x28) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x103800, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xfff9, 0xafcb, 0xfffd, 0x6, 0x10}}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000100)={0x4, 0x9, 0x9, 0x400, 0xeff4}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000180)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$bt_hci(r1, &(0x7f0000000200)={0x1, @read_link_policy={{0x80c, 0x2}, {0x192}}}, 0x6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4c00}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x17}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2080240}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_getnexthop={0x40, 0x6a, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r2}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x8000) vmsplice(r0, &(0x7f0000000500)=[{&(0x7f0000000480)="35675beb8e08cd49d1ab02a236a59c9bef2417fd497b119eae8295cd54be92846f20eeef4d6485ca13b8b6191fb137f9b793da9323733230e916f3761441381b150778e31ed4409c446ea768017bca3c4d726a6e1c54900a4bc6606f301ab63cdcf4d4fef557297b6048ca88fd6d8798fba55d3b3c", 0x75}], 0x1, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x2, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4408c}, 0x8000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/snmp\x00') tee(r1, r5, 0x2, 0x3) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000740)={&(0x7f0000000680), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r4, 0xa30, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}}, 0x4000) ftruncate(r1, 0x9) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r5) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5b5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000090) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000900)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000940)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000980)={r7, @in6={{0xa, 0x4e24, 0x1, @private1, 0xfffffe01}}, 0x0, 0x4, 0x9b7, 0x1, 0x0, 0x1, 0x5}, 0x9c) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0xa, [@ptr={0x2, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x3, 0xffffffffffffffff}, @ptr={0x3, 0x0, 0x0, 0x2, 0x1}, @func={0x1, 0x0, 0x0, 0xc, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x10000}}]}, {0x0, [0x2e, 0xb4a0fba12c3f51b5, 0x0, 0x61, 0x61, 0x61, 0x61, 0x61]}}, &(0x7f0000000ac0)=""/41, 0x6e, 0x29, 0x1, 0x4}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xe, '\x00', 0x0, r8, 0x5, 0x2, 0x2}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/bus/input/handlers\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000000c00)=0x4, 0x4) io_setup(0x7c17, &(0x7f0000000c40)=0x0) r11 = eventfd(0x101) io_submit(r10, 0x8, &(0x7f00000013c0)=[&(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x7, 0x1, r8, &(0x7f0000000c80)="f16d1ce398d17f41c97959ac005d012a60af7dcf75f01e905ea74c5690b03e02e3c2adafda2ea9afecc43b0c6c793bc0", 0x30, 0x9, 0x0, 0x3, r11}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x3, 0x9, r5, &(0x7f0000000d00)="f20ed1da91973c0a6d9467ae30f3496b34a8f3d9be6e5024f544c71d0d779f3ca890adedb3ff56aac1fe387cd46269c6769d4c43d6f8f0dbf9fd84cc4e80012a82bc60f46a202b47e57adb897324d44191b01c9a3d83074361132342c401a78bd5b26ba576e74ee7431e166070fc6e8b1c5456ba1eee4ca6ca90fe3e5b204a3ee0f20598d5281c2f99cee607007b9ab6ee3b86dac2413c1baec897b9ce7c51a0a60ec3666609a77f9bf7eb5f63ae6a0467a3eb70c3eb78c13f000a9ff74ef099f75ac799927df4d22047703ef3448b16516107d46d8a07650f94c5b50fadbc7cabe53b43078eb03d71d524dd6659628cfa2830a75f36b7e170a3", 0xfa, 0x100, 0x0, 0x1}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x4, 0xff, 0xffffffffffffffff, &(0x7f0000000e40)="b31c54daf4e51fe9b0360ffaee7fdb50f24f72c09f881a6c6dd4523978274be2", 0x20, 0x49be, 0x0, 0x0, r5}, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x6, 0x7fff, r8, &(0x7f0000000ec0)="73a86849326813d96929c856c8cbb9aaab757ce3ee6f869f03facc83a512bdfd99547606d9477895e9b7ab1767ccf48182e58dc23e60e0935c62bc5c53d14888c929170839f0ffbe5b4f9e71947c377c8344d01516cf2db5228f66e0e266cf402e3563acfc52ca7417c451a1b6489cd3952f652a1a9dc443ce8860b26d9372a640393ad14ffb46a4ee368d767422e3a6aa68a2644e0ed50b26b780c407a72d24261c36b7bd391fa1eb53550cfc5764c9d2571eee360496f9dfdd3b9ffc3ffa6e2785698422a876ce75", 0xc9, 0x3, 0x0, 0x1}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x5, 0x4b1, 0xffffffffffffffff, &(0x7f0000001040)="df3b9241f4f564c83e9d893f214ea3a3df3bf08eec3d26987e2bf28de2650defc56a1464886e06e1ac4f2fc67d2cd5c178d7c8620c9e39e47c5d4e2c3a26f2bb9baef292c6a91b1da10e191ceef51e847894f7d133727f57efd91069d0d157fd99b0e320e1d5442612635c72f4b3bc3d0019f606d8fdd2519bde883d050d886b5164e2633f3893026be2783a760f7dfeb468666ebcfbcaa939bc99dd71354b467a1755e9a0d20172fbc4c7cfdf", 0xad, 0x6, 0x0, 0x1, r1}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000001140)="94fafefd3077d23a948193435c0251b2f1331c36e29f4911582f869049b2fd6979818e1acf30413f0347d2bdedd5bd16d94978fbb3bde2c45927a691c27af5bd85d9a2503a5c491bfc689d29ce4d017e1f762d0f658097b13ce6e446b664acd85eb69767d27a9a334b8c44464d329cff0c66d13bcea76439dfccdb78653b2ef34e86b5e78345b64be750323fa2", 0x8d, 0x6, 0x0, 0x0, r0}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x7, r8, &(0x7f0000001240)="b17b72e59fc16adc3c9aecab8c5740cc", 0x10, 0x2, 0x0, 0x0, r9}, 0x0]) 2.626186784s ago: executing program 3 (id=958): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)='3', 0x1}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x80000002}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000d40)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYRES16, @ANYRES8], 0x40, 0x2fb, &(0x7f00000005c0)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x26) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0185879, &(0x7f0000000040)={@desc={0x1, 0x0, @desc2}}) fstatfs(r3, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) r5 = syz_clone(0x85000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r5, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x400d4) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$notify(r6, 0x402, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0xb0, 0xa, 0x148, 0xb0, 0x60, 0x1e0, 0x2a8, 0x2a8, 0x1e0, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0x2d}, 0x0, 0x70, 0xb0, 0x0, {0x200003ae, 0x7f00}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x9, "e7cfa59b06be2a27f6394deea4fe91c3d706f80e3439be1ee22cbc653caf"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@connbytes={{0x38}, {[{0x7}, {0x10001}], 0x1, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x6, 0x0, 0xc, 0x1, 0x1], 0x1}, {0x4, [0x2, 0x1, 0x4, 0x2, 0x2]}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2d8) setsockopt$sock_attach_bpf(r0, 0x84, 0x24, 0x0, 0x0) 2.614702744s ago: executing program 2 (id=959): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(0x0, 0x0, 0x482) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000000000007110aa0000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x2}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 2.588483417s ago: executing program 2 (id=961): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) socket$can_j1939(0x1d, 0x2, 0x7) getpeername$packet(r0, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001300)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0xf1}}]}}}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000013c0)={'macvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2004050}, 0xc, &(0x7f0000001540)={&(0x7f00000015c0)=ANY=[@ANYBLOB="04010000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fddbdf250800000014000180080003000100000008000300020000001c0001800800030001000000080003000100000008000300030000004800018014000200697036746e6c3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000300010000000800030000000000080003000300000004000180500001801400020070696d7265673100000000000000000008000100", @ANYRES32, @ANYBLOB="650003000100000008000100", @ANYRES32=r2, @ANYBLOB="080003000200000008000100", @ANYRES32, @ANYBLOB="080003000200000008000100", @ANYRES32=r4, @ANYBLOB="2400018008000100", @ANYRES32=r5, @ANYBLOB="080003000200000008000300020000004600030002000000918bca31c9d538cf03ba0f38d1bc5cacac7b3b289d2a070013dc6f1ec009f08219350000000000000000"], 0x104}, 0x1, 0x0, 0x0, 0x5}, 0x4000050) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb3", 0x11) dup2(0xffffffffffffffff, r0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 2.51666944s ago: executing program 1 (id=962): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x0, 0x0, 0x400000, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x20, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.36745755s ago: executing program 1 (id=963): socket$tipc(0x1e, 0x5, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe4, 0x0, 0x0, 0x7, 0x7f, 0x0, 0x8000001, 0x101, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$tipc(0x1e, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_tables_matches\x00') preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000040)=""/236, 0xec}], 0x1, 0x3, 0x4) preadv(r1, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/225, 0xe1}], 0x1, 0x941, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x84, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x3) socket$packet(0x11, 0x2, 0x300) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x141241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd000411001400006000006eec00be00442f0100000000000000000000ffff7f000001ff020000000000000000000000000001"], 0x7a) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.228266228s ago: executing program 1 (id=964): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040), 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000200), 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0xffffffffffffffff, {0x1, 0xff, 0x4}, 0xfe}, 0x18) getpeername$packet(r0, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001300)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001340)={0x0, @multicast2, @broadcast}, &(0x7f0000001240)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0xf1}}]}}}]}, 0x78}}, 0x0) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x42, 0x0) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb3", 0x11) socket$rxrpc(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 2.02435179s ago: executing program 4 (id=965): socket(0x10, 0x803, 0x0) socketpair(0x2c, 0x800, 0x0, &(0x7f0000000080)) msgget$private(0x0, 0x3ac) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[], 0x3c}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.904432387s ago: executing program 1 (id=966): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, 0x0, 0x0) getpeername$packet(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) write(r1, &(0x7f0000000a00)="c7885a8f24f458be", 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.749803766s ago: executing program 3 (id=967): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) getpeername$packet(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000013c0)={'macvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2004050}, 0xc, &(0x7f0000001540)={&(0x7f00000015c0)=ANY=[@ANYBLOB="04010000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fddbdf250800000014000180080003000100000008000300020000001c0001800800030001000000080003000100000008000300030000004800018014000200697036746e6c3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000300010000000800030000000000080003000300000004000180500001801400020070696d7265673100000000000000000008000100", @ANYRES32, @ANYBLOB="650003000100000008000100", @ANYRES32, @ANYBLOB="080003000200000008000100", @ANYRES32, @ANYBLOB="080003000200000008000100", @ANYRES32, @ANYBLOB="2400018008000100", @ANYRES32=r3, @ANYBLOB="080003000200000008000300020000004600030002000000918bca31c9d538cf03ba0f38d1bc5cacac7b3b289d2a070013dc6f1ec009f08219350000000000000000"], 0x104}, 0x1, 0x0, 0x0, 0x5}, 0x4000050) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb3", 0x11) socket$rxrpc(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.668389201s ago: executing program 0 (id=968): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040), 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000200), 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0xffffffffffffffff, {0x1, 0xff, 0x4}, 0xfe}, 0x18) getpeername$packet(r0, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001300)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001340)={0x0, @multicast2, @broadcast}, &(0x7f0000001240)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0xf1}}]}}}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000013c0)={'macvlan0\x00'}) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb3", 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/4098, 0x1002, 0xd37) sendfile(r1, r0, 0x0, 0x3ffff) 1.666147891s ago: executing program 2 (id=969): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "60e275d0b2200a48", "b0da4bf7118d3e7c6d77d16f84c0fb72", "540f6dff", "7dc06d519e8c2cc4"}, 0x28) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x103800, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xfff9, 0xafcb, 0xfffd, 0x6, 0x10}}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000100)={0x4, 0x9, 0x9, 0x400, 0xeff4}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000180)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$bt_hci(r1, &(0x7f0000000200)={0x1, @read_link_policy={{0x80c, 0x2}, {0x192}}}, 0x6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4c00}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x17}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2080240}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_getnexthop={0x40, 0x6a, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r2}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x8000) vmsplice(r0, &(0x7f0000000500)=[{&(0x7f0000000480)="35675beb8e08cd49d1ab02a236a59c9bef2417fd497b119eae8295cd54be92846f20eeef4d6485ca13b8b6191fb137f9b793da9323733230e916f3761441381b150778e31ed4409c446ea768017bca3c4d726a6e1c54900a4bc6606f301ab63cdcf4d4fef557297b6048ca88fd6d8798fba55d3b3c", 0x75}], 0x1, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x2, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4408c}, 0x8000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/snmp\x00') tee(r1, r5, 0x2, 0x3) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000740)={&(0x7f0000000680), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r4, 0xa30, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}}, 0x4000) ftruncate(r1, 0x9) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r5) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5b5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000090) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000900)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000940)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000980)={r7, @in6={{0xa, 0x4e24, 0x1, @private1, 0xfffffe01}}, 0x0, 0x4, 0x9b7, 0x1, 0x0, 0x1, 0x5}, 0x9c) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0xa, [@ptr={0x2, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x3, 0xffffffffffffffff}, @ptr={0x3, 0x0, 0x0, 0x2, 0x1}, @func={0x1, 0x0, 0x0, 0xc, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x10000}}]}, {0x0, [0x2e, 0xb4a0fba12c3f51b5, 0x0, 0x61, 0x61, 0x61, 0x61, 0x61]}}, &(0x7f0000000ac0)=""/41, 0x6e, 0x29, 0x1, 0x4}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xe, '\x00', 0x0, r8, 0x5, 0x2, 0x2}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/bus/input/handlers\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000000c00)=0x4, 0x4) io_setup(0x7c17, &(0x7f0000000c40)=0x0) r11 = eventfd(0x101) io_submit(r10, 0x8, &(0x7f00000013c0)=[&(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x7, 0x1, r8, &(0x7f0000000c80)="f16d1ce398d17f41c97959ac005d012a60af7dcf75f01e905ea74c5690b03e02e3c2adafda2ea9afecc43b0c6c793bc0", 0x30, 0x9, 0x0, 0x3, r11}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x3, 0x9, r5, &(0x7f0000000d00)="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", 0xfa, 0x100, 0x0, 0x1}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x4, 0xff, 0xffffffffffffffff, &(0x7f0000000e40)="b31c54daf4e51fe9b0360ffaee7fdb50f24f72c09f881a6c6dd4523978274be2", 0x20, 0x49be, 0x0, 0x0, r5}, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x6, 0x7fff, r8, &(0x7f0000000ec0)="73a86849326813d96929c856c8cbb9aaab757ce3ee6f869f03facc83a512bdfd99547606d9477895e9b7ab1767ccf48182e58dc23e60e0935c62bc5c53d14888c929170839f0ffbe5b4f9e71947c377c8344d01516cf2db5228f66e0e266cf402e3563acfc52ca7417c451a1b6489cd3952f652a1a9dc443ce8860b26d9372a640393ad14ffb46a4ee368d767422e3a6aa68a2644e0ed50b26b780c407a72d24261c36b7bd391fa1eb53550cfc5764c9d2571eee360496f9dfdd3b9ffc3ffa6e2785698422a876ce75", 0xc9, 0x3, 0x0, 0x1}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x5, 0x4b1, 0xffffffffffffffff, &(0x7f0000001040)="df3b9241f4f564c83e9d893f214ea3a3df3bf08eec3d26987e2bf28de2650defc56a1464886e06e1ac4f2fc67d2cd5c178d7c8620c9e39e47c5d4e2c3a26f2bb9baef292c6a91b1da10e191ceef51e847894f7d133727f57efd91069d0d157fd99b0e320e1d5442612635c72f4b3bc3d0019f606d8fdd2519bde883d050d886b5164e2633f3893026be2783a760f7dfeb468666ebcfbcaa939bc99dd71354b467a1755e9a0d20172fbc4c7cfdf", 0xad, 0x6, 0x0, 0x1, r1}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000001140)="94fafefd3077d23a948193435c0251b2f1331c36e29f4911582f869049b2fd6979818e1acf30413f0347d2bdedd5bd16d94978fbb3bde2c45927a691c27af5bd85d9a2503a5c491bfc689d29ce4d017e1f762d0f658097b13ce6e446b664acd85eb69767d27a9a334b8c44464d329cff0c66d13bcea76439dfccdb78653b2ef34e86b5e78345b64be750323fa2", 0x8d, 0x6, 0x0, 0x0, r0}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x7, r8, &(0x7f0000001240)="b17b72e59fc16adc3c9aecab8c5740cc", 0x10, 0x2, 0x0, 0x0, r9}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x6, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x2, r9}]) 1.490977021s ago: executing program 2 (id=970): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x17e) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) 1.408421677s ago: executing program 2 (id=971): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040), 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000200), 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0xffffffffffffffff, {0x1, 0xff, 0x4}, 0xfe}, 0x18) getpeername$packet(r0, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001300)=0x14) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb3", 0x11) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) 1.128458023s ago: executing program 4 (id=972): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x482) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000000000007110aa0000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x2}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 1.102514495s ago: executing program 3 (id=973): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x0, 0x0, 0x400000, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x20, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 983.515602ms ago: executing program 0 (id=974): socket$tipc(0x1e, 0x5, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe4, 0x0, 0x0, 0x7, 0x7f, 0x0, 0x8000001, 0x101, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$tipc(0x1e, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_tables_matches\x00') preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000040)=""/236, 0xec}], 0x1, 0x3, 0x4) preadv(r1, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/225, 0xe1}], 0x1, 0x941, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x84, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x3) socket$packet(0x11, 0x2, 0x300) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x141241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd000411001400006000006eec00be00442f0100000000000000000000ffff7f000001ff020000000000000000000000000001"], 0x7a) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 924.647245ms ago: executing program 1 (id=975): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYBLOB="42a00200231c040008001b"], 0x3c}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 860.125979ms ago: executing program 3 (id=976): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)='3', 0x1}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x80000002}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0x200f, {"20e30a30ed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f363063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19300305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a027d5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf050000008000000000f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b3f3f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2f5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d21488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e09d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a603336c00000077cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046ca5b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe6531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e6586df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59555e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb601203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000930dedf800", 0x1000}}, 0x1006) syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000d40)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYRES16, @ANYRES8], 0x40, 0x2fb, &(0x7f00000005c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x26) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0185879, &(0x7f0000000040)={@desc={0x1, 0x0, @desc2}}) ioctl$VT_WAITACTIVE(r2, 0x5607) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = syz_clone(0x85000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r4, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x400d4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x7800, 0x20, 0x7, 0x7fff, {{0x23, 0x4, 0x1, 0x6, 0x8c, 0x65, 0x0, 0x6, 0x4, 0x0, @loopback, @empty, {[@timestamp_prespec={0x44, 0xc, 0x8f, 0x3, 0x5, [{@empty, 0x1000}]}, @timestamp_prespec={0x44, 0x2c, 0x18, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0xfffffffe}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x5}, {@multicast1, 0x1ff}, {@local, 0x5}, {@broadcast, 0x3ff}]}, @cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x2, 0x8, "91c1e642e12e"}, {0x6, 0xa, "dada2f4d855f4eac"}, {0x0, 0x6, "e41e8ffc"}, {0x0, 0x4, "87cd"}, {0x0, 0xd, "4eb2a6377999e464d506a1"}]}, @rr={0x7, 0xf, 0x1f, [@multicast1, @broadcast, @multicast2]}]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x5, '\x00', r5, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x24004000}, 0x41844) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200d}, 0x0, 0xa, 0xffffffffffffffff, 0x8) fcntl$notify(0xffffffffffffffff, 0x402, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$eJzs3M1vFOUfAPDvTOkLUGjhR37Ki1JFYyPa0oLKwYMaTbhoTPSAx1oqQQoYWhMhRIoxeDT+BerRxMSTF71ooka9qPGqd2NCDBdQE1MzOzPttt3dbrfQCvv5JNM+z8wzL99n5pmd2Wd2AmhbA9mfJKI3In6JiL48u7DAQP7v+tUL439evTCexOzsC38klXLXrl4YL4uW820uMoNpRPp2ErtrrHfq3PmTY5OTE2eL/PD0qdeGp86df/jEqbHjE8cnTo8ePnzo4Mhjj44+0lQcF5eZnsV1bdebZ/bsPPLSe8+Oz8bL332cbW9vMb06jlx/U+ttZCAGYrYwP7ar8vf+VS/9v2VLRHQX6WTDOm8MTeuIiGx3dVbaf190xPzO64tn3prLfLVOGwjcNNln07YlYzuK/+nc5xdwO0q0cWhT5Sd+dv9bDmt5/bHerjyZ/Z2oxH+9GH54Lq+bNLuX7c/v2DvqzP//GuN65pOzfcusvzcijs789X42RM3vIRpImi4JADDni+z656Fa13/pgmubrUUfSn9E7I+I7RHxv4jYEelcmTsi4s4Vrn9gUX7p9c9PG1e4yBXJrv8eL/q2yiGfUsaVzOW2VOLvTF45MTlxoKiTwejszvIjDdbx5dM/v1tv2kDV9V82ZOsvrwWL7fh9Q/fCeY6NTY+tIuQFrlyKJDbUij+Z6wnIamBnROxqYflZnZ148KM9WXrr5qXTl4+/gRvQzzT7YcQD+f6fiUXxl5J8TfX6J4d7YnLiwHB5VCz1/Y+Xn6/Od1alF8Tf01xMPa0GW8OVSxGbah7/RfxlMyj7a6eK/Ne9Ta/j8q/v1L2nWbr/kzg6U12iOP43zldbdvx3JS9W0l3FuDfGpqfPjkR8XoxYMH50fmllviyfxT+4b2H8+X1xmp3j/vmgmG93RGQH8V0RcXdE7C22/Z6IuDci9jWI/9un7nu1cQ21ePzfAFn8xxrt/4j+pLq/voVEx8lvPqu3/ubOf4cqqcFiTPX5r6vOcpvdwNXWHwAAANwK0kofdJIOVT2/XdoRm9LJM1PT+wfi9dPH8r7q/uhMy2+6+qq+Dx0pvhsu86OL8gcjYlvlSaONlfzQ+JnJLesUM5DbXNX+83NBmg4N5dN+q/fQC3D7WFE/WvVDZ598euM3BlhTfq8J7Uv7h/al/UP70v6hfdVq/xcjrq/DpgBrrNXP/8UPDAC3Htf/0L60f2hf2j+0paU/iS9et5KdE1r/yf/k9iOreWPAzU/M9rU+e9SfNLPyBXY0V7h8+0XTS26ucBJRhpM2iKtGItL5MX8Xb5OsjOnMy3Q1v6lrn0iXLfPEcrXRuaJ3YvTUqI29RaI7IppdzsU1q9XyDJF4yyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBL+zcAAP//knXm/A==") setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0xb0, 0xa, 0x148, 0xb0, 0x60, 0x1e0, 0x2a8, 0x2a8, 0x1e0, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0x2d}, 0x0, 0x70, 0xb0, 0x0, {0x200003ae, 0x7f00}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x9, "e7cfa59b06be2a27f6394deea4fe91c3d706f80e3439be1ee22cbc653caf"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@connbytes={{0x38}, {[{0x7}, {0x10001}], 0x1, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x6, 0x0, 0xc, 0x1, 0x1], 0x1}, {0x4, [0x2, 0x1, 0x4, 0x2, 0x2]}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2d8) setsockopt$sock_attach_bpf(r0, 0x84, 0x24, 0x0, 0x0) 642.872352ms ago: executing program 0 (id=977): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040), 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000200), 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0xffffffffffffffff, {0x1, 0xff, 0x4}, 0xfe}, 0x18) getpeername$packet(r0, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001300)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001340)={0x0, @multicast2, @broadcast}, &(0x7f0000001240)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0xf1}}]}}}]}, 0x78}}, 0x0) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x42, 0x0) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb3", 0x11) socket$rxrpc(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 257.429985ms ago: executing program 2 (id=978): socket(0x10, 0x803, 0x0) socketpair(0x2c, 0x800, 0x0, &(0x7f0000000080)) msgget$private(0x0, 0x3ac) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c00000010000108ffffffff0000000000000000", @ANYRES32=0x0], 0x3c}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 253.480065ms ago: executing program 4 (id=979): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)='3', 0x1}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x80000002}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000d40)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYRES16, @ANYRES8], 0x40, 0x2fb, &(0x7f00000005c0)="$eJzs3E1rE10UwPGTNG3SlDZZPDygIr3oRjdDG/dCkBbEgFIb8QWEaTPRkDEJmVCJiI0rt34NS5fdSEHrB+jGnSs34qYbwU1BaySZSTtpJ2mb2k5L/j8o93TuPcncmZtwJjCzcf/ts3zW0rJ6RYIRJUGRmmyJxBuRY35URAISkGYzZG+M2E1Nro78/HJRiUgylZqaUWo6OXstoZQaG//w/OXypbXKyL2VsdWwrMcfb/xIfFv/f/3cxp/ZpzlL5SxVKFaUruaKXyv6nGmoTM7Ka0rdMQ3dMlSuYBllu79Ycd5WSqWq0guZ0WipbFiW0gtVlTeqqlJUlXJV6U/0XEFpmqZGo9I/NsebTemweemlmRk92eObzveYh39urWtvudz68Hyqt/ekl45vnwAAwGnVqv/D7vp/s73+Dzht0F3/O2pSa9T/dx88vHWA+n91qEP9X9xT/zvXF9LWnzWL1P+9iuzdlF4a6L3+xxlRHpawLMvOJ/r1o+WJZkD9DwAAAAAAAAAAAAAAAAAAAADAWbBZr8fq9Xqs0QbFjht/YeeGkdb/fu8njof7/NvnOtQ465z/PuG6cS8iYr5ZSC+k7dbuT2YlJ6YYMiEx+d1cDw47nr6Zmgqoprh8NBed/MWF9EB7/qTEJO6dP2nnq/b8QYm68xMSk/+88xOe+UNy5bIrX5OYfJ6XopiSaa7rnfxXk0rduJ3alT8sGY875gAAAAAAOIs0tc3z+l3TOvXb+Qf5fWDC8/o8JOdD/s4dAAAAAIB+YVVf5HXTNMr7Bu+cjH0Hf3cGHviVjxoMHmIW20Gw+3TeN4NAp1eOHOrQHUPQeiZz18HDzqC2LufnmcWj7cagH3Mf9+WAhxqrxLUl2nHw2IDXAe8WhJ2nMje2bNV3jbm+cuGXf2vsxL6CAAAAAJyQnaLf7z0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKB/ncTjxPyeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBa/A0AAP//bFIRsw==") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x26) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0185879, &(0x7f0000000040)={@desc={0x1, 0x0, @desc2}}) fstatfs(r3, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) r5 = syz_clone(0x85000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r5, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x400d4) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$notify(r6, 0x402, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0xb0, 0xa, 0x148, 0xb0, 0x60, 0x1e0, 0x2a8, 0x2a8, 0x1e0, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0x2d}, 0x0, 0x70, 0xb0, 0x0, {0x200003ae, 0x7f00}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x9, "e7cfa59b06be2a27f6394deea4fe91c3d706f80e3439be1ee22cbc653caf"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@connbytes={{0x38}, {[{0x7}, {0x10001}], 0x1, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x6, 0x0, 0xc, 0x1, 0x1], 0x1}, {0x4, [0x2, 0x1, 0x4, 0x2, 0x2]}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2d8) setsockopt$sock_attach_bpf(r0, 0x84, 0x24, 0x0, 0x0) 208.087408ms ago: executing program 0 (id=980): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "60e275d0b2200a48", "b0da4bf7118d3e7c6d77d16f84c0fb72", "540f6dff", "7dc06d519e8c2cc4"}, 0x28) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x103800, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xfff9, 0xafcb, 0xfffd, 0x6, 0x10}}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000100)={0x4, 0x9, 0x9, 0x400, 0xeff4}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000180)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$bt_hci(r1, &(0x7f0000000200)={0x1, @read_link_policy={{0x80c, 0x2}, {0x192}}}, 0x6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4c00}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x17}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2080240}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_getnexthop={0x40, 0x6a, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r2}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x8000) vmsplice(r0, &(0x7f0000000500)=[{&(0x7f0000000480)="35675beb8e08cd49d1ab02a236a59c9bef2417fd497b119eae8295cd54be92846f20eeef4d6485ca13b8b6191fb137f9b793da9323733230e916f3761441381b150778e31ed4409c446ea768017bca3c4d726a6e1c54900a4bc6606f301ab63cdcf4d4fef557297b6048ca88fd6d8798fba55d3b3c", 0x75}], 0x1, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x2, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4408c}, 0x8000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='net/snmp\x00') tee(r1, r5, 0x2, 0x3) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000740)={&(0x7f0000000680), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r4, 0xa30, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}}, 0x4000) ftruncate(r1, 0x9) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r5) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5b5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000090) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000900)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000940)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000980)={r7, @in6={{0xa, 0x4e24, 0x1, @private1, 0xfffffe01}}, 0x0, 0x4, 0x9b7, 0x1, 0x0, 0x1, 0x5}, 0x9c) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0xa, [@ptr={0x2, 0x0, 0x0, 0x2, 0x1}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x3, 0xffffffffffffffff}, @ptr={0x3, 0x0, 0x0, 0x2, 0x1}, @func={0x1, 0x0, 0x0, 0xc, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x10000}}]}, {0x0, [0x2e, 0xb4a0fba12c3f51b5, 0x0, 0x61, 0x61, 0x61, 0x61, 0x61]}}, &(0x7f0000000ac0)=""/41, 0x6e, 0x29, 0x1, 0x4}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xe, '\x00', 0x0, r8, 0x5, 0x2, 0x2}, 0x50) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/bus/input/handlers\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000000c00)=0x4, 0x4) io_setup(0x7c17, &(0x7f0000000c40)=0x0) r11 = eventfd(0x101) io_submit(r10, 0x8, &(0x7f00000013c0)=[&(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x7, 0x1, r8, &(0x7f0000000c80)="f16d1ce398d17f41c97959ac005d012a60af7dcf75f01e905ea74c5690b03e02e3c2adafda2ea9afecc43b0c6c793bc0", 0x30, 0x9, 0x0, 0x3, r11}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x3, 0x9, r5, &(0x7f0000000d00)="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", 0xfa, 0x100, 0x0, 0x1}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x4, 0xff, 0xffffffffffffffff, &(0x7f0000000e40)="b31c54daf4e51fe9b0360ffaee7fdb50f24f72c09f881a6c6dd4523978274be2", 0x20, 0x49be, 0x0, 0x0, r5}, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x6, 0x7fff, r8, &(0x7f0000000ec0)="73a86849326813d96929c856c8cbb9aaab757ce3ee6f869f03facc83a512bdfd99547606d9477895e9b7ab1767ccf48182e58dc23e60e0935c62bc5c53d14888c929170839f0ffbe5b4f9e71947c377c8344d01516cf2db5228f66e0e266cf402e3563acfc52ca7417c451a1b6489cd3952f652a1a9dc443ce8860b26d9372a640393ad14ffb46a4ee368d767422e3a6aa68a2644e0ed50b26b780c407a72d24261c36b7bd391fa1eb53550cfc5764c9d2571eee360496f9dfdd3b9ffc3ffa6e2785698422a876ce75", 0xc9, 0x3, 0x0, 0x1}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x5, 0x4b1, 0xffffffffffffffff, &(0x7f0000001040)="df3b9241f4f564c83e9d893f214ea3a3df3bf08eec3d26987e2bf28de2650defc56a1464886e06e1ac4f2fc67d2cd5c178d7c8620c9e39e47c5d4e2c3a26f2bb9baef292c6a91b1da10e191ceef51e847894f7d133727f57efd91069d0d157fd99b0e320e1d5442612635c72f4b3bc3d0019f606d8fdd2519bde883d050d886b5164e2633f3893026be2783a760f7dfeb468666ebcfbcaa939bc99dd71354b467a1755e9a0d20172fbc4c7cfdf", 0xad, 0x6, 0x0, 0x1, r1}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000001140)="94fafefd3077d23a948193435c0251b2f1331c36e29f4911582f869049b2fd6979818e1acf30413f0347d2bdedd5bd16d94978fbb3bde2c45927a691c27af5bd85d9a2503a5c491bfc689d29ce4d017e1f762d0f658097b13ce6e446b664acd85eb69767d27a9a334b8c44464d329cff0c66d13bcea76439dfccdb78653b2ef34e86b5e78345b64be750323fa2", 0x8d, 0x6, 0x0, 0x0, r0}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x7, r8, &(0x7f0000001240)="b17b72e59fc16adc3c9aecab8c5740cc", 0x10, 0x2, 0x0, 0x0, r9}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x6, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x2, r9}]) 98.489894ms ago: executing program 0 (id=981): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x17e) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) 16.427979ms ago: executing program 1 (id=982): socket(0x10, 0x803, 0x0) socketpair(0x2c, 0x800, 0x0, &(0x7f0000000080)) msgget$private(0x0, 0x3ac) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[], 0x3c}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 16.185189ms ago: executing program 0 (id=983): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) getpeername$packet(r0, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001300)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0xf1}}]}}}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000013c0)={'macvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2004050}, 0xc, &(0x7f0000001540)={&(0x7f00000015c0)=ANY=[@ANYBLOB="04010000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fddbdf250800000014000180080003000100000008000300020000001c0001800800030001000000080003000100000008000300030000004800018014000200697036746e6c3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000300010000000800030000000000080003000300000004000180500001801400020070696d7265673100000000000000000008000100", @ANYRES32=r2, @ANYBLOB="650003000100000008000100", @ANYRES32=r3, @ANYBLOB="080003000200000008000100", @ANYRES32, @ANYBLOB="080003000200000008000100", @ANYRES32=r5, @ANYBLOB="2400018008000100", @ANYRES32=r6, @ANYBLOB="080003000200000008000300020000004600030002000000918bca31c9d538cf03ba0f38d1bc5cacac7b3b289d2a070013dc6f1ec009f08219350000000000000000"], 0x104}, 0x1, 0x0, 0x0, 0x5}, 0x4000050) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb3", 0x11) dup2(0xffffffffffffffff, r0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 3 (id=984): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) getpeername$packet(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000013c0)={'macvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2004050}, 0xc, &(0x7f0000001540)={&(0x7f00000015c0)=ANY=[@ANYBLOB="04010000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fddbdf250800000014000180080003000100000008000300020000001c0001800800030001000000080003000100000008000300030000004800018014000200697036746e6c3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000300010000000800030000000000080003000300000004000180500001801400020070696d7265673100000000000000000008000100", @ANYRES32, @ANYBLOB="650003000100000008000100", @ANYRES32, @ANYBLOB="080003000200000008000100", @ANYRES32, @ANYBLOB="080003000200000008000100", @ANYRES32, @ANYBLOB="2400018008000100", @ANYRES32=r3, @ANYBLOB="080003000200000008000300020000004600030002000000918bca31c9d538cf03ba0f38d1bc5cacac7b3b289d2a070013dc6f1ec009f08219350000000000000000"], 0x104}, 0x1, 0x0, 0x0, 0x5}, 0x4000050) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb3", 0x11) socket$rxrpc(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): le1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.976564][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.996855][ T3707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.043435][ T3324] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 44.053855][ T3707] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.068797][ T3712] loop2: detected capacity change from 0 to 512 [ 44.103687][ T3712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 44.122178][ T3715] loop3: detected capacity change from 0 to 512 [ 44.136682][ T3720] bridge_slave_1: left allmulticast mode [ 44.142390][ T3720] bridge_slave_1: left promiscuous mode [ 44.148255][ T3720] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.164656][ T3712] ext4 filesystem being mounted at /16/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.176269][ T3715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.190770][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.202920][ T3720] bridge_slave_0: left allmulticast mode [ 44.208660][ T3720] bridge_slave_0: left promiscuous mode [ 44.214356][ T3720] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.225996][ T3715] ext4 filesystem being mounted at /14/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.245182][ T3715] syz.3.79 (3715) used greatest stack depth: 10032 bytes left [ 44.264763][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 44.284219][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.295228][ T3726] loop1: p1 p3 p4 [ 44.300271][ T3726] loop1: p4 size 589824 extends beyond EOD, truncated [ 44.352469][ T3726] random: crng reseeded on system resumption [ 44.359091][ T3731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.401141][ T3735] EXT4-fs: Ignoring removed nobh option [ 44.413935][ T3731] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.421126][ T3735] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 44.437807][ T3735] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 44.446984][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 44.459603][ T3735] EXT4-fs (loop2): orphan cleanup on readonly fs [ 44.466607][ T3735] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.85: attempt to clear invalid blocks 1024 len 1 [ 44.467980][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 44.490162][ T3735] EXT4-fs (loop2): Remounting filesystem read-only [ 44.497061][ T3735] EXT4-fs (loop2): 1 truncate cleaned up [ 44.507805][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 44.528689][ T3735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 44.546959][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 44.574585][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 44.593085][ T3744] EXT4-fs: Ignoring removed bh option [ 44.593671][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.598736][ T3744] EXT4-fs: Ignoring removed oldalloc option [ 44.626308][ T3744] EXT4-fs: Ignoring removed orlov option [ 44.629304][ T29] audit: type=1400 audit(1768865987.728:185): avc: denied { create } for pid=3745 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 44.667987][ T29] audit: type=1400 audit(1768865987.758:186): avc: denied { bind } for pid=3745 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 44.698598][ T3744] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.726297][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.772042][ T3754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.788226][ T3754] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.800174][ T29] audit: type=1400 audit(1768865987.898:187): avc: denied { setattr } for pid=3753 comm="syz.2.93" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.839296][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.865473][ T3756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 44.884638][ T3756] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.905490][ T3762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.916159][ T3756] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.94: lblock 0 mapped to illegal pblock 0 (length 1) [ 44.931936][ T3756] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 44.944299][ T3756] EXT4-fs (loop1): This should not happen!! Data will be lost [ 44.944299][ T3756] [ 44.955068][ T3762] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.974682][ T3756] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: comm syz.1.94: lblock 0 mapped to illegal pblock 0 (length 1) [ 44.998062][ T29] audit: type=1400 audit(1768865988.098:188): avc: denied { connect } for pid=3771 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.017499][ T29] audit: type=1400 audit(1768865988.098:189): avc: denied { name_connect } for pid=3771 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 45.041178][ T3756] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.94: bg 0: block 112: padding at end of block bitmap is not set [ 45.052353][ T3762] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.96: corrupted xattr block 32: invalid ea_ino [ 45.056070][ T3756] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 117 [ 45.080747][ T3756] EXT4-fs (loop1): This should not happen!! Data will be lost [ 45.080747][ T3756] [ 45.090901][ T3762] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 45.090999][ T3762] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.96: corrupted xattr block 32: invalid ea_ino [ 45.091102][ T3762] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 45.132932][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.135239][ T3309] loop2: p1 p3 p4 [ 45.136411][ T3309] loop2: p4 size 589824 extends beyond EOD, truncated [ 45.138939][ T3770] loop2: p1 p3 p4 [ 45.140137][ T3770] loop2: p4 size 589824 extends beyond EOD, truncated [ 45.147852][ T3770] random: crng reseeded on system resumption [ 45.166503][ T3756] syz.1.94 (3756) used greatest stack depth: 9688 bytes left [ 45.168246][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 45.189953][ T3692] udevd[3692]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 45.198862][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 45.207988][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 45.272930][ T3776] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 45.306220][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 45.313277][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 45.318781][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 45.343729][ T3786] EXT4-fs: Ignoring removed bh option [ 45.349239][ T3786] EXT4-fs: Ignoring removed oldalloc option [ 45.355751][ T29] audit: type=1400 audit(1768865988.438:190): avc: denied { read } for pid=3779 comm="syz.4.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.406584][ T3773] syz.0.99: attempt to access beyond end of device [ 45.406584][ T3773] loop0: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 45.407823][ T3786] EXT4-fs: Ignoring removed orlov option [ 45.445024][ T29] audit: type=1400 audit(1768865988.478:191): avc: denied { mount } for pid=3784 comm="syz.1.103" name="/" dev="loop1" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 45.456084][ T3793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.484151][ T3773] syz.0.99: attempt to access beyond end of device [ 45.484151][ T3773] loop0: rw=8390659, sector=6952, nr_sectors = 942 limit=128 [ 45.504312][ T3793] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.527260][ T3786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.543146][ T3776] FAT-fs (loop0): FAT read failed (blocknr 128) [ 45.553698][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.573542][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.585554][ T29] audit: type=1400 audit(1768865988.568:192): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 45.605667][ T29] audit: type=1400 audit(1768865988.638:193): avc: denied { getopt } for pid=3779 comm="syz.4.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.654166][ T3804] Zero length message leads to an empty skb [ 45.748794][ T3814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 45.761310][ T3814] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.775401][ T3814] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.114: lblock 0 mapped to illegal pblock 0 (length 1) [ 45.775822][ T3814] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 45.801327][ T3814] EXT4-fs (loop3): This should not happen!! Data will be lost [ 45.801327][ T3814] [ 45.808741][ T3814] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #15: comm syz.3.114: lblock 0 mapped to illegal pblock 0 (length 1) [ 45.826213][ T3814] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.114: bg 0: block 112: padding at end of block bitmap is not set [ 45.826439][ T3814] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 117 [ 45.826483][ T3814] EXT4-fs (loop3): This should not happen!! Data will be lost [ 45.826483][ T3814] [ 45.831336][ T3819] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 45.906497][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 45.946808][ T3823] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.966386][ T3823] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.975172][ T3819] syz.1.111: attempt to access beyond end of device [ 45.975172][ T3819] loop1: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 45.997899][ T3819] syz.1.111: attempt to access beyond end of device [ 45.997899][ T3819] loop1: rw=8390659, sector=6952, nr_sectors = 942 limit=128 [ 46.023628][ T3818] FAT-fs (loop1): FAT read failed (blocknr 128) [ 46.043607][ T3827] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.059291][ T3829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.074962][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.084082][ T3829] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.112927][ T3317] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 46.137520][ T3835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.151064][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.173377][ T3835] ext4 filesystem being mounted at /18/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.274909][ T3847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.291958][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.314499][ T3847] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.362369][ T3847] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.122: corrupted xattr block 32: invalid ea_ino [ 46.375995][ T3847] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 46.386391][ T3847] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.122: corrupted xattr block 32: invalid ea_ino [ 46.399734][ T3847] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 46.445667][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.466543][ T3857] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.482765][ T3859] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.496461][ T3857] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.128: bg 0: block 112: padding at end of block bitmap is not set [ 46.523687][ T3857] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 117 [ 46.536264][ T3857] EXT4-fs (loop4): This should not happen!! Data will be lost [ 46.536264][ T3857] [ 46.662010][ T3872] EXT4-fs (loop2): shut down requested (2) [ 46.808795][ T3891] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.083606][ T3904] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.118008][ T3904] EXT4-fs (loop4): shut down requested (2) [ 47.125826][ T3908] EXT4-fs: Ignoring removed bh option [ 47.127585][ T3874] syz.1.134: attempt to access beyond end of device [ 47.127585][ T3874] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 47.144960][ T3874] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 47.154675][ T3886] syz.1.134: attempt to access beyond end of device [ 47.154675][ T3886] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 47.168289][ T3886] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 47.179180][ T3908] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.188359][ T3908] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 47.207467][ T3908] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 47.218399][ T3908] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e018, mo2=0006] [ 47.260104][ T3908] System zones: 0-2, 18-18, 34-35 [ 47.378960][ T3916] EXT4-fs (loop1): shut down requested (2) [ 47.418233][ T3921] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 47.425382][ T3889] syz.2.139: attempt to access beyond end of device [ 47.425382][ T3889] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 47.442587][ T3889] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 47.452213][ T3896] syz.2.139: attempt to access beyond end of device [ 47.452213][ T3896] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 47.465888][ T3896] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 47.487303][ T3921] syz.4.146: attempt to access beyond end of device [ 47.487303][ T3921] loop4: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 47.555842][ T3921] syz.4.146: attempt to access beyond end of device [ 47.555842][ T3921] loop4: rw=8390659, sector=6952, nr_sectors = 942 limit=128 [ 47.644487][ T3922] FAT-fs (loop4): FAT read failed (blocknr 128) [ 47.663465][ T3938] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.704145][ T3938] EXT4-fs (loop3): shut down requested (2) [ 47.723454][ T3944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.158'. [ 47.733383][ T3942] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.747901][ T3942] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.157: bg 0: block 112: padding at end of block bitmap is not set [ 47.763258][ T3942] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 117 [ 47.775844][ T3942] EXT4-fs (loop2): This should not happen!! Data will be lost [ 47.775844][ T3942] [ 47.829914][ T3942] syz.2.157 (3942) used greatest stack depth: 9672 bytes left [ 47.850838][ T3952] ext4 filesystem being mounted at /34/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.872462][ T3958] FAT-fs (loop0): Directory bread(block 1285) failed [ 47.879844][ T3309] loop3: p1 p3 p4 [ 47.884366][ T3958] FAT-fs (loop0): Directory bread(block 1286) failed [ 47.891407][ T3958] FAT-fs (loop0): Directory bread(block 1287) failed [ 47.899730][ T3309] loop3: p4 size 589824 extends beyond EOD, truncated [ 47.900508][ T3958] FAT-fs (loop0): Directory bread(block 1288) failed [ 47.929866][ T3950] loop3: p1 p3 p4 [ 47.935750][ T3950] loop3: p4 size 589824 extends beyond EOD, truncated [ 47.949330][ T3960] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.084226][ T3970] FAT-fs (loop2): Directory bread(block 1285) failed [ 48.115353][ T3970] FAT-fs (loop2): Directory bread(block 1286) failed [ 48.144556][ T3970] FAT-fs (loop2): Directory bread(block 1287) failed [ 48.153498][ T3970] FAT-fs (loop2): Directory bread(block 1288) failed [ 48.161950][ T3972] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.174502][ T3978] netlink: 28 bytes leftover after parsing attributes in process `syz.4.172'. [ 48.176416][ T3976] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.195643][ T3970] FAT-fs (loop2): Directory bread(block 1285) failed [ 48.218873][ T3970] FAT-fs (loop2): Directory bread(block 1286) failed [ 48.225758][ T3970] FAT-fs (loop2): Directory bread(block 1287) failed [ 48.232557][ T3970] FAT-fs (loop2): Directory bread(block 1288) failed [ 48.239461][ T3970] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 48.258137][ T3972] EXT4-fs (loop1): shut down requested (2) [ 48.362145][ T3989] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.382038][ T3997] set_capacity_and_notify: 41 callbacks suppressed [ 48.382071][ T3997] loop0: detected capacity change from 0 to 128 [ 48.397376][ T3995] loop3: detected capacity change from 0 to 1024 [ 48.404176][ T3995] EXT4-fs: Ignoring removed bh option [ 48.409748][ T3995] EXT4-fs: Ignoring removed oldalloc option [ 48.477376][ T3997] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.511238][ T3995] EXT4-fs: Ignoring removed orlov option [ 48.574712][ T3989] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.174: corrupted xattr block 32: invalid ea_ino [ 48.624648][ T3989] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 48.633663][ T3989] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.174: corrupted xattr block 32: invalid ea_ino [ 48.694767][ T3989] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 49.011921][ T4018] loop2: detected capacity change from 0 to 512 [ 49.052534][ T4018] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.074859][ T4018] EXT4-fs (loop2): shut down requested (2) [ 49.166287][ T4023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.186'. [ 49.323099][ T4029] loop2: detected capacity change from 0 to 128 [ 49.343233][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 49.343250][ T29] audit: type=1400 audit(1768865992.438:201): avc: denied { read } for pid=4026 comm="syz.2.189" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.518300][ T4034] loop1: detected capacity change from 0 to 512 [ 49.554123][ T4039] loop0: detected capacity change from 0 to 128 [ 49.561835][ T4034] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 49.575876][ T29] audit: type=1400 audit(1768865992.678:202): avc: denied { accept } for pid=4030 comm="syz.4.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 49.585149][ T4034] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #13: comm syz.1.191: iget: bad i_size value: 12154757448730 [ 49.679228][ T4034] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.191: couldn't read orphan inode 13 (err -117) [ 49.705531][ T4044] loop3: detected capacity change from 0 to 128 [ 49.925324][ T4032] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 49.964592][ T4029] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 49.973641][ T4032] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 50.062721][ T4048] loop1: detected capacity change from 0 to 512 [ 50.078960][ T4048] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 50.097759][ T4048] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #13: comm syz.1.194: iget: bad i_size value: 12154757448730 [ 50.134923][ T4048] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.194: couldn't read orphan inode 13 (err -117) [ 50.293483][ T4053] loop1: detected capacity change from 0 to 512 [ 50.300450][ T4043] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 50.326013][ T4053] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.356506][ T4043] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 50.385587][ T4053] EXT4-fs (loop1): shut down requested (2) [ 50.469708][ T4044] bio_check_eod: 5 callbacks suppressed [ 50.469723][ T4044] syz.3.193: attempt to access beyond end of device [ 50.469723][ T4044] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 50.488995][ T4044] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 50.512526][ T4047] syz.3.193: attempt to access beyond end of device [ 50.512526][ T4047] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 50.727417][ T4072] loop0: detected capacity change from 0 to 512 [ 50.747916][ T4072] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.851164][ T4076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.200'. [ 51.461599][ T4086] syz.3.207: attempt to access beyond end of device [ 51.461599][ T4086] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 51.475838][ T4086] syz.3.207: attempt to access beyond end of device [ 51.475838][ T4086] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 51.542166][ T4093] syz.2.210: attempt to access beyond end of device [ 51.542166][ T4093] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 51.556572][ T4093] syz.2.210: attempt to access beyond end of device [ 51.556572][ T4093] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 51.703933][ T4090] syz.4.209: attempt to access beyond end of device [ 51.703933][ T4090] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 51.724700][ T4094] syz.4.209: attempt to access beyond end of device [ 51.724700][ T4094] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 51.779836][ T4102] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.914906][ T4113] uprobe: syz.2.215:4113 failed to unregister, leaking uprobe [ 51.925031][ T4114] iso9660: Bad value for 'uid' [ 51.929851][ T4114] iso9660: Bad value for 'uid' [ 51.963798][ T4116] iso9660: Bad value for 'uid' [ 51.968720][ T4116] iso9660: Bad value for 'uid' [ 52.270140][ T4109] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 52.287806][ T4109] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.215: iget: bad i_size value: 12154757448730 [ 52.342304][ T4109] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.215: couldn't read orphan inode 13 (err -117) [ 52.444819][ T29] audit: type=1400 audit(1768865995.548:203): avc: denied { create } for pid=4124 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.465806][ T3309] loop1: p1 p3 p4 [ 52.475549][ T3309] loop1: p4 size 589824 extends beyond EOD, truncated [ 52.492665][ T4122] loop1: p1 p3 p4 [ 52.515433][ T4122] loop1: p4 size 589824 extends beyond EOD, truncated [ 52.568010][ T3005] loop1: p1 p3 p4 [ 52.579585][ T3005] loop1: p4 size 589824 extends beyond EOD, truncated [ 52.597192][ T4125] loop2: p1 p2 p3 p4 [ 52.601272][ T4125] loop2: p1 size 262144 extends beyond EOD, truncated [ 52.651243][ T4125] loop2: p2 start 4293394690 is beyond EOD, truncated [ 52.658091][ T4125] loop2: p3 size 100663552 extends beyond EOD, truncated [ 52.670604][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 52.684851][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 52.698768][ T4125] loop2: p4 size 50331648 extends beyond EOD, truncated [ 52.739869][ T4128] iso9660: Bad value for 'uid' [ 52.744724][ T4128] iso9660: Bad value for 'uid' [ 52.771808][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 52.794305][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 52.927661][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 52.928568][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 52.931242][ T3964] udevd[3964]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 52.990240][ T4140] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 53.107481][ T4140] syz.4.223: attempt to access beyond end of device [ 53.107481][ T4140] loop4: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 53.107552][ T4140] syz.4.223: attempt to access beyond end of device [ 53.107552][ T4140] loop4: rw=8390659, sector=6952, nr_sectors = 942 limit=128 [ 53.185198][ T4144] FAT-fs (loop4): FAT read failed (blocknr 128) [ 53.276100][ T4134] buffer_io_error: 7 callbacks suppressed [ 53.276141][ T4134] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 53.299191][ T4130] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 53.300249][ T4147] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.302054][ T4134] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 53.412265][ T4151] set_capacity_and_notify: 15 callbacks suppressed [ 53.412282][ T4151] loop3: detected capacity change from 0 to 1024 [ 53.424878][ T4153] loop0: detected capacity change from 0 to 1024 [ 53.426600][ T4153] EXT4-fs: Ignoring removed bh option [ 53.426622][ T4153] EXT4-fs: Ignoring removed oldalloc option [ 53.426691][ T4153] EXT4-fs: Ignoring removed orlov option [ 53.428262][ T4151] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.435748][ T4151] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.228: bg 0: block 112: padding at end of block bitmap is not set [ 53.436143][ T4151] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 117 [ 53.436204][ T4151] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.436204][ T4151] [ 53.468831][ T4138] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 53.469120][ T4138] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 53.784207][ T4174] loop1: detected capacity change from 0 to 512 [ 53.888377][ T4178] loop4: detected capacity change from 0 to 164 [ 53.902878][ T4178] iso9660: Bad value for 'uid' [ 53.907749][ T4178] iso9660: Bad value for 'uid' [ 53.922108][ T4177] loop0: detected capacity change from 0 to 164 [ 53.933157][ T4177] iso9660: Bad value for 'uid' [ 53.938082][ T4177] iso9660: Bad value for 'uid' [ 54.528772][ T4184] loop3: detected capacity change from 0 to 128 [ 54.738457][ T4191] loop0: detected capacity change from 0 to 1024 [ 54.754885][ T4193] loop2: detected capacity change from 0 to 128 [ 54.763775][ T4191] EXT4-fs: Ignoring removed bh option [ 54.769239][ T4191] EXT4-fs: Ignoring removed oldalloc option [ 54.779075][ T4195] loop4: detected capacity change from 0 to 128 [ 54.806701][ T4191] EXT4-fs: Ignoring removed orlov option [ 54.819541][ T4187] loop1: detected capacity change from 0 to 8192 [ 54.865943][ T3309] loop1: p1 p2 p3 p4 [ 54.870573][ T3309] loop1: p1 size 262144 extends beyond EOD, truncated [ 54.879232][ T3309] loop1: p2 start 4293394690 is beyond EOD, truncated [ 54.886109][ T3309] loop1: p3 size 100663552 extends beyond EOD, truncated [ 54.895092][ T3309] loop1: p4 size 50331648 extends beyond EOD, truncated [ 54.906041][ T4187] loop1: p1 p2 p3 p4 [ 54.910620][ T4187] loop1: p1 size 262144 extends beyond EOD, truncated [ 54.920451][ T4187] loop1: p2 start 4293394690 is beyond EOD, truncated [ 54.927400][ T4187] loop1: p3 size 100663552 extends beyond EOD, truncated [ 54.936220][ T4187] loop1: p4 size 50331648 extends beyond EOD, truncated [ 55.199633][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 55.210510][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 55.296348][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 55.352854][ T4185] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 55.399720][ T4184] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 55.409593][ T4185] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 55.510219][ T4195] bio_check_eod: 8 callbacks suppressed [ 55.510234][ T4195] syz.4.241: attempt to access beyond end of device [ 55.510234][ T4195] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 55.529462][ T4195] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 55.539275][ T4195] syz.4.241: attempt to access beyond end of device [ 55.539275][ T4195] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 55.552916][ T4195] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 55.745090][ T4202] syz.0.244: attempt to access beyond end of device [ 55.745090][ T4202] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 55.759121][ T4204] syz.0.244: attempt to access beyond end of device [ 55.759121][ T4204] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 55.815806][ T4221] iso9660: Bad value for 'uid' [ 55.820684][ T4221] iso9660: Bad value for 'uid' [ 55.915075][ T4227] uprobe: syz.3.252:4227 failed to unregister, leaking uprobe [ 56.006536][ T4224] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 56.020709][ T4224] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #13: comm syz.3.252: iget: bad i_size value: 12154757448730 [ 56.042570][ T4224] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.252: couldn't read orphan inode 13 (err -117) [ 56.202049][ T4218] syz.4.250: attempt to access beyond end of device [ 56.202049][ T4218] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 56.247468][ T4220] syz.4.250: attempt to access beyond end of device [ 56.247468][ T4220] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 56.326552][ T4228] syz.0.253: attempt to access beyond end of device [ 56.326552][ T4228] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 56.355799][ T4226] syz.0.253: attempt to access beyond end of device [ 56.355799][ T4226] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 56.378203][ T4228] syz.0.253: attempt to access beyond end of device [ 56.378203][ T4228] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 56.477994][ T4237] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.508084][ T4240] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.529425][ T29] audit: type=1400 audit(1768865999.628:204): avc: denied { read } for pid=4236 comm="syz.3.257" path="/58/file1/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.542463][ T4240] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm syz.0.259: lblock 0 mapped to illegal pblock 0 (length 6) [ 56.583906][ T29] audit: type=1400 audit(1768865999.628:205): avc: denied { setattr } for pid=4236 comm="syz.3.257" path="/58/file1/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.586629][ T4240] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 56.619196][ T4240] EXT4-fs (loop0): This should not happen!! Data will be lost [ 56.619196][ T4240] [ 56.819200][ T37] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 56.845072][ T37] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 56.857413][ T37] EXT4-fs (loop0): This should not happen!! Data will be lost [ 56.857413][ T37] [ 56.990779][ T4261] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.235181][ T4251] syz.1.262: attempt to access beyond end of device [ 57.235181][ T4251] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 57.821320][ T4280] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.966770][ T29] audit: type=1400 audit(1768866001.068:206): avc: denied { audit_write } for pid=4285 comm="syz.0.273" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 57.994902][ T4286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.273'. [ 57.994917][ T29] audit: type=1107 audit(1768866001.088:207): pid=4285 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 58.064951][ T4286] hsr_slave_1 (unregistering): left promiscuous mode [ 58.229172][ T29] audit: type=1400 audit(1768866001.328:208): avc: denied { name_connect } for pid=4288 comm="syz.1.274" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 58.306338][ T4294] sctp: [Deprecated]: syz.1.274 (pid 4294) Use of struct sctp_assoc_value in delayed_ack socket option. [ 58.306338][ T4294] Use struct sctp_sack_info instead [ 58.493820][ T4283] buffer_io_error: 17 callbacks suppressed [ 58.493874][ T4283] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 58.510526][ T4284] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 58.827908][ T4291] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 58.908700][ T4304] set_capacity_and_notify: 20 callbacks suppressed [ 58.908719][ T4304] loop0: detected capacity change from 0 to 128 [ 58.925508][ T4293] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 58.934708][ T4297] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 58.995952][ T4305] loop2: detected capacity change from 0 to 128 [ 59.018469][ T4305] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 59.034216][ T4296] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 59.055351][ T4298] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 59.086533][ T4309] loop1: detected capacity change from 0 to 128 [ 59.117795][ T4305] FAT-fs (loop2): FAT read failed (blocknr 128) [ 59.500855][ T4309] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 59.520944][ T4316] loop3: detected capacity change from 0 to 512 [ 59.557398][ T4316] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.626978][ T4324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 59.639226][ T29] audit: type=1107 audit(1768866002.718:209): pid=4323 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 59.672919][ T4324] hsr_slave_1 (unregistering): left promiscuous mode [ 59.748712][ T4331] loop2: detected capacity change from 0 to 128 [ 59.766026][ T29] audit: type=1400 audit(1768866002.868:210): avc: denied { write } for pid=4332 comm="syz.3.288" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.772953][ T4333] netlink: 'syz.3.288': attribute type 21 has an invalid length. [ 59.796892][ T4333] netlink: 128 bytes leftover after parsing attributes in process `syz.3.288'. [ 59.806034][ T4331] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.816653][ T4333] netlink: 3 bytes leftover after parsing attributes in process `syz.3.288'. [ 59.824948][ T29] audit: type=1400 audit(1768866002.868:211): avc: denied { open } for pid=4332 comm="syz.3.288" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.848758][ T29] audit: type=1400 audit(1768866002.868:212): avc: denied { ioctl } for pid=4332 comm="syz.3.288" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.908618][ T4333] netlink: 'syz.3.288': attribute type 4 has an invalid length. [ 59.917337][ T29] audit: type=1400 audit(1768866003.018:213): avc: denied { create } for pid=4332 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=socket permissive=1 [ 59.947429][ T4340] loop1: detected capacity change from 0 to 128 [ 59.960376][ T4340] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.008625][ T4344] loop2: detected capacity change from 0 to 2048 [ 60.053536][ T4349] loop1: detected capacity change from 0 to 128 [ 60.060362][ T3309] loop2: p1 p3 p4 [ 60.067086][ T3309] loop2: p4 size 589824 extends beyond EOD, truncated [ 60.103464][ T4344] loop2: p1 p3 p4 [ 60.111677][ T4344] loop2: p4 size 589824 extends beyond EOD, truncated [ 60.236866][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 60.248579][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 60.248540][ T3964] udevd[3964]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 60.295486][ T3964] udevd[3964]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 60.301526][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 60.315765][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 60.676014][ T4354] bio_check_eod: 19 callbacks suppressed [ 60.676072][ T4354] syz.1.293: attempt to access beyond end of device [ 60.676072][ T4354] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 60.695479][ T4354] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 60.719387][ T4361] loop4: detected capacity change from 0 to 128 [ 60.744348][ T4349] syz.1.293: attempt to access beyond end of device [ 60.744348][ T4349] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 60.758053][ T4349] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 60.889216][ T4364] loop2: detected capacity change from 0 to 512 [ 60.927593][ T4364] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.112761][ T4376] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.237334][ T4362] syz.4.299: attempt to access beyond end of device [ 61.237334][ T4362] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 61.277603][ T4379] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 61.287904][ T4361] syz.4.299: attempt to access beyond end of device [ 61.287904][ T4361] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 61.308959][ T4384] netlink: 'syz.1.306': attribute type 21 has an invalid length. [ 61.316750][ T4384] netlink: 128 bytes leftover after parsing attributes in process `syz.1.306'. [ 61.360260][ T4384] netlink: 3 bytes leftover after parsing attributes in process `syz.1.306'. [ 61.405096][ T4362] syz.4.299: attempt to access beyond end of device [ 61.405096][ T4362] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 61.483486][ T4378] syz.3.303: attempt to access beyond end of device [ 61.483486][ T4378] loop3: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 61.599887][ T4378] syz.3.303: attempt to access beyond end of device [ 61.599887][ T4378] loop3: rw=8390659, sector=6952, nr_sectors = 942 limit=128 [ 61.630806][ T4369] syz.0.301: attempt to access beyond end of device [ 61.630806][ T4369] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 61.631974][ T4372] syz.0.301: attempt to access beyond end of device [ 61.631974][ T4372] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 61.648290][ T4400] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 61.658493][ T4397] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 61.673073][ T4400] syz.1.309: attempt to access beyond end of device [ 61.673073][ T4400] loop1: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 61.684509][ T4379] FAT-fs (loop3): FAT read failed (blocknr 128) [ 61.722753][ T4397] FAT-fs (loop4): FAT read failed (blocknr 128) [ 61.776722][ T4400] FAT-fs (loop1): FAT read failed (blocknr 128) [ 62.189378][ T4416] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.485257][ T4431] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.556625][ T4436] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 62.645741][ T4436] FAT-fs (loop4): FAT read failed (blocknr 128) [ 63.156118][ T4455] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.368056][ T4464] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.424797][ T4464] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.331: lblock 0 mapped to illegal pblock 0 (length 6) [ 63.453246][ T4464] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 63.465664][ T4464] EXT4-fs (loop4): This should not happen!! Data will be lost [ 63.465664][ T4464] [ 63.535696][ T52] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 63.594626][ T52] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 63.607037][ T52] EXT4-fs (loop4): This should not happen!! Data will be lost [ 63.607037][ T52] [ 63.740518][ T4471] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 63.911729][ T4471] FAT-fs (loop0): FAT read failed (blocknr 128) [ 63.956410][ T4461] buffer_io_error: 13 callbacks suppressed [ 63.956470][ T4461] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 63.971032][ T4463] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 64.185793][ T4485] set_capacity_and_notify: 18 callbacks suppressed [ 64.185808][ T4485] loop2: detected capacity change from 0 to 2048 [ 64.274704][ T4485] loop2: p1 p3 p4 [ 64.291778][ T4485] loop2: p4 size 589824 extends beyond EOD, truncated [ 64.352857][ T4485] random: crng reseeded on system resumption [ 64.435559][ T4492] loop2: detected capacity change from 0 to 128 [ 64.481885][ T4496] loop3: detected capacity change from 0 to 1024 [ 64.619536][ T4500] loop0: detected capacity change from 0 to 512 [ 64.697790][ T4500] ext4 filesystem being mounted at /63/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.932350][ T4505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'. [ 64.957201][ T4505] hsr_slave_1 (unregistering): left promiscuous mode [ 65.017412][ T4511] loop0: detected capacity change from 0 to 512 [ 65.045678][ T4513] loop1: detected capacity change from 0 to 128 [ 65.087564][ T4511] ext4 filesystem being mounted at /64/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.127567][ T4521] loop4: detected capacity change from 0 to 256 [ 65.157073][ T4521] FAT-fs (loop4): Directory bread(block 1285) failed [ 65.164322][ T4521] FAT-fs (loop4): Directory bread(block 1286) failed [ 65.177428][ T4521] FAT-fs (loop4): Directory bread(block 1287) failed [ 65.194863][ T4521] FAT-fs (loop4): Directory bread(block 1288) failed [ 65.226116][ T4521] FAT-fs (loop4): Directory bread(block 1285) failed [ 65.232982][ T4521] FAT-fs (loop4): Directory bread(block 1286) failed [ 65.259913][ T4524] loop0: detected capacity change from 0 to 512 [ 65.283111][ T4521] FAT-fs (loop4): Directory bread(block 1287) failed [ 65.326775][ T4521] FAT-fs (loop4): Directory bread(block 1288) failed [ 65.348477][ T4532] loop3: detected capacity change from 0 to 512 [ 65.355075][ T4521] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 65.357483][ T4524] ext4 filesystem being mounted at /65/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.408119][ T4535] loop2: detected capacity change from 0 to 512 [ 65.414698][ T4532] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.488177][ T4532] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.356: corrupted xattr block 32: invalid ea_ino [ 65.518831][ T4532] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 65.576761][ T4535] ext4 filesystem being mounted at /78/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.617386][ T4532] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.356: corrupted xattr block 32: invalid ea_ino [ 65.701002][ T4532] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 65.822813][ T4513] bio_check_eod: 17 callbacks suppressed [ 65.822866][ T4513] syz.1.349: attempt to access beyond end of device [ 65.822866][ T4513] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 65.842415][ T4513] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 65.852657][ T4513] syz.1.349: attempt to access beyond end of device [ 65.852657][ T4513] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 65.866381][ T4513] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 65.877186][ T4548] netlink: 'syz.3.360': attribute type 21 has an invalid length. [ 65.885022][ T4548] netlink: 128 bytes leftover after parsing attributes in process `syz.3.360'. [ 65.925898][ T4548] netlink: 3 bytes leftover after parsing attributes in process `syz.3.360'. [ 65.966097][ T4550] ext4 filesystem being mounted at /79/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.009195][ T4552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'. [ 66.041500][ T4558] ext4 filesystem being mounted at /84/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.856851][ T4572] syz.2.368: attempt to access beyond end of device [ 66.856851][ T4572] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 66.870520][ T4572] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 67.035081][ T4587] netlink: 'syz.0.374': attribute type 21 has an invalid length. [ 67.042886][ T4587] netlink: 128 bytes leftover after parsing attributes in process `syz.0.374'. [ 67.060187][ T4574] syz.3.369: attempt to access beyond end of device [ 67.060187][ T4574] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 67.073850][ T4574] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 67.094794][ T4587] netlink: 3 bytes leftover after parsing attributes in process `syz.0.374'. [ 67.104467][ T4577] syz.3.369: attempt to access beyond end of device [ 67.104467][ T4577] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 67.118110][ T4577] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 67.246625][ T4590] ext4 filesystem being mounted at /70/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.334193][ T4596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'. [ 67.354877][ T4594] ext4 filesystem being mounted at /75/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.386579][ T4596] hsr_slave_1 (unregistering): left promiscuous mode [ 67.494937][ T4588] syz.2.373: attempt to access beyond end of device [ 67.494937][ T4588] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 67.508594][ T4588] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 67.576377][ T4585] syz.2.373: attempt to access beyond end of device [ 67.576377][ T4585] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 67.590141][ T4585] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 67.631543][ T4588] syz.2.373: attempt to access beyond end of device [ 67.631543][ T4588] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 67.646366][ T4588] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 67.902879][ T4625] ext4 filesystem being mounted at /61/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.004187][ T4630] ext4 filesystem being mounted at /84/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.195802][ T4637] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.326282][ T4646] ext4 filesystem being mounted at /74/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.418692][ T4653] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.479680][ T4654] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 68.518740][ T4654] syz.4.395: attempt to access beyond end of device [ 68.518740][ T4654] loop4: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 68.532538][ T4654] syz.4.395: attempt to access beyond end of device [ 68.532538][ T4654] loop4: rw=8390659, sector=6952, nr_sectors = 942 limit=128 [ 68.591349][ T4654] FAT-fs (loop4): FAT read failed (blocknr 128) [ 68.804536][ T4671] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 68.861963][ T4670] FAT-fs (loop3): FAT read failed (blocknr 128) [ 68.939557][ T4677] ext4 filesystem being mounted at /77/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.005582][ T29] audit: type=1107 audit(1768866012.108:214): pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 69.043650][ T4682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'. [ 69.097110][ T4691] ext4 filesystem being mounted at /79/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.236769][ T4702] set_capacity_and_notify: 21 callbacks suppressed [ 69.236793][ T4702] loop2: detected capacity change from 0 to 256 [ 69.252079][ T4702] FAT-fs (loop2): Directory bread(block 1285) failed [ 69.259048][ T4702] FAT-fs (loop2): Directory bread(block 1286) failed [ 69.267640][ T4702] FAT-fs (loop2): Directory bread(block 1287) failed [ 69.281115][ T4704] loop0: detected capacity change from 0 to 128 [ 69.290628][ T4702] FAT-fs (loop2): Directory bread(block 1288) failed [ 69.313662][ T4702] FAT-fs (loop2): Directory bread(block 1285) failed [ 69.335476][ T4702] FAT-fs (loop2): Directory bread(block 1286) failed [ 69.342230][ T4702] FAT-fs (loop2): Directory bread(block 1287) failed [ 69.354063][ T29] audit: type=1107 audit(1768866012.458:215): pid=4705 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 69.367174][ T4708] loop0: detected capacity change from 0 to 128 [ 69.384970][ T4702] FAT-fs (loop2): Directory bread(block 1288) failed [ 69.391885][ T4708] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.404305][ T4702] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 69.428275][ T4712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.416'. [ 69.495183][ T4717] loop2: detected capacity change from 0 to 128 [ 69.524254][ T4719] loop0: detected capacity change from 0 to 1024 [ 69.541572][ T4719] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.581657][ T4719] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm syz.0.419: lblock 0 mapped to illegal pblock 0 (length 6) [ 69.608646][ T4719] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 69.621089][ T4719] EXT4-fs (loop0): This should not happen!! Data will be lost [ 69.621089][ T4719] [ 69.646139][ T4724] loop3: detected capacity change from 0 to 1024 [ 69.666857][ T4724] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.691552][ T4724] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.421: lblock 0 mapped to illegal pblock 0 (length 6) [ 69.714895][ T4724] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 69.727376][ T4724] EXT4-fs (loop3): This should not happen!! Data will be lost [ 69.727376][ T4724] [ 69.826372][ T52] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 69.845284][ T4732] loop4: detected capacity change from 0 to 512 [ 69.854817][ T4329] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:12: lblock 8 mapped to illegal pblock 8 (length 8) [ 69.882661][ T52] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 69.895010][ T52] EXT4-fs (loop0): This should not happen!! Data will be lost [ 69.895010][ T52] [ 69.904655][ T4329] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 69.916977][ T4329] EXT4-fs (loop3): This should not happen!! Data will be lost [ 69.916977][ T4329] [ 69.928406][ T3324] EXT4-fs unmount: 142 callbacks suppressed [ 69.928425][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 69.952062][ T4732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.970165][ T4732] ext4 filesystem being mounted at /68/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.980960][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 70.069408][ T4742] loop3: detected capacity change from 0 to 512 [ 70.106625][ T4742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.122717][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.138724][ T29] audit: type=1107 audit(1768866013.238:216): pid=4745 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 70.152115][ T4742] ext4 filesystem being mounted at /95/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.209773][ T4746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.428'. [ 70.292041][ T4755] loop1: detected capacity change from 0 to 512 [ 70.303274][ T4717] buffer_io_error: 3 callbacks suppressed [ 70.303290][ T4717] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 70.328506][ T4755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.341653][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.362417][ T4755] ext4 filesystem being mounted at /85/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.387284][ T4759] loop4: detected capacity change from 0 to 1024 [ 70.424364][ T4759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 70.451138][ T4759] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.465377][ T4759] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.433: lblock 0 mapped to illegal pblock 0 (length 6) [ 70.478887][ T4759] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 70.491244][ T4759] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.491244][ T4759] [ 70.511690][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.531094][ T37] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 70.546644][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 70.559004][ T37] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.559004][ T37] [ 70.573159][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 70.731477][ T4775] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.784817][ T3318] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 70.807012][ T29] audit: type=1400 audit(1768866013.908:217): avc: denied { create } for pid=4777 comm="syz.1.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.838123][ T29] audit: type=1400 audit(1768866013.908:218): avc: denied { name_bind } for pid=4777 comm="syz.1.440" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 70.859937][ T29] audit: type=1400 audit(1768866013.908:219): avc: denied { create } for pid=4777 comm="syz.1.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.879618][ T29] audit: type=1400 audit(1768866013.908:220): avc: denied { connect } for pid=4777 comm="syz.1.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.899258][ T29] audit: type=1400 audit(1768866013.908:221): avc: denied { bpf } for pid=4777 comm="syz.1.440" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 70.919844][ T29] audit: type=1400 audit(1768866013.908:222): avc: denied { perfmon } for pid=4777 comm="syz.1.440" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.101889][ T29] audit: type=1400 audit(1768866014.198:223): avc: denied { ioctl } for pid=4777 comm="syz.1.440" path="socket:[8744]" dev="sockfs" ino=8744 ioctlcmd=0x48e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.349093][ T4794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.374621][ T4794] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.432539][ T4794] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.446: corrupted xattr block 32: invalid ea_ino [ 71.450967][ T4794] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 71.453155][ T4798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.472718][ T4794] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.446: corrupted xattr block 32: invalid ea_ino [ 71.492057][ T4794] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 71.502195][ T4798] ext4 filesystem being mounted at /97/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.527507][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.621656][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.642987][ T4810] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 71.683853][ T4810] bio_check_eod: 6 callbacks suppressed [ 71.683868][ T4810] syz.1.449: attempt to access beyond end of device [ 71.683868][ T4810] loop1: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 71.703535][ T4810] syz.1.449: attempt to access beyond end of device [ 71.703535][ T4810] loop1: rw=8390659, sector=6952, nr_sectors = 942 limit=128 [ 71.729267][ T4810] FAT-fs (loop1): FAT read failed (blocknr 128) [ 73.066728][ T4834] syz.3.459: attempt to access beyond end of device [ 73.066728][ T4834] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 73.080801][ T4834] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 73.086239][ T4826] syz.2.456: attempt to access beyond end of device [ 73.086239][ T4826] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 73.090676][ T4835] syz.3.459: attempt to access beyond end of device [ 73.090676][ T4835] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 73.103000][ T4826] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 73.125243][ T4835] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 73.216192][ T4841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.261905][ T4841] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.284860][ T4850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'. [ 73.306415][ T4854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.335005][ T4854] ext4 filesystem being mounted at /96/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.412522][ T4841] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.462: corrupted xattr block 32: invalid ea_ino [ 73.479706][ T4841] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 73.489091][ T4841] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.462: corrupted xattr block 32: invalid ea_ino [ 73.511182][ T4841] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 73.526061][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.560496][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.647985][ T4866] EXT4-fs: inline encryption not supported [ 73.683211][ T4866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.821344][ T4866] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 73.836964][ T4866] EXT4-fs (loop2): Remounting filesystem read-only [ 73.883478][ T4861] syz.3.467: attempt to access beyond end of device [ 73.883478][ T4861] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 73.897322][ T4861] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 73.925447][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.169711][ T4879] syz.0.474: attempt to access beyond end of device [ 74.169711][ T4879] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 74.183395][ T4879] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 74.196188][ T4880] syz.0.474: attempt to access beyond end of device [ 74.196188][ T4880] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 74.210002][ T4880] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 74.423033][ T4896] set_capacity_and_notify: 18 callbacks suppressed [ 74.423048][ T4896] loop0: detected capacity change from 0 to 512 [ 74.459687][ T4896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.496371][ T4896] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.547927][ T4896] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.482: corrupted xattr block 32: invalid ea_ino [ 74.561817][ T4896] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 74.571322][ T4896] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.482: corrupted xattr block 32: invalid ea_ino [ 74.584991][ T4896] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 74.627071][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.697109][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 74.697128][ T29] audit: type=1400 audit(1768866017.798:275): avc: denied { mount } for pid=4900 comm="syz.4.484" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 74.735264][ T29] audit: type=1400 audit(1768866017.798:276): avc: denied { watch watch_reads } for pid=4900 comm="syz.4.484" path="/83/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 74.758261][ T29] audit: type=1400 audit(1768866017.798:277): avc: denied { unmount } for pid=4900 comm="syz.4.484" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 74.777914][ T29] audit: type=1107 audit(1768866017.828:278): pid=4899 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 74.789291][ T4888] syz.2.479: attempt to access beyond end of device [ 74.789291][ T4888] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 74.792381][ T4904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'. [ 74.804675][ T4888] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 74.833707][ T4890] syz.2.479: attempt to access beyond end of device [ 74.833707][ T4890] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 74.847357][ T4890] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 74.886711][ T4907] FAULT_INJECTION: forcing a failure. [ 74.886711][ T4907] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 74.899873][ T4907] CPU: 1 UID: 0 PID: 4907 Comm: syz.3.485 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.899905][ T4907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.899919][ T4907] Call Trace: [ 74.899932][ T4907] [ 74.899941][ T4907] __dump_stack+0x1d/0x30 [ 74.899965][ T4907] dump_stack_lvl+0x95/0xd0 [ 74.900064][ T4907] dump_stack+0x15/0x1b [ 74.900083][ T4907] should_fail_ex+0x263/0x280 [ 74.900113][ T4907] should_fail+0xb/0x20 [ 74.900138][ T4907] should_fail_usercopy+0x1a/0x20 [ 74.900251][ T4907] _copy_from_user+0x1c/0xb0 [ 74.900279][ T4907] kstrtouint_from_user+0x69/0xf0 [ 74.900301][ T4907] ? 0xffffffff81000000 [ 74.900317][ T4907] ? selinux_file_permission+0x1e1/0x320 [ 74.900415][ T4907] proc_fail_nth_write+0x50/0x160 [ 74.900448][ T4907] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 74.900480][ T4907] vfs_write+0x269/0x9f0 [ 74.900519][ T4907] ? __rcu_read_unlock+0x4e/0x70 [ 74.900541][ T4907] ? __fget_files+0x184/0x1c0 [ 74.900567][ T4907] ? mutex_lock+0x57/0x90 [ 74.900601][ T4907] ksys_write+0xdc/0x1a0 [ 74.900700][ T4907] __x64_sys_write+0x40/0x50 [ 74.900723][ T4907] x64_sys_call+0x2847/0x3000 [ 74.900754][ T4907] do_syscall_64+0xc0/0x2a0 [ 74.900779][ T4907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.900800][ T4907] RIP: 0033:0x7fa3e812b58e [ 74.900817][ T4907] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 74.900843][ T4907] RSP: 002b:00007fa3e6bc6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.900906][ T4907] RAX: ffffffffffffffda RBX: 00007fa3e6bc76c0 RCX: 00007fa3e812b58e [ 74.900921][ T4907] RDX: 0000000000000001 RSI: 00007fa3e6bc70a0 RDI: 0000000000000006 [ 74.900933][ T4907] RBP: 00007fa3e6bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 74.900943][ T4907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.900954][ T4907] R13: 00007fa3e83e6038 R14: 00007fa3e83e5fa0 R15: 00007ffdd0f8eae8 [ 74.901022][ T4907] [ 75.181168][ T29] audit: type=1400 audit(1768866018.228:279): avc: denied { ioctl } for pid=4913 comm="syz.3.487" path="socket:[9272]" dev="sockfs" ino=9272 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.229581][ T29] audit: type=1400 audit(1768866018.328:280): avc: denied { write } for pid=4918 comm="syz.3.490" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 75.286874][ T4932] loop1: detected capacity change from 0 to 128 [ 75.299370][ T4933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.490'. [ 75.314948][ T4934] loop2: detected capacity change from 0 to 128 [ 75.346065][ T4934] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 75.403555][ T4936] loop4: detected capacity change from 0 to 128 [ 75.483689][ T4937] FAT-fs (loop2): FAT read failed (blocknr 128) [ 75.821966][ T4938] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 75.842834][ T4936] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 75.852985][ T4938] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 75.876688][ T4932] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 75.985891][ T29] audit: type=1400 audit(1768866019.088:281): avc: denied { bind } for pid=4942 comm="syz.1.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.020983][ T29] audit: type=1400 audit(1768866019.088:282): avc: denied { name_bind } for pid=4942 comm="syz.1.497" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 76.041889][ T29] audit: type=1400 audit(1768866019.088:283): avc: denied { node_bind } for pid=4942 comm="syz.1.497" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 76.064500][ T29] audit: type=1400 audit(1768866019.088:284): avc: denied { connect } for pid=4942 comm="syz.1.497" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.091885][ T4945] loop0: detected capacity change from 0 to 512 [ 76.112859][ T4947] netlink: 56 bytes leftover after parsing attributes in process `syz.4.499'. [ 76.122291][ T4947] netlink: 16 bytes leftover after parsing attributes in process `syz.4.499'. [ 76.135829][ T4945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.162219][ T4953] loop2: detected capacity change from 0 to 1024 [ 76.188867][ T4945] ext4 filesystem being mounted at /96/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.205924][ T4955] loop1: detected capacity change from 0 to 128 [ 76.217728][ T4953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.257511][ T4953] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 76.292322][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.496264][ T4971] netlink: 'syz.0.508': attribute type 13 has an invalid length. [ 76.656180][ T4955] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 76.665328][ T4963] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 76.674218][ T4963] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 76.750631][ T4971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.763993][ T4971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.900419][ T4329] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.904510][ T4329] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.926863][ T4329] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.936219][ T4329] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.957302][ T4980] loop3: detected capacity change from 0 to 128 [ 76.970703][ T4980] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 77.011193][ T4979] bio_check_eod: 9 callbacks suppressed [ 77.011211][ T4979] syz.3.510: attempt to access beyond end of device [ 77.011211][ T4979] loop3: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 77.020720][ T4982] loop0: detected capacity change from 0 to 128 [ 77.031737][ T4979] syz.3.510: attempt to access beyond end of device [ 77.031737][ T4979] loop3: rw=8390659, sector=6952, nr_sectors = 942 limit=128 [ 77.062901][ T4980] FAT-fs (loop3): FAT read failed (blocknr 128) [ 77.270729][ T4986] loop4: detected capacity change from 0 to 512 [ 77.305125][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.367554][ T4990] EXT4-fs: inline encryption not supported [ 77.399400][ T4992] 9p: Bad value for 'wfdno' [ 77.406241][ T4990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.431219][ T4984] syz.0.511: attempt to access beyond end of device [ 77.431219][ T4984] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 77.444944][ T4984] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 77.462632][ T4982] syz.0.511: attempt to access beyond end of device [ 77.462632][ T4982] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 77.476297][ T4982] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 77.492972][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.503342][ T4996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.521495][ T4996] ext4 filesystem being mounted at /106/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.711909][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.761366][ T5016] netlink: 28 bytes leftover after parsing attributes in process `syz.4.523'. [ 77.864089][ T5021] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.940305][ T5021] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.033663][ T5021] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.072899][ T5004] syz.0.518: attempt to access beyond end of device [ 78.072899][ T5004] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 78.086610][ T5004] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 78.095421][ T5009] syz.0.518: attempt to access beyond end of device [ 78.095421][ T5009] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 78.117975][ T5021] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.182613][ T3783] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.202100][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.217347][ T5011] syz.1.520: attempt to access beyond end of device [ 78.217347][ T5011] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 78.232906][ T851] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.241776][ T851] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.250891][ T5011] syz.1.520: attempt to access beyond end of device [ 78.250891][ T5011] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 78.523187][ T5033] syz.0.529: attempt to access beyond end of device [ 78.523187][ T5033] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 78.545282][ T5032] syz.0.529: attempt to access beyond end of device [ 78.545282][ T5032] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 78.571932][ T5042] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 78.612831][ T5041] FAT-fs (loop1): FAT read failed (blocknr 128) [ 78.668733][ T5044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.681395][ T5044] ext4 filesystem being mounted at /102/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.752262][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.895369][ T5068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.541'. [ 78.978584][ T5072] netlink: 28 bytes leftover after parsing attributes in process `syz.4.543'. [ 79.056470][ T5074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.069172][ T5074] ext4 filesystem being mounted at /116/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.107101][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.140701][ T5078] netlink: 20 bytes leftover after parsing attributes in process `syz.3.545'. [ 79.180364][ T5078] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.187630][ T5078] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.233389][ T5078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.243620][ T5078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.254123][ T5081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.269970][ T5081] ext4 filesystem being mounted at /110/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.310453][ T3783] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.325553][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.342841][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.351900][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.362165][ T5087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.548'. [ 79.372771][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.385900][ T5087] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 79.494618][ T5089] syz.2.549 uses obsolete (PF_INET,SOCK_PACKET) [ 79.572251][ T5099] IPv6: addrconf: prefix option has invalid lifetime [ 79.597708][ T5101] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.656978][ T5103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.556'. [ 79.683028][ T5108] serio: Serial port ttyS3 [ 79.707341][ T5112] set_capacity_and_notify: 10 callbacks suppressed [ 79.707361][ T5112] loop1: detected capacity change from 0 to 128 [ 79.782765][ T5114] loop0: detected capacity change from 0 to 128 [ 79.790837][ T5114] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 79.848694][ T5114] FAT-fs (loop0): FAT read failed (blocknr 128) [ 80.196358][ T5136] loop3: detected capacity change from 0 to 512 [ 80.209945][ T5136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.232720][ T5136] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.257185][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 80.257207][ T29] audit: type=1107 audit(1768866023.358:397): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 80.283768][ T5144] netlink: 28 bytes leftover after parsing attributes in process `syz.4.569'. [ 80.306583][ T5141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 80.335484][ T5147] loop1: detected capacity change from 0 to 512 [ 80.347139][ T5147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.359887][ T5147] ext4 filesystem being mounted at /117/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.383498][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.393916][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.427632][ T5151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.571'. [ 80.526670][ T5156] loop1: detected capacity change from 0 to 128 [ 80.539629][ T5156] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 80.571537][ T5162] loop2: detected capacity change from 0 to 128 [ 80.590880][ T5156] FAT-fs (loop1): FAT read failed (blocknr 128) [ 80.591906][ T5165] loop0: detected capacity change from 0 to 128 [ 80.602938][ T5162] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 80.625323][ T5162] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.671572][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.711195][ T29] audit: type=1107 audit(1768866023.808:398): pid=5167 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 80.732146][ T5169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.578'. [ 80.748005][ T5169] hsr_slave_1 (unregistering): left promiscuous mode [ 80.934111][ T5168] buffer_io_error: 7 callbacks suppressed [ 80.934130][ T5168] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 80.948667][ T5165] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 81.029972][ T5172] netlink: 'syz.0.579': attribute type 4 has an invalid length. [ 81.135567][ T5175] loop0: detected capacity change from 0 to 128 [ 81.147885][ T5175] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 81.180554][ T5175] FAT-fs (loop0): FAT read failed (blocknr 128) [ 81.267513][ T5182] netlink: 20 bytes leftover after parsing attributes in process `syz.3.583'. [ 81.299711][ T5184] loop1: detected capacity change from 0 to 128 [ 81.606719][ T5184] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 81.615834][ T5184] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 81.747334][ T5193] loop1: detected capacity change from 0 to 128 [ 81.754242][ T5193] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 81.789196][ T5193] FAT-fs (loop1): FAT read failed (blocknr 128) [ 82.281497][ T5204] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 82.300227][ T5204] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.349531][ T5199] bio_check_eod: 16 callbacks suppressed [ 82.349573][ T5199] syz.2.588: attempt to access beyond end of device [ 82.349573][ T5199] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 82.358848][ T5208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.368855][ T5199] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 82.388494][ T5208] ext4 filesystem being mounted at /114/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.400884][ T5196] syz.2.588: attempt to access beyond end of device [ 82.400884][ T5196] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 82.414696][ T5196] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 82.433480][ T5199] syz.2.588: attempt to access beyond end of device [ 82.433480][ T5199] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 82.447299][ T5199] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 82.457233][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.469470][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.550024][ T5216] netlink: 20 bytes leftover after parsing attributes in process `syz.4.594'. [ 82.567167][ T5213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.584587][ T5213] ext4 filesystem being mounted at /120/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.626944][ T5216] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.634161][ T5216] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.668539][ T5198] syz.0.589: attempt to access beyond end of device [ 82.668539][ T5198] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 82.682162][ T5198] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 82.706538][ T5200] syz.0.589: attempt to access beyond end of device [ 82.706538][ T5200] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 82.720257][ T5200] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 82.750613][ T5216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.760868][ T5216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.795705][ T5231] netlink: 20 bytes leftover after parsing attributes in process `syz.0.600'. [ 82.814365][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.824635][ T29] audit: type=1400 audit(1768866025.928:399): avc: denied { read } for pid=5224 comm="syz.3.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.857206][ T52] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.871712][ T52] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.891109][ T52] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.914571][ T52] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.928707][ T29] audit: type=1107 audit(1768866026.028:400): pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 83.010316][ T5244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.023022][ T5244] ext4 filesystem being mounted at /123/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.052703][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.148259][ T5250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.161011][ T5250] ext4 filesystem being mounted at /125/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.184881][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.252439][ T5229] syz.1.599: attempt to access beyond end of device [ 83.252439][ T5229] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 83.266154][ T5229] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 83.275416][ T5233] syz.1.599: attempt to access beyond end of device [ 83.275416][ T5233] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 83.319696][ T5257] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 83.338412][ T5257] syz.2.607: attempt to access beyond end of device [ 83.338412][ T5257] loop2: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 83.352206][ T5257] syz.2.607: attempt to access beyond end of device [ 83.352206][ T5257] loop2: rw=8390659, sector=6952, nr_sectors = 942 limit=128 [ 83.378480][ T5257] FAT-fs (loop2): FAT read failed (blocknr 128) [ 83.436805][ T5260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.449542][ T5260] ext4 filesystem being mounted at /116/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.489923][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.569921][ T5269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.583003][ T5269] ext4 filesystem being mounted at /129/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.618183][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.637594][ T5273] netlink: 'syz.3.612': attribute type 21 has an invalid length. [ 83.645579][ T5273] netlink: 128 bytes leftover after parsing attributes in process `syz.3.612'. [ 83.655809][ T5273] netlink: 3 bytes leftover after parsing attributes in process `syz.3.612'. [ 83.689436][ T29] audit: type=1107 audit(1768866026.788:401): pid=5274 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 83.751223][ T5278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.774148][ T5278] ext4 filesystem being mounted at /118/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.796634][ T5289] netlink: 20 bytes leftover after parsing attributes in process `syz.0.618'. [ 83.821718][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.062508][ T5286] syz.3.616: attempt to access beyond end of device [ 84.062508][ T5286] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 84.145101][ T5302] netlink: 20 bytes leftover after parsing attributes in process `syz.2.623'. [ 84.168588][ T5303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.185652][ T5303] ext4 filesystem being mounted at /134/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.226335][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.235536][ T5302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.246712][ T5302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.283321][ T5310] netlink: 'syz.1.626': attribute type 21 has an invalid length. [ 84.297603][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.328058][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.348772][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.368025][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.385787][ T29] audit: type=1107 audit(1768866027.488:402): pid=5316 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 84.430453][ T29] audit: type=1107 audit(1768866027.528:403): pid=5320 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 84.605344][ T5330] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 84.656398][ T5330] FAT-fs (loop3): FAT read failed (blocknr 128) [ 84.691993][ T5333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.713263][ T5333] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.730875][ T29] audit: type=1400 audit(1768866027.828:404): avc: denied { setattr } for pid=5332 comm="syz.0.634" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.765745][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.828093][ T5341] netlink: 'syz.4.637': attribute type 21 has an invalid length. [ 84.885051][ T5345] set_capacity_and_notify: 18 callbacks suppressed [ 84.885065][ T5345] loop4: detected capacity change from 0 to 512 [ 84.911574][ T5345] ext4 filesystem being mounted at /122/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.018274][ T5355] loop2: detected capacity change from 0 to 128 [ 85.211034][ T29] audit: type=1107 audit(1768866028.308:405): pid=5360 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 85.411935][ T5366] __nla_validate_parse: 7 callbacks suppressed [ 85.411954][ T5366] netlink: 20 bytes leftover after parsing attributes in process `syz.1.644'. [ 85.502075][ T5366] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.509506][ T5366] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.562828][ T5375] netlink: 'syz.3.648': attribute type 21 has an invalid length. [ 85.570691][ T5375] netlink: 128 bytes leftover after parsing attributes in process `syz.3.648'. [ 85.594031][ T5366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.599565][ T5366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.648368][ T5378] loop2: detected capacity change from 0 to 128 [ 85.656275][ T5378] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 85.670833][ T5375] netlink: 3 bytes leftover after parsing attributes in process `syz.3.648'. [ 85.679927][ T37] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.704443][ T37] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.723752][ T37] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.768004][ T37] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.782601][ T5376] FAT-fs (loop2): FAT read failed (blocknr 128) [ 85.789112][ T5382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.650'. [ 85.934593][ T5385] loop4: detected capacity change from 0 to 512 [ 85.955086][ T5385] ext4 filesystem being mounted at /125/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.975970][ T5390] loop0: detected capacity change from 0 to 512 [ 85.989475][ T5390] ext4 filesystem being mounted at /118/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.036833][ T5394] loop0: detected capacity change from 0 to 512 [ 86.073073][ T5399] loop0: detected capacity change from 0 to 128 [ 86.162424][ T5401] loop4: detected capacity change from 0 to 128 [ 86.504900][ T5413] loop1: detected capacity change from 0 to 128 [ 86.578013][ T5402] buffer_io_error: 8 callbacks suppressed [ 86.578036][ T5402] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 86.595669][ T5401] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 86.605239][ T5402] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 86.631695][ T5399] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 86.683660][ T5422] loop0: detected capacity change from 0 to 512 [ 86.726815][ T5422] ext4 filesystem being mounted at /121/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.898233][ T5432] netlink: 20 bytes leftover after parsing attributes in process `syz.1.668'. [ 87.072356][ T5424] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 87.081213][ T5428] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 87.329448][ T5445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.674'. [ 87.372846][ T29] audit: type=1107 audit(1768866030.468:406): pid=5447 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 87.404026][ T5450] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 87.422904][ T5446] bio_check_eod: 16 callbacks suppressed [ 87.422923][ T5446] syz.2.672: attempt to access beyond end of device [ 87.422923][ T5446] loop2: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 87.442890][ T5446] syz.2.672: attempt to access beyond end of device [ 87.442890][ T5446] loop2: rw=8390659, sector=6952, nr_sectors = 942 limit=128 [ 87.447670][ T5448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.675'. [ 87.474737][ T5446] FAT-fs (loop2): FAT read failed (blocknr 128) [ 87.575913][ T5456] ext4 filesystem being mounted at /141/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.820475][ T5454] syz.4.676: attempt to access beyond end of device [ 87.820475][ T5454] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 87.834129][ T5454] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 87.843131][ T5457] syz.4.676: attempt to access beyond end of device [ 87.843131][ T5457] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 87.856873][ T5457] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 88.211838][ T5478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.685'. [ 88.266242][ T5461] syz.3.678: attempt to access beyond end of device [ 88.266242][ T5461] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 88.279900][ T5461] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 88.372285][ T5471] syz.0.683: attempt to access beyond end of device [ 88.372285][ T5471] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 88.385967][ T5471] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 88.398741][ T5473] syz.0.683: attempt to access beyond end of device [ 88.398741][ T5473] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 88.458690][ T29] audit: type=1107 audit(1768866031.558:407): pid=5481 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 88.517363][ T5491] netlink: 20 bytes leftover after parsing attributes in process `syz.0.689'. [ 88.624745][ T5486] ext4 filesystem being mounted at /143/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.856382][ T29] audit: type=1107 audit(1768866031.958:408): pid=5501 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 88.912183][ T5505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.693'. [ 89.122031][ T5508] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 89.164837][ T5499] syz.3.692: attempt to access beyond end of device [ 89.164837][ T5499] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 89.178974][ T5500] syz.3.692: attempt to access beyond end of device [ 89.178974][ T5500] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 89.240187][ T5508] syz.4.694: attempt to access beyond end of device [ 89.240187][ T5508] loop4: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 89.305984][ T5512] FAT-fs (loop4): FAT read failed (blocknr 128) [ 89.523903][ T5527] ext4 filesystem being mounted at /147/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.841045][ T29] audit: type=1107 audit(1768866032.938:409): pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 89.900497][ T29] audit: type=1107 audit(1768866032.998:410): pid=5537 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 90.063465][ T5549] set_capacity_and_notify: 13 callbacks suppressed [ 90.063493][ T5549] loop4: detected capacity change from 0 to 128 [ 90.465962][ T5557] __nla_validate_parse: 5 callbacks suppressed [ 90.466072][ T5557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.711'. [ 90.537219][ T5561] loop3: detected capacity change from 0 to 512 [ 90.617508][ T5561] ext4 filesystem being mounted at /147/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.680718][ T5569] loop1: detected capacity change from 0 to 128 [ 90.821113][ T29] audit: type=1107 audit(1768866033.918:411): pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 90.837143][ T5574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.717'. [ 90.890789][ T5580] loop2: detected capacity change from 0 to 128 [ 90.910354][ T5575] loop1: detected capacity change from 0 to 128 [ 90.933632][ T5575] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 91.037152][ T5575] FAT-fs (loop1): FAT read failed (blocknr 128) [ 91.347035][ T29] audit: type=1107 audit(1768866034.448:412): pid=5590 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 91.374155][ T5591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 91.591909][ T5599] loop4: detected capacity change from 0 to 128 [ 91.642069][ T5601] loop1: detected capacity change from 0 to 512 [ 91.656709][ T5601] ext4 filesystem being mounted at /153/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.724109][ T5606] loop1: detected capacity change from 0 to 128 [ 91.784281][ T5609] netlink: 20 bytes leftover after parsing attributes in process `syz.1.729'. [ 91.943573][ T5599] buffer_io_error: 10 callbacks suppressed [ 91.943589][ T5599] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 91.963090][ T5604] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 92.071443][ T29] audit: type=1107 audit(1768866035.168:413): pid=5614 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 92.084896][ T5615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'. [ 92.145468][ T5617] loop4: detected capacity change from 0 to 128 [ 92.652733][ T29] audit: type=1107 audit(1768866035.748:414): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 92.731057][ T5633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'. [ 92.780224][ T5634] loop2: detected capacity change from 0 to 128 [ 92.797718][ T5636] netlink: 'syz.3.739': attribute type 21 has an invalid length. [ 92.805563][ T5636] netlink: 128 bytes leftover after parsing attributes in process `syz.3.739'. [ 92.843387][ T5636] netlink: 3 bytes leftover after parsing attributes in process `syz.3.739'. [ 92.855743][ T5634] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 92.862776][ T5634] bio_check_eod: 12 callbacks suppressed [ 92.862833][ T5634] syz.2.738: attempt to access beyond end of device [ 92.862833][ T5634] loop2: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 92.862856][ T5634] syz.2.738: attempt to access beyond end of device [ 92.862856][ T5634] loop2: rw=8390659, sector=6952, nr_sectors = 942 limit=128 [ 92.955729][ T5617] syz.4.733: attempt to access beyond end of device [ 92.955729][ T5617] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 92.955758][ T5617] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 93.079106][ T5634] FAT-fs (loop2): FAT read failed (blocknr 128) [ 93.130197][ T29] audit: type=1107 audit(1768866036.228:415): pid=5650 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 93.166601][ T5651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.744'. [ 93.247495][ T5659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.747'. [ 93.790906][ T29] audit: type=1107 audit(1768866036.888:416): pid=5668 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 94.131326][ T5672] syz.2.751: attempt to access beyond end of device [ 94.131326][ T5672] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 94.144990][ T5672] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 94.162211][ T29] audit: type=1107 audit(1768866037.258:417): pid=5680 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 94.197563][ T5672] syz.2.751: attempt to access beyond end of device [ 94.197563][ T5672] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 94.211240][ T5672] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 94.281743][ T5688] netlink: 'syz.2.758': attribute type 21 has an invalid length. [ 94.458177][ T5694] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 94.544821][ T5694] syz.2.760: attempt to access beyond end of device [ 94.544821][ T5694] loop2: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 94.602350][ T5694] syz.2.760: attempt to access beyond end of device [ 94.602350][ T5694] loop2: rw=8390659, sector=6952, nr_sectors = 942 limit=128 [ 94.630605][ T5700] ext4 filesystem being mounted at /143/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.658705][ T5674] syz.1.753: attempt to access beyond end of device [ 94.658705][ T5674] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 94.672340][ T5674] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 94.685762][ T5701] FAT-fs (loop2): FAT read failed (blocknr 128) [ 95.078460][ T5716] syz.4.768: attempt to access beyond end of device [ 95.078460][ T5716] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 95.092123][ T5716] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 95.100985][ T5715] syz.4.768: attempt to access beyond end of device [ 95.100985][ T5715] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 95.114619][ T5715] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 95.147163][ T29] audit: type=1107 audit(1768866038.248:418): pid=5717 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 95.191196][ T29] audit: type=1107 audit(1768866038.288:419): pid=5721 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 95.254770][ T5727] netlink: 'syz.2.772': attribute type 21 has an invalid length. [ 95.346127][ T5732] set_capacity_and_notify: 11 callbacks suppressed [ 95.346142][ T5732] loop4: detected capacity change from 0 to 128 [ 95.387647][ T5734] loop4: detected capacity change from 0 to 512 [ 95.406913][ T5734] ext4 filesystem being mounted at /153/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.462739][ T5740] loop4: detected capacity change from 0 to 128 [ 95.495208][ T5742] loop2: detected capacity change from 0 to 128 [ 95.601057][ T5747] loop0: detected capacity change from 0 to 128 [ 95.663709][ T29] audit: type=1107 audit(1768866038.758:420): pid=5750 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 95.714699][ T5751] __nla_validate_parse: 8 callbacks suppressed [ 95.714718][ T5751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.782'. [ 95.784143][ T5757] loop3: detected capacity change from 0 to 128 [ 95.802182][ T29] audit: type=1107 audit(1768866038.898:421): pid=5756 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 95.832625][ T5757] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 95.850281][ T5761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 95.960777][ T5763] netlink: 'syz.1.784': attribute type 21 has an invalid length. [ 95.968671][ T5763] netlink: 128 bytes leftover after parsing attributes in process `syz.1.784'. [ 95.990925][ T5755] FAT-fs (loop3): FAT read failed (blocknr 128) [ 96.003764][ T5763] netlink: 3 bytes leftover after parsing attributes in process `syz.1.784'. [ 96.156104][ T5740] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 96.195401][ T5747] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 96.245907][ T5767] loop4: detected capacity change from 0 to 128 [ 96.367027][ T5777] loop0: detected capacity change from 0 to 128 [ 96.461160][ T5783] loop4: detected capacity change from 0 to 128 [ 96.474622][ T5783] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.540031][ T5785] loop0: detected capacity change from 0 to 128 [ 96.553053][ T5785] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 96.597371][ T5791] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.603703][ T5785] FAT-fs (loop0): FAT read failed (blocknr 128) [ 96.653168][ T5791] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.797: corrupted xattr block 32: invalid ea_ino [ 96.666525][ T5791] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 96.679743][ T5791] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.797: corrupted xattr block 32: invalid ea_ino [ 96.693552][ T5791] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 96.953063][ T5803] netlink: 20 bytes leftover after parsing attributes in process `syz.3.800'. [ 97.516308][ T5805] buffer_io_error: 3 callbacks suppressed [ 97.516388][ T5805] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 97.678141][ T5822] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 97.725565][ T5822] FAT-fs (loop4): FAT read failed (blocknr 128) [ 97.892752][ T5833] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 97.909713][ T5833] bio_check_eod: 12 callbacks suppressed [ 97.909730][ T5833] syz.3.814: attempt to access beyond end of device [ 97.909730][ T5833] loop3: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 97.929290][ T5833] syz.3.814: attempt to access beyond end of device [ 97.929290][ T5833] loop3: rw=8390659, sector=6952, nr_sectors = 942 limit=128 [ 97.953707][ T5833] FAT-fs (loop3): FAT read failed (blocknr 128) [ 98.772910][ T5855] netlink: 20 bytes leftover after parsing attributes in process `syz.3.823'. [ 98.874438][ T5845] syz.1.819: attempt to access beyond end of device [ 98.874438][ T5845] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 98.888133][ T5845] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 99.626266][ T5860] syz.0.824: attempt to access beyond end of device [ 99.626266][ T5860] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 99.640027][ T5860] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 99.651050][ T5860] syz.0.824: attempt to access beyond end of device [ 99.651050][ T5860] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 99.664683][ T5860] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 99.675473][ T5866] syz.1.828: attempt to access beyond end of device [ 99.675473][ T5866] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 99.689108][ T5866] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 99.711315][ T5867] syz.1.828: attempt to access beyond end of device [ 99.711315][ T5867] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 99.725156][ T5867] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 99.811667][ T5880] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 99.841338][ T5880] syz.3.832: attempt to access beyond end of device [ 99.841338][ T5880] loop3: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 99.864475][ T5880] syz.3.832: attempt to access beyond end of device [ 99.864475][ T5880] loop3: rw=8390659, sector=6952, nr_sectors = 942 limit=128 [ 99.893989][ T5882] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 99.895024][ T5880] FAT-fs (loop3): FAT read failed (blocknr 128) [ 99.923634][ T5881] syz.0.833: attempt to access beyond end of device [ 99.923634][ T5881] loop0: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 99.947224][ T5881] FAT-fs (loop0): FAT read failed (blocknr 128) [ 100.286812][ T5886] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 100.296233][ T5887] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 100.472270][ T5899] set_capacity_and_notify: 14 callbacks suppressed [ 100.472290][ T5899] loop4: detected capacity change from 0 to 128 [ 100.717250][ T5905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.843'. [ 100.736850][ T5907] loop3: detected capacity change from 0 to 128 [ 101.023299][ T5899] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 101.252759][ T5918] loop2: detected capacity change from 0 to 128 [ 101.649565][ T5919] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 101.678112][ T5923] loop3: detected capacity change from 0 to 128 [ 101.812293][ T5927] loop2: detected capacity change from 0 to 128 [ 101.819364][ T5927] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 101.879151][ T5927] FAT-fs (loop2): FAT read failed (blocknr 128) [ 101.958678][ T5935] loop1: detected capacity change from 0 to 128 [ 101.969345][ T5935] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 102.009504][ T5935] FAT-fs (loop1): FAT read failed (blocknr 128) [ 102.114345][ T5940] loop4: detected capacity change from 0 to 128 [ 102.547461][ T5948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.860'. [ 102.580725][ T5950] loop2: detected capacity change from 0 to 128 [ 102.842122][ T5955] loop1: detected capacity change from 0 to 128 [ 103.280675][ T5955] bio_check_eod: 13 callbacks suppressed [ 103.280693][ T5955] syz.1.863: attempt to access beyond end of device [ 103.280693][ T5955] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 103.300245][ T5955] buffer_io_error: 4 callbacks suppressed [ 103.300261][ T5955] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 103.315004][ T5956] syz.1.863: attempt to access beyond end of device [ 103.315004][ T5956] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 103.328731][ T5956] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 103.416089][ T5968] loop4: detected capacity change from 0 to 128 [ 103.784800][ T5968] syz.4.869: attempt to access beyond end of device [ 103.784800][ T5968] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 103.784913][ T5968] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 103.809582][ T5973] syz.4.869: attempt to access beyond end of device [ 103.809582][ T5973] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 103.823213][ T5973] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 103.833964][ T5980] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 103.845828][ T5980] syz.0.872: attempt to access beyond end of device [ 103.845828][ T5980] loop0: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 103.845857][ T5980] syz.0.872: attempt to access beyond end of device [ 103.845857][ T5980] loop0: rw=8390659, sector=6952, nr_sectors = 942 limit=128 [ 103.857913][ T5980] FAT-fs (loop0): FAT read failed (blocknr 128) [ 104.030006][ T5984] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 104.059009][ T5984] syz.4.873: attempt to access beyond end of device [ 104.059009][ T5984] loop4: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 104.072801][ T5984] syz.4.873: attempt to access beyond end of device [ 104.072801][ T5984] loop4: rw=8390659, sector=6952, nr_sectors = 942 limit=128 [ 104.098288][ T5984] FAT-fs (loop4): FAT read failed (blocknr 128) [ 104.137390][ T5972] syz.2.871: attempt to access beyond end of device [ 104.137390][ T5972] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 104.151177][ T5972] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 104.339013][ T5997] netlink: 20 bytes leftover after parsing attributes in process `syz.3.879'. [ 105.002539][ T6003] syz.0.881: attempt to access beyond end of device [ 105.002539][ T6003] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 105.016225][ T6003] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 105.025458][ T6002] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 105.034640][ T6003] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 105.607523][ T6010] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 105.616966][ T6012] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 105.938098][ T6027] set_capacity_and_notify: 7 callbacks suppressed [ 105.938118][ T6027] loop1: detected capacity change from 0 to 128 [ 105.952625][ T6027] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 105.989337][ T6027] FAT-fs (loop1): FAT read failed (blocknr 128) [ 106.097808][ T6035] loop4: detected capacity change from 0 to 128 [ 106.105420][ T6035] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 106.142246][ T6035] FAT-fs (loop4): FAT read failed (blocknr 128) [ 106.173604][ T6040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.896'. [ 106.242630][ T6042] loop0: detected capacity change from 0 to 128 [ 106.679115][ T6052] loop0: detected capacity change from 0 to 128 [ 106.765787][ T6055] loop1: detected capacity change from 0 to 128 [ 106.926783][ T6058] loop4: detected capacity change from 0 to 128 [ 107.457713][ T6077] loop4: detected capacity change from 0 to 128 [ 107.693185][ T6084] loop0: detected capacity change from 0 to 128 [ 107.705847][ T6084] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 107.785020][ T6081] FAT-fs (loop0): FAT read failed (blocknr 128) [ 107.795186][ T6086] loop1: detected capacity change from 0 to 128 [ 107.814080][ T6086] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 107.870985][ T6085] FAT-fs (loop1): FAT read failed (blocknr 128) [ 107.897426][ T6089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.915'. [ 108.099954][ T6091] loop3: detected capacity change from 0 to 128 [ 108.467699][ T6096] bio_check_eod: 19 callbacks suppressed [ 108.467716][ T6096] syz.3.918: attempt to access beyond end of device [ 108.467716][ T6096] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 108.487020][ T6096] buffer_io_error: 7 callbacks suppressed [ 108.487036][ T6096] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 108.503427][ T6096] syz.3.918: attempt to access beyond end of device [ 108.503427][ T6096] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 108.517083][ T6096] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 109.320979][ T6121] syz.3.929: attempt to access beyond end of device [ 109.320979][ T6121] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 109.334631][ T6121] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 109.343486][ T6122] syz.3.929: attempt to access beyond end of device [ 109.343486][ T6122] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 109.357098][ T6122] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 109.622484][ T6136] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 109.662055][ T6140] netlink: 28 bytes leftover after parsing attributes in process `syz.4.937'. [ 109.671387][ T6133] syz.2.931: attempt to access beyond end of device [ 109.671387][ T6133] loop2: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 109.689304][ T6133] syz.2.931: attempt to access beyond end of device [ 109.689304][ T6133] loop2: rw=8390659, sector=6952, nr_sectors = 942 limit=128 [ 109.733212][ T6133] FAT-fs (loop2): FAT read failed (blocknr 128) [ 109.798992][ T6147] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 109.832246][ T6144] syz.0.936: attempt to access beyond end of device [ 109.832246][ T6144] loop0: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 109.846558][ T6144] syz.0.936: attempt to access beyond end of device [ 109.846558][ T6144] loop0: rw=8390659, sector=6952, nr_sectors = 942 limit=128 [ 109.874010][ T6144] FAT-fs (loop0): FAT read failed (blocknr 128) [ 110.055718][ T6135] syz.3.935: attempt to access beyond end of device [ 110.055718][ T6135] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 110.069364][ T6135] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 110.078694][ T6141] syz.3.935: attempt to access beyond end of device [ 110.078694][ T6141] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 110.092307][ T6141] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 110.353346][ T6154] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 110.875065][ T6161] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 110.884122][ T6161] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 111.244979][ T6180] set_capacity_and_notify: 10 callbacks suppressed [ 111.244992][ T6180] loop2: detected capacity change from 0 to 128 [ 111.346219][ T6185] loop3: detected capacity change from 0 to 128 [ 111.413991][ T6186] loop1: detected capacity change from 0 to 128 [ 111.427110][ T6186] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 111.480170][ T6189] loop0: detected capacity change from 0 to 128 [ 111.541891][ T6183] FAT-fs (loop1): FAT read failed (blocknr 128) [ 111.825373][ T6185] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 112.064845][ T6203] netlink: 28 bytes leftover after parsing attributes in process `syz.0.960'. [ 112.110004][ T6205] loop3: detected capacity change from 0 to 128 [ 112.130231][ T6205] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 112.238078][ T6205] FAT-fs (loop3): FAT read failed (blocknr 128) [ 112.423632][ T6213] loop1: detected capacity change from 0 to 128 [ 112.758624][ T6218] loop1: detected capacity change from 0 to 128 [ 112.904319][ T6221] loop3: detected capacity change from 0 to 128 [ 112.989390][ T6223] loop0: detected capacity change from 0 to 128 [ 113.281424][ T6230] loop2: detected capacity change from 0 to 128 [ 113.566304][ T6223] bio_check_eod: 15 callbacks suppressed [ 113.566327][ T6223] syz.0.968: attempt to access beyond end of device [ 113.566327][ T6223] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 113.585741][ T6223] buffer_io_error: 7 callbacks suppressed [ 113.585777][ T6223] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 113.915408][ T6244] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 113.967251][ T6244] syz.3.976: attempt to access beyond end of device [ 113.967251][ T6244] loop3: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 113.984743][ T6244] syz.3.976: attempt to access beyond end of device [ 113.984743][ T6244] loop3: rw=8390659, sector=6952, nr_sectors = 942 limit=128 [ 114.050845][ T6230] syz.2.971: attempt to access beyond end of device [ 114.050845][ T6230] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 114.064537][ T6230] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 114.329116][ T6246] syz.0.977: attempt to access beyond end of device [ 114.329116][ T6246] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 114.342765][ T6246] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 114.351940][ T6247] syz.0.977: attempt to access beyond end of device [ 114.351940][ T6247] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 114.365569][ T6247] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 114.417758][ T6250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.978'. [ 114.489792][ T6255] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 114.507422][ T6255] syz.4.979: attempt to access beyond end of device [ 114.507422][ T6255] loop4: rw=8388611, sector=6950, nr_sectors = 2 limit=128 [ 114.521325][ T6255] syz.4.979: attempt to access beyond end of device [ 114.521325][ T6255] loop4: rw=8390659, sector=6952, nr_sectors = 942 limit=128 [ 114.547032][ T6255] FAT-fs (loop4): FAT read failed (blocknr 128) [ 114.813635][ T6264] ================================================================== [ 114.821768][ T6264] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 114.828907][ T6264] [ 114.831260][ T6264] read-write to 0xffff888107a49fd8 of 8 bytes by task 6266 on cpu 0: [ 114.839344][ T6264] xas_set_mark+0x82/0x140 [ 114.843809][ T6264] __folio_start_writeback+0x17b/0x370 [ 114.849303][ T6264] __block_write_full_folio+0x53a/0x8f0 [ 114.854883][ T6264] block_write_full_folio+0x2c1/0x2e0 [ 114.860310][ T6264] mpage_writepages+0x710/0x1310 [ 114.865281][ T6264] fat_writepages+0x24/0x30 [ 114.869813][ T6264] do_writepages+0x1c6/0x310 [ 114.874436][ T6264] file_write_and_wait_range+0x178/0x2f0 [ 114.880133][ T6264] __generic_file_fsync+0x46/0x160 [ 114.885280][ T6264] fat_file_fsync+0x49/0x100 [ 114.889900][ T6264] vfs_fsync_range+0x10d/0x130 [ 114.894693][ T6264] generic_file_write_iter+0x1ba/0x310 [ 114.900195][ T6264] iter_file_splice_write+0x6bc/0xa80 [ 114.905594][ T6264] direct_splice_actor+0x156/0x2a0 [ 114.910725][ T6264] splice_direct_to_actor+0x311/0x670 [ 114.916126][ T6264] do_splice_direct+0x119/0x1a0 [ 114.921000][ T6264] do_sendfile+0x380/0x650 [ 114.925468][ T6264] __x64_sys_sendfile64+0x105/0x150 [ 114.930705][ T6264] x64_sys_call+0x2db1/0x3000 [ 114.935418][ T6264] do_syscall_64+0xc0/0x2a0 [ 114.939952][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.945875][ T6264] [ 114.948223][ T6264] read to 0xffff888107a49fd8 of 8 bytes by task 6264 on cpu 1: [ 114.955786][ T6264] xas_find_marked+0x213/0x620 [ 114.960608][ T6264] find_get_entry+0x5d/0x380 [ 114.965226][ T6264] filemap_get_folios_tag+0xb6/0x230 [ 114.970536][ T6264] filemap_fdatawait_range+0x88/0x1e0 [ 114.975958][ T6264] __writeback_single_inode+0xdb/0x7b0 [ 114.981473][ T6264] writeback_single_inode+0x16d/0x3f0 [ 114.986884][ T6264] sync_inode_metadata+0x6e/0xa0 [ 114.991859][ T6264] __generic_file_fsync+0x109/0x160 [ 114.997101][ T6264] fat_file_fsync+0x49/0x100 [ 115.001748][ T6264] vfs_fsync_range+0x10d/0x130 [ 115.006564][ T6264] generic_file_write_iter+0x1ba/0x310 [ 115.012060][ T6264] iter_file_splice_write+0x6bc/0xa80 [ 115.017900][ T6264] direct_splice_actor+0x156/0x2a0 [ 115.023043][ T6264] splice_direct_to_actor+0x311/0x670 [ 115.028425][ T6264] do_splice_direct+0x119/0x1a0 [ 115.033399][ T6264] do_sendfile+0x380/0x650 [ 115.037852][ T6264] __x64_sys_sendfile64+0x105/0x150 [ 115.043086][ T6264] x64_sys_call+0x2db1/0x3000 [ 115.047785][ T6264] do_syscall_64+0xc0/0x2a0 [ 115.052319][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.058228][ T6264] [ 115.060578][ T6264] value changed: 0x0000000000000000 -> 0x0000000000000006 [ 115.067728][ T6264] [ 115.070075][ T6264] Reported by Kernel Concurrency Sanitizer on: [ 115.076253][ T6264] CPU: 1 UID: 0 PID: 6264 Comm: syz.3.984 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.085915][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.096002][ T6264] ================================================================== [ 115.224336][ T6264] syz.3.984: attempt to access beyond end of device [ 115.224336][ T6264] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 115.238055][ T6264] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 115.246967][ T6266] syz.3.984: attempt to access beyond end of device [ 115.246967][ T6266] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 115.260625][ T6266] Buffer I/O error on dev loop3, logical block 128, lost async page write