last executing test programs: 1m37.568927132s ago: executing program 0 (id=731): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000a0003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m37.524252286s ago: executing program 0 (id=732): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 1m37.459720052s ago: executing program 0 (id=734): socket$packet(0x11, 0x2, 0x300) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007e000/0x1000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000019140)=ANY=[@ANYBLOB="0500000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x50) close(r0) unshare(0x2c020400) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850500000500000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m37.459245852s ago: executing program 0 (id=735): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f00000002c0)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00') 1m37.430551114s ago: executing program 0 (id=736): bpf$PROG_LOAD(0x5, 0x0, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) syz_read_part_table(0x1057, &(0x7f0000001080)="$eJzsz82JwkAABeA3+5MNe0oJu6Vkr+vVk01YQsBaImhjViEjxiDoXUT4vsvjMW8GJjxVmWOYomb7fXP4fje/9v/jukmGn99s+rekTUqbpO8y/k01q/NsUbLrm5Tu82u+eBhrrZe3PrLcP/Z3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAaTgEAAP//LuQOEw==") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m37.229967712s ago: executing program 0 (id=739): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x6}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1m37.212889904s ago: executing program 32 (id=739): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x6}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1m35.349817077s ago: executing program 1 (id=767): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@nolazytime}, {@lazytime}, {@sysvgroups}, {@norecovery}, {@usrjquota}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f0000001b40)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000020c0)={0x14, 0x6, 0x2, 0x401, 0x70bd27, 0x25dfdbfd, {0xe, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x400c800) r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x5800}], 0x14, 0x7800, 0x0, 0x3) 1m35.19917576s ago: executing program 1 (id=768): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r1}, 0x8) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r4}, @CGW_DST_IF={0x8, 0xa, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m35.109186948s ago: executing program 1 (id=772): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000002780)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@mpls_uc={0x8847, {[], @ipv6=@tcp={0x6, 0x6, "9f154c", 0x14, 0x6, 0x0, @empty, @mcast1, {[], {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0x100, 0x0, 0x4}}}}}}}}, 0x0) 1m35.048192163s ago: executing program 1 (id=774): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x184905c, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) 1m34.995871648s ago: executing program 1 (id=777): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f00000003c0)=0xfffffffd, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002340)="17000000020002", 0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 1m34.814658274s ago: executing program 1 (id=784): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x75031b34}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xc1}, @NFTA_REJECT_TYPE={0x8}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) 1m34.771358477s ago: executing program 33 (id=784): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x75031b34}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xc1}, @NFTA_REJECT_TYPE={0x8}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) 1m25.706396802s ago: executing program 6 (id=936): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xb, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10000, 0x800, 0x4, 0x5, 0x78d9, 0x3ff, 0x1, 0x4, 0x2}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x14c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x120, 0x2, [@TCA_U32_SEL={0x114, 0x5, {0xf, 0x5, 0x10, 0x1, 0x1, 0x644e, 0x7, 0x4, [{0xe, 0x7ff, 0x5f, 0x6}, {0x8, 0x101, 0x7d, 0xfffffffa}, {0x3, 0x0, 0x6e86, 0x4}, {0x6, 0x2230, 0x0, 0x8}, {0x7fff, 0x401, 0xffff, 0xff}, {0x1, 0x8, 0xff, 0x4}, {0x8, 0x0, 0x6, 0x8}, {0xf02, 0x7, 0x4, 0xffff}, {0x5, 0x81, 0x3, 0x2}, {0x9, 0x4, 0x216, 0x5}, {0x401, 0xdc6, 0xadb, 0x6}, {0x0, 0x8, 0xb62, 0x5}, {0x6, 0xa, 0x1, 0x2}, {0x2, 0x79ff, 0x4, 0x4}, {0x101, 0x10003, 0xfffffbff, 0x400}, {0x0, 0x0, 0x6, 0x3}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xb, 0xc}}]}}]}, 0x14c}}, 0x4080) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m25.660444775s ago: executing program 6 (id=937): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f00000011c0)={0xfc, {"a483885aed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f073063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801118c20b8f16bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399ea4727d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a040200b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a64002bebc2407aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef64ab253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bf068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827475e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcb32b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba36b37767b6b45a44957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b94025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b03512629f46366e7205dd8d6f37525c1a0e94210dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9154f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d603994732d6b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21396532713e5b69cf767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285e6a89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeaf1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b627cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e46a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5c92441918145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed608000000a006e39336d07c2b80817a28ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030f81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c00004f5d374755534d7f68f679c4ff516e9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00", 0x1000}}, 0xffbc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m25.164475829s ago: executing program 6 (id=942): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x10078, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x20000003, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xa}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 1m25.105756414s ago: executing program 6 (id=943): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xaa101a, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x219d80f, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) 1m25.045611959s ago: executing program 6 (id=944): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) splice(r2, 0x0, r1, 0x0, 0x4, 0x0) 1m24.800595441s ago: executing program 6 (id=948): bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m24.670930092s ago: executing program 34 (id=948): bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 35.394249889s ago: executing program 7 (id=1710): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) socket$kcm(0x11, 0xa, 0x300) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) 35.314523336s ago: executing program 7 (id=1713): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = memfd_create(&(0x7f0000000080)=',\xea\x02', 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x48000) ftruncate(r0, 0x7000000) r1 = dup(r0) preadv2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) 34.399890016s ago: executing program 7 (id=1735): bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000004, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ppoll(0x0, 0x0, &(0x7f0000000300)={0x77359400}, 0x0, 0x0) 33.510146794s ago: executing program 7 (id=1754): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200404, &(0x7f0000000280)={[{@noblock_validity}, {@nodelalloc}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@debug}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000700)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x4a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(0x0, 0x8000, 0x112) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x1, 0x8008, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x4]}) mknod$loop(&(0x7f0000000680)='./file0\x00', 0x80, 0x0) 33.271690015s ago: executing program 7 (id=1759): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 32.813148815s ago: executing program 7 (id=1769): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x40) lseek(r0, 0x7fffdfff, 0x2) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) getdents64(r0, 0x0, 0x0) 32.781859498s ago: executing program 35 (id=1769): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x40) lseek(r0, 0x7fffdfff, 0x2) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) getdents64(r0, 0x0, 0x0) 3.324379708s ago: executing program 8 (id=2234): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001040)=0x1007) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 3.182956061s ago: executing program 4 (id=2236): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xa}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x7}]}}]}, 0x38}}, 0x800) 3.106960967s ago: executing program 8 (id=2237): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x7) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) recvfrom(r0, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0) 3.027756624s ago: executing program 4 (id=2238): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10004, 0x6, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 2.84838293s ago: executing program 8 (id=2239): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000010900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) 2.680225035s ago: executing program 8 (id=2241): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) unshare(0xa000200) r2 = semget$private(0x0, 0x4000, 0x0) semtimedop(r2, &(0x7f0000000640)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) unshare(0x20060400) 2.6272353s ago: executing program 2 (id=2242): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dfe, 0x11}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000004180)=0x17) 2.610293851s ago: executing program 2 (id=2243): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, 0x0, 0x4004840) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x8040004) 2.573191024s ago: executing program 4 (id=2244): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000002200)=[{0x0}, {&(0x7f0000000b40)=""/4, 0x4}, {&(0x7f0000002100)=""/212, 0x90}], 0x3}, 0xa}], 0x1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x17}]}, 0x0, 0x5, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.140695922s ago: executing program 8 (id=2245): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000003d00)="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", 0x0, 0x5}, 0x38) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="fa82", 0xfdef}], 0x1}, 0x20000000) 1.733421228s ago: executing program 3 (id=2249): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0xc746, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x9805, 0x0, 0x7f8, 0x6, 0xa, 0xfffffffb}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000180), 0x19) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) shutdown(r1, 0x1) 1.633575656s ago: executing program 2 (id=2250): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.612444188s ago: executing program 4 (id=2251): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=@delchain={0x30, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x4040004) 1.521903456s ago: executing program 5 (id=2253): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r0, r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 1.518537847s ago: executing program 4 (id=2254): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x5) ioctl$KDDELIO(r3, 0x4b35, 0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1.457112972s ago: executing program 5 (id=2255): write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r1) 1.452659082s ago: executing program 3 (id=2256): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext, 0x100540, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120800000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.381483479s ago: executing program 3 (id=2257): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.381156229s ago: executing program 5 (id=2258): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 1.332561843s ago: executing program 5 (id=2259): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xb7, 0xff, 0x6, 0x30, 0x0, 0x25, 0x50060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x8400, 0xfffffffffffffff8, 0x6, 0x7, 0x3, 0xffffffff, 0x10, 0x0, 0x8, 0x0, 0x6}, 0x0, 0x10000000000802, 0xffffffffffffffff, 0x2) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001a140100000000000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.149811209s ago: executing program 3 (id=2260): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 1.149299489s ago: executing program 5 (id=2270): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x4040000) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r1, 0x2, r0}) 56.083915ms ago: executing program 5 (id=2261): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000002200)=[{0x0}, {&(0x7f0000000b40)=""/4, 0x4}, {&(0x7f0000002100)=""/212, 0x90}], 0x3}, 0xa}], 0x1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x17}]}, 0x0, 0x5, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 55.909824ms ago: executing program 8 (id=2262): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r2, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 55.819835ms ago: executing program 2 (id=2263): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f6fecf0", "53c272d8b763f690b35605dff8a4a8d2", "44000100", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 55.713995ms ago: executing program 3 (id=2264): open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x80000401) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000700), 0x18) utimensat(r1, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) r2 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 55.591765ms ago: executing program 4 (id=2265): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1ce}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x5, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r3, &(0x7f0000000040), 0x8) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 24.670387ms ago: executing program 2 (id=2266): unshare(0x2040400) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) 4.719699ms ago: executing program 2 (id=2267): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000680)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@user_xattr}, {@user_xattr}, {@grpjquota, 0x2e}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c1, &(0x7f0000001940)="$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") fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000840)=""/4089, 0xff9) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x6, 0x6, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x3, 0xdc, 0x0, 0x0) 0s ago: executing program 3 (id=2268): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}}}, @IFLA_LINK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffedb, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) kernel console output (not intermixed with test programs): 101.425064][ T4509] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.433824][ T4509] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.504626][ T6626] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1004'. [ 102.517380][ T6626] ip6gre1: entered promiscuous mode [ 102.522669][ T6626] ip6gre1: entered allmulticast mode [ 102.821822][ T6645] loop4: detected capacity change from 0 to 512 [ 102.880095][ T6673] loop5: detected capacity change from 0 to 512 [ 102.913857][ T6673] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 102.945258][ T6673] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1025: bad orphan inode 15 [ 102.963196][ T6673] loop5: lost filesystem error report for type 5 error -117 [ 102.963966][ T6673] ext4_test_bit(bit=14, block=18) = 0 [ 102.971337][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 102.971359][ C1] EXT4-fs (loop5): initial error at time 1771625575: ext4_orphan_get:1417 [ 102.971386][ C1] EXT4-fs (loop5): last error at time 1771625575: ext4_orphan_get:1417 [ 103.001593][ T6673] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 103.011740][ T6645] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 103.022987][ T6673] ext2 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.057440][ T6645] EXT4-fs (loop4): orphan cleanup on readonly fs [ 103.066451][ T5656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 103.095839][ T6645] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.1010: corrupted inode contents [ 103.125045][ T6645] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 103.126776][ T6645] EXT4-fs (loop4): Remounting filesystem read-only [ 103.137364][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 103.137427][ C1] EXT4-fs (loop4): initial error at time 1771625575: ext4_do_update_inode:5569: inode 16 [ 103.137796][ C1] EXT4-fs (loop4): last error at time 1771625575: ext4_do_update_inode:5569: inode 16 [ 103.213752][ T6645] EXT4-fs (loop4): 1 truncate cleaned up [ 103.240216][ T3868] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 103.254962][ T3868] Quota error (device loop4): write_blk: dquota write failed [ 103.272675][ T3868] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 103.296477][ T3868] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 103.317209][ T3868] Quota error (device loop4): write_blk: dquota write failed [ 103.335584][ T3868] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 103.354852][ T3868] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 103.384789][ T3868] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 103.415745][ T3868] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 103.450126][ T6645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.617289][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.153694][ T3879] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.175697][ T6720] loop5: detected capacity change from 0 to 256 [ 104.266859][ T6720] FAT-fs (loop5): Directory bread(block 64) failed [ 104.278707][ T3879] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.301415][ T6720] FAT-fs (loop5): Directory bread(block 65) failed [ 104.330033][ T6720] FAT-fs (loop5): Directory bread(block 66) failed [ 104.361546][ T6720] FAT-fs (loop5): Directory bread(block 67) failed [ 104.370145][ T3879] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.384856][ T6720] FAT-fs (loop5): Directory bread(block 68) failed [ 104.405597][ T6720] FAT-fs (loop5): Directory bread(block 69) failed [ 104.422176][ T3879] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.428266][ T6720] FAT-fs (loop5): Directory bread(block 70) failed [ 104.465589][ T6720] FAT-fs (loop5): Directory bread(block 71) failed [ 104.492530][ T6720] FAT-fs (loop5): Directory bread(block 72) failed [ 104.516044][ T6720] FAT-fs (loop5): Directory bread(block 73) failed [ 104.709720][ T3879] bond0 (unregistering): Released all slaves [ 104.764860][ T3879] tipc: Disabling bearer [ 104.780349][ T3879] tipc: Left network mode [ 104.830848][ T3879] hsr_slave_0: left promiscuous mode [ 104.851056][ T3879] hsr_slave_1: left promiscuous mode [ 104.869869][ T3879] veth1_macvtap: left allmulticast mode [ 104.885723][ T3879] veth1_macvtap: left promiscuous mode [ 104.906860][ T3879] veth0_macvtap: left promiscuous mode [ 105.171074][ T3879] veth1_vlan: left promiscuous mode [ 105.178820][ T3879] veth0_vlan: left promiscuous mode [ 105.358895][ T6751] loop7: detected capacity change from 0 to 1024 [ 105.378903][ T6751] EXT4-fs: inline encryption not supported [ 105.417120][ T6751] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.450251][ T6751] EXT4-fs warning (device loop7): ext4_rename_delete:3729: inode #18: comm syz.7.1039: Deleting old file: nlink 2, error=-2 [ 105.507637][ T6343] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.762886][ T6779] xt_hashlimit: size too large, truncated to 1048576 [ 106.255501][ T6815] sock: sock_set_timeout: `syz.4.1051' (pid 6815) tries to set negative timeout [ 106.399712][ T6824] loop4: detected capacity change from 0 to 4096 [ 106.453809][ T6824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.675537][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.796436][ T6856] loop7: detected capacity change from 0 to 128 [ 106.825508][ T6856] EXT4-fs: Ignoring removed nobh option [ 106.854176][ T6856] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.869031][ T6856] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.955678][ T6343] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.069813][ T6877] loop4: detected capacity change from 0 to 128 [ 107.226684][ T4509] bio_check_eod: 2 callbacks suppressed [ 107.226702][ T4509] kworker/u8:20: attempt to access beyond end of device [ 107.226702][ T4509] loop4: rw=1, sector=129, nr_sectors = 8 limit=128 [ 107.261449][ T4509] kworker/u8:20: attempt to access beyond end of device [ 107.261449][ T4509] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 107.275197][ T6870] bond0: (slave syz_tun): Releasing backup interface [ 107.285695][ T4509] kworker/u8:20: attempt to access beyond end of device [ 107.285695][ T4509] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 107.291396][ T6870] team0: left allmulticast mode [ 107.307574][ T4509] kworker/u8:20: attempt to access beyond end of device [ 107.307574][ T4509] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 107.314059][ T6870] team_slave_0: left allmulticast mode [ 107.331269][ T4509] kworker/u8:20: attempt to access beyond end of device [ 107.331269][ T4509] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 107.334632][ T6870] team_slave_1: left allmulticast mode [ 107.359184][ T6870] team0: left promiscuous mode [ 107.359292][ T4509] kworker/u8:20: attempt to access beyond end of device [ 107.359292][ T4509] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 107.367840][ T6870] team_slave_0: left promiscuous mode [ 107.378910][ T4509] kworker/u8:20: attempt to access beyond end of device [ 107.378910][ T4509] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 107.403652][ T6870] team_slave_1: left promiscuous mode [ 107.409982][ T6870] bridge0: port 3(team0) entered disabled state [ 107.418944][ T4509] kworker/u8:20: attempt to access beyond end of device [ 107.418944][ T4509] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 107.432686][ T4509] kworker/u8:20: attempt to access beyond end of device [ 107.432686][ T4509] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 107.446326][ T4509] kworker/u8:20: attempt to access beyond end of device [ 107.446326][ T4509] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 107.465271][ T6870] bond0: (slave dummy0): Releasing backup interface [ 107.484706][ T6870] bridge_slave_0: left allmulticast mode [ 107.490771][ T6870] bridge_slave_0: left promiscuous mode [ 107.499929][ T6870] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.509289][ T6870] bridge_slave_1: left allmulticast mode [ 107.515035][ T6870] bridge_slave_1: left promiscuous mode [ 107.520782][ T6870] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.548705][ T6870] bond0: (slave bond_slave_0): Releasing backup interface [ 107.617518][ T6870] bond0: (slave bond_slave_1): Releasing backup interface [ 107.653595][ T6870] team0: Port device team_slave_0 removed [ 107.677258][ T6870] team0: Port device team_slave_1 removed [ 107.685604][ T6870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.702369][ T6870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.727201][ T6870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.748913][ T6870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.799039][ T6870] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 108.272925][ T6924] loop4: detected capacity change from 0 to 512 [ 108.304400][ T6924] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 108.333229][ T6916] loop2: detected capacity change from 0 to 256 [ 108.342221][ T6924] EXT4-fs (loop4): 1 truncate cleaned up [ 108.352718][ T6924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.407583][ T6929] loop5: detected capacity change from 0 to 128 [ 108.519365][ T1979] FAT-fs (loop2): error, invalid FAT chain (i_pos 196, last_block 1024) [ 108.545153][ T1979] FAT-fs (loop2): Filesystem has been set read-only [ 108.565698][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1079'. [ 108.579173][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1079'. [ 108.834045][ T28] audit: type=1326 audit(1771625581.124:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6953 comm="syz.2.1083" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6b725c629 code=0x0 [ 109.603557][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.680607][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'. [ 109.707564][ T6973] loop7: detected capacity change from 0 to 1024 [ 109.730388][ T6973] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 109.742779][ T6973] System zones: 0-1, 3-36 [ 109.756706][ T6973] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1090: bad orphan inode 134217728 [ 109.772550][ T6973] loop7: lost filesystem error report for type 5 error -117 [ 109.774780][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 109.788578][ C0] EXT4-fs (loop7): initial error at time 1771625582: ext4_orphan_get:1417 [ 109.788790][ T6973] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.797133][ C0] EXT4-fs (loop7): last error at time 1771625582: ext4_orphan_get:1417 [ 109.821337][ T6978] loop5: detected capacity change from 0 to 2048 [ 109.856424][ T6978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.945553][ T6996] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1099'. [ 110.947052][ T5656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.963768][ T6996] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1099'. [ 110.982733][ T6343] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.025723][ T1979] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.099220][ T1979] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.150227][ T7010] loop2: detected capacity change from 0 to 4096 [ 111.170957][ T1979] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.194973][ T7010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.216390][ T1979] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.375102][ T1979] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 111.408523][ T1979] bond4 (unregistering): (slave ip6gretap2): Releasing active interface [ 111.504355][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.549933][ T1979] bond0 (unregistering): Released all slaves [ 111.563815][ T7049] loop5: detected capacity change from 0 to 1024 [ 111.571692][ T28] audit: type=1107 audit(1771625583.874:1696): pid=7050 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 111.584550][ T1979] bond1 (unregistering): Released all slaves [ 111.602874][ T7049] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 111.610130][ T1979] bond2 (unregistering): Released all slaves [ 111.620230][ T1979] bond3 (unregistering): Released all slaves [ 111.621800][ T7049] System zones: 0-1, 3-36 [ 111.631814][ T7049] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1113: bad orphan inode 134217728 [ 111.643062][ T7049] loop5: lost filesystem error report for type 5 error -117 [ 111.644330][ T7049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.645352][ T1979] bond4 (unregistering): Released all slaves [ 111.672878][ T7037] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1109'. [ 111.684139][ T7041] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1109'. [ 111.724624][ T1979] hsr_slave_0: left promiscuous mode [ 111.747602][ T1979] hsr_slave_1: left promiscuous mode [ 111.971898][ T7071] netlink: 'syz.3.1116': attribute type 1 has an invalid length. [ 112.064080][ T7071] gretap1: entered allmulticast mode [ 112.081472][ T7071] bond2: (slave gretap1): making interface the new active one [ 112.105917][ T7071] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 112.115934][ T5656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.131752][ T7013] chnl_net:caif_netlink_parms(): no params data found [ 112.198860][ T7092] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 112.285743][ T7013] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.306359][ T7013] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.332549][ T7013] bridge_slave_0: entered allmulticast mode [ 112.356783][ T7013] bridge_slave_0: entered promiscuous mode [ 112.403288][ T7013] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.405638][ T7120] loop2: detected capacity change from 0 to 128 [ 112.427554][ T7013] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.443260][ T7013] bridge_slave_1: entered allmulticast mode [ 112.474199][ T7120] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 112.474355][ T7013] bridge_slave_1: entered promiscuous mode [ 112.508534][ T7120] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.567537][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.610901][ T7013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.621887][ T7013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.649705][ T7013] team0: Port device team_slave_0 added [ 112.656954][ T7013] team0: Port device team_slave_1 added [ 112.688976][ T7013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.704045][ T7013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.740027][ T7013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.751815][ T7013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.774992][ T7013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.810991][ T7013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.873058][ T7013] hsr_slave_0: entered promiscuous mode [ 112.888583][ T7013] hsr_slave_1: entered promiscuous mode [ 112.997752][ T7147] team0: left allmulticast mode [ 113.002660][ T7147] team_slave_0: left allmulticast mode [ 113.018447][ T7147] team_slave_1: left allmulticast mode [ 113.027629][ T7147] team0: left promiscuous mode [ 113.041024][ T7147] team_slave_0: left promiscuous mode [ 113.050487][ T7147] team_slave_1: left promiscuous mode [ 113.056637][ T7147] bridge0: port 3(team0) entered disabled state [ 113.076839][ T7147] bridge_slave_0: left allmulticast mode [ 113.094854][ T7147] bridge_slave_0: left promiscuous mode [ 113.100614][ T7147] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.143398][ T7161] loop7: detected capacity change from 0 to 2048 [ 113.181163][ T7161] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.210267][ T7147] bridge_slave_1: left allmulticast mode [ 113.237759][ T7147] bridge_slave_1: left promiscuous mode [ 113.240048][ T7170] loop2: detected capacity change from 0 to 128 [ 113.243622][ T7147] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.268401][ T7147] bond0: (slave bond_slave_0): Releasing backup interface [ 113.279326][ T7147] bond0: (slave bond_slave_1): Releasing backup interface [ 113.290108][ T7147] team0: Port device team_slave_0 removed [ 113.306305][ T7147] team0: Port device team_slave_1 removed [ 113.312376][ T7147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.325271][ T7147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.332920][ T7147] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 113.520222][ T4509] bio_check_eod: 180 callbacks suppressed [ 113.520241][ T4509] kworker/u8:20: attempt to access beyond end of device [ 113.520241][ T4509] loop2: rw=1, sector=129, nr_sectors = 8 limit=128 [ 113.542306][ T4509] kworker/u8:20: attempt to access beyond end of device [ 113.542306][ T4509] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 113.556089][ T4509] kworker/u8:20: attempt to access beyond end of device [ 113.556089][ T4509] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 113.570626][ T4509] kworker/u8:20: attempt to access beyond end of device [ 113.570626][ T4509] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 113.584849][ T7182] netlink: 25 bytes leftover after parsing attributes in process `syz.5.1135'. [ 113.602061][ T4509] kworker/u8:20: attempt to access beyond end of device [ 113.602061][ T4509] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 113.617744][ T4509] kworker/u8:20: attempt to access beyond end of device [ 113.617744][ T4509] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 113.631428][ T4509] kworker/u8:20: attempt to access beyond end of device [ 113.631428][ T4509] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 113.645009][ T4509] kworker/u8:20: attempt to access beyond end of device [ 113.645009][ T4509] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 113.658632][ T7186] netlink: 'syz.5.1135': attribute type 4 has an invalid length. [ 113.670103][ T4509] kworker/u8:20: attempt to access beyond end of device [ 113.670103][ T4509] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 113.696571][ T4509] kworker/u8:20: attempt to access beyond end of device [ 113.696571][ T4509] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 113.750512][ T28] audit: type=1107 audit(1771625586.034:1697): pid=7192 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 113.982101][ T6343] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.078923][ T7221] loop7: detected capacity change from 0 to 1024 [ 114.099917][ T7013] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.112656][ T7221] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 114.127403][ T7013] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 114.146697][ T7013] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.167161][ T7013] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.175040][ T7221] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.198865][ T7221] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 3: comm syz.7.1128: lblock 3 mapped to illegal pblock 3 (length 3) [ 114.211961][ T28] audit: type=1400 audit(1771625586.494:1698): avc: denied { read write } for pid=7219 comm="syz.7.1128" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 114.241734][ T7221] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 114.276991][ T7239] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1128: bg 0: block 112: padding at end of block bitmap is not set [ 114.294463][ T7013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.304853][ T28] audit: type=1400 audit(1771625586.494:1699): avc: denied { open } for pid=7219 comm="syz.7.1128" path="/31/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 114.338234][ T7221] EXT4-fs (loop7): This should not happen!! Data will be lost [ 114.338234][ T7221] [ 114.344677][ T7013] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.356141][ T7239] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 117 [ 114.377387][ T28] audit: type=1400 audit(1771625586.574:1700): avc: denied { append } for pid=7219 comm="syz.7.1128" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 114.410099][ T3879] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.415244][ T7239] EXT4-fs (loop7): This should not happen!! Data will be lost [ 114.415244][ T7239] [ 114.417410][ T3879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.447430][ T7221] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 44 with error 117 [ 114.461013][ T4511] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.468129][ T4511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.479528][ T7221] EXT4-fs (loop7): This should not happen!! Data will be lost [ 114.479528][ T7221] [ 114.526528][ T3868] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 114.552918][ T3868] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 114.565782][ T3868] EXT4-fs (loop7): This should not happen!! Data will be lost [ 114.565782][ T3868] [ 114.576099][ T3868] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 4 with error 117 [ 114.617836][ T7013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.748026][ T7013] veth0_vlan: entered promiscuous mode [ 114.756441][ T7013] veth1_vlan: entered promiscuous mode [ 114.772801][ T7013] veth0_macvtap: entered promiscuous mode [ 114.780519][ T7013] veth1_macvtap: entered promiscuous mode [ 114.791874][ T7013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.803978][ T7013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.815407][ T4509] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.824907][ T4509] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.834055][ T4509] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.843248][ T4509] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.891212][ T7275] loop2: detected capacity change from 0 to 1024 [ 114.898726][ T7275] EXT4-fs: Ignoring removed orlov option [ 114.925373][ T7275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.950827][ T7284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.959527][ T28] audit: type=1400 audit(1771625587.244:1701): avc: denied { map } for pid=7274 comm="syz.2.1142" path="/216/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 114.996505][ T28] audit: type=1400 audit(1771625587.244:1702): avc: denied { execute } for pid=7274 comm="syz.2.1142" path="/216/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 114.999731][ T7284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.033554][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.325580][ T7292] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 115.895693][ T7307] loop7: detected capacity change from 0 to 256 [ 116.121640][ T4509] FAT-fs (loop7): error, invalid FAT chain (i_pos 196, last_block 1024) [ 116.151340][ T4509] FAT-fs (loop7): Filesystem has been set read-only [ 116.650605][ T7344] loop7: detected capacity change from 0 to 128 [ 117.032599][ T7343] loop2: detected capacity change from 0 to 32768 [ 117.045464][ T7350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.053968][ T7350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.106586][ T3301] loop2: p1 p3 < > [ 117.114849][ T3301] loop2: partition table partially beyond EOD, truncated [ 117.134528][ T3301] loop2: p3 start 265216 is beyond EOD, truncated [ 117.154091][ T7343] loop2: p1 p3 < > [ 117.158380][ T7343] loop2: partition table partially beyond EOD, truncated [ 117.195822][ T7343] loop2: p3 start 265216 is beyond EOD, truncated [ 117.335906][ T7364] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1165'. [ 117.459784][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 117.504185][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 117.572082][ T3868] Bluetooth: hci0: Frame reassembly failed (-84) [ 118.457375][ T7422] VFS: Mount too revealing [ 118.458784][ T28] audit: type=1400 audit(1771625590.754:1703): avc: denied { mounton } for pid=7421 comm="syz.3.1175" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.609447][ T7430] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1178'. [ 118.952327][ T7461] loop5: detected capacity change from 0 to 512 [ 118.959457][ T7461] EXT4-fs: Ignoring removed i_version option [ 118.984566][ T7461] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 118.998310][ T7461] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1186: bad orphan inode 16 [ 119.014828][ T7461] loop5: lost filesystem error report for type 5 error -117 [ 119.015044][ T7461] EXT4-fs (loop5): Remounting filesystem read-only [ 119.028953][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 119.028970][ C1] EXT4-fs (loop5): initial error at time 1771625591: ext4_orphan_get:1417 [ 119.028989][ C1] EXT4-fs (loop5): last error at time 1771625591: ext4_orphan_get:1417 [ 119.064857][ T7461] ext4_test_bit(bit=15, block=4) = 0 [ 119.070465][ T7461] EXT4-fs (loop5): 1 orphan inode deleted [ 119.077329][ T7461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.091336][ T7461] EXT4-fs (loop5): shut down requested (0) [ 119.109563][ T5656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.129126][ T28] audit: type=1400 audit(1771625591.414:1704): avc: denied { accept } for pid=7465 comm="syz.4.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 119.635007][ T3693] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 119.728907][ T7492] VFS: Mount too revealing [ 121.158098][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1216'. [ 121.268577][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1210'. [ 121.549939][ T7544] loop2: detected capacity change from 0 to 512 [ 121.558974][ T7544] EXT4-fs: Ignoring removed nobh option [ 121.570237][ T7544] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 121.587355][ T7544] EXT4-fs (loop2): 1 truncate cleaned up [ 121.605291][ T7544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.635724][ T7551] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 121.642305][ T7551] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 121.680752][ T7551] vhci_hcd vhci_hcd.0: Device attached [ 121.692806][ T7547] loop7: detected capacity change from 0 to 512 [ 121.711802][ T7551] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1217'. [ 121.758178][ T28] audit: type=1400 audit(1771625594.054:1705): avc: denied { setattr } for pid=7542 comm="syz.2.1213" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.796591][ T7552] vhci_hcd: connection closed [ 121.796825][ T3868] vhci_hcd vhci_hcd.5: stop threads [ 121.815033][ T7547] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 121.828503][ T3868] vhci_hcd vhci_hcd.5: release socket [ 121.838290][ T7547] EXT4-fs (loop7): orphan cleanup on readonly fs [ 121.854966][ T3868] vhci_hcd vhci_hcd.5: disconnect device [ 121.895173][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.906930][ T7547] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #16: comm syz.7.1212: corrupted inode contents [ 121.915097][ T3303] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 121.928499][ T3303] usb 11-1: enqueue for inactive port 0 [ 121.934451][ T7547] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 121.944893][ T3303] usb 11-1: enqueue for inactive port 0 [ 121.960264][ T3303] usb 11-1: enqueue for inactive port 0 [ 121.961076][ T7547] EXT4-fs (loop7): Remounting filesystem read-only [ 121.966413][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 121.966682][ C1] EXT4-fs (loop7): initial error at time 1771625594: ext4_do_update_inode:5569: inode 16 [ 121.967034][ C1] EXT4-fs (loop7): last error at time 1771625594: ext4_do_update_inode:5569: inode 16 [ 122.009982][ T7547] EXT4-fs (loop7): 1 truncate cleaned up [ 122.017336][ T3879] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 122.029752][ T3879] Quota error (device loop7): write_blk: dquota write failed [ 122.038751][ T3303] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 122.049883][ T3879] Quota error (device loop7): remove_free_dqentry: Can't write block (5) with free entries [ 122.060106][ T3879] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 122.070805][ T3879] Quota error (device loop7): write_blk: dquota write failed [ 122.078370][ T3879] Quota error (device loop7): free_dqentry: Can't move quota data block (5) to free list [ 122.088385][ T3879] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 122.098698][ T3879] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 122.107630][ T3879] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 122.127643][ T7547] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.202610][ T6343] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.550458][ T7599] loop2: detected capacity change from 0 to 128 [ 122.589794][ T7599] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.625213][ T7599] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.943642][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1242'. [ 122.987866][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.097338][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1244'. [ 123.378051][ T28] audit: type=1400 audit(1771625595.674:1706): avc: denied { write } for pid=7646 comm="syz.3.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 123.495384][ T7654] loop7: detected capacity change from 0 to 128 [ 123.529174][ T7654] bio_check_eod: 180 callbacks suppressed [ 123.529189][ T7654] syz.7.1260: attempt to access beyond end of device [ 123.529189][ T7654] loop7: rw=1, sector=145, nr_sectors = 65 limit=128 [ 123.703132][ T28] audit: type=1326 audit(1771625595.994:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7663 comm="syz.7.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e7e7c629 code=0x7ffc0000 [ 123.764972][ T28] audit: type=1326 audit(1771625596.034:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7663 comm="syz.7.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92e7e7c629 code=0x7ffc0000 [ 124.314861][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1275'. [ 124.328766][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1275'. [ 124.338276][ T3879] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.347348][ T3879] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.357545][ T50] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.375856][ T50] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.415747][ T7684] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.1284'. [ 124.747977][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1291'. [ 125.102640][ T7735] macvlan2: entered promiscuous mode [ 125.152405][ T7735] bond0: entered promiscuous mode [ 125.174168][ T7735] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 125.200525][ T7738] macvlan3: entered promiscuous mode [ 125.657615][ T7767] loop2: detected capacity change from 0 to 512 [ 125.701413][ T7767] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 125.716042][ T7767] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 125.734945][ T7767] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1311: Corrupt directory, running e2fsck is recommended [ 125.751210][ T7776] loop7: detected capacity change from 0 to 2048 [ 125.758687][ T7767] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 125.767015][ T7767] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.1311: corrupted in-inode xattr: e_name out of bounds [ 125.781141][ T7767] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 125.781502][ T7767] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1311: couldn't read orphan inode 15 (err -117) [ 125.790800][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 125.790822][ C1] EXT4-fs (loop2): initial error at time 1771625598: ext4_iget_extra_inode:5025: inode 15 [ 125.790857][ C1] EXT4-fs (loop2): last error at time 1771625598: ext4_iget_extra_inode:5025: inode 15 [ 125.829317][ T7767] loop2: lost filesystem error report for type 5 error -117 [ 125.830191][ T7767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.855154][ T7776] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.872822][ T7767] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 125.894151][ T7769] loop5: detected capacity change from 0 to 512 [ 125.902724][ T7767] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 125.940913][ T7767] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1311: Corrupt directory, running e2fsck is recommended [ 125.958444][ T7767] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 125.970835][ T7767] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 125.972232][ T3868] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 125.983584][ T3868] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 344 with error 28 [ 126.009820][ T7767] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1311: Corrupt directory, running e2fsck is recommended [ 126.023893][ T3868] EXT4-fs (loop7): This should not happen!! Data will be lost [ 126.023893][ T3868] [ 126.028965][ T7780] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 126.034464][ T3868] EXT4-fs (loop7): Total free blocks count 0 [ 126.053545][ T3868] EXT4-fs (loop7): Free/Dirty block details [ 126.059666][ T3868] EXT4-fs (loop7): free_blocks=2415919504 [ 126.063128][ T7769] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 126.066450][ T7767] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 126.066481][ T7767] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 126.066501][ T7767] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1311: Corrupt directory, running e2fsck is recommended [ 126.070168][ T3868] EXT4-fs (loop7): dirty_blocks=352 [ 126.080946][ T7769] EXT4-fs (loop5): orphan cleanup on readonly fs [ 126.086509][ T3868] EXT4-fs (loop7): Block reservation details [ 126.086525][ T3868] EXT4-fs (loop7): i_reserved_data_blocks=22 [ 126.095712][ T6343] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.130800][ T7769] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.1312: corrupted inode contents [ 126.156677][ T7769] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 126.157774][ T7769] EXT4-fs (loop5): Remounting filesystem read-only [ 126.167168][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 126.167244][ C0] EXT4-fs (loop5): initial error at time 1771625598: ext4_do_update_inode:5569: inode 16 [ 126.167523][ C0] EXT4-fs (loop5): last error at time 1771625598: ext4_do_update_inode:5569: inode 16 [ 126.208363][ T7785] loop4: detected capacity change from 0 to 512 [ 126.230544][ T7769] EXT4-fs (loop5): 1 truncate cleaned up [ 126.240594][ T3868] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 126.279026][ T3868] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 126.290576][ T3868] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 126.301685][ T7785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.314687][ T7785] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.325870][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.337044][ T7769] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.458370][ T7013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.592363][ T5656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.697231][ T7807] loop5: detected capacity change from 0 to 512 [ 126.715302][ T7807] ext4: Unknown parameter 'dont_appraise' [ 126.763974][ T7807] Set syz1 is full, maxelem 2 reached [ 126.831766][ T7812] loop2: detected capacity change from 0 to 4096 [ 126.857106][ T7812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.946609][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.666755][ T7843] bond_slave_0: entered promiscuous mode [ 127.672553][ T7843] bond_slave_1: entered promiscuous mode [ 127.695249][ T7843] macvlan2: entered promiscuous mode [ 127.705033][ T7843] bond0: entered promiscuous mode [ 127.717749][ T7843] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 127.755535][ T7849] macvlan3: entered promiscuous mode [ 127.765800][ T7853] loop7: detected capacity change from 0 to 1024 [ 127.794833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.809040][ T7853] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 127.817447][ T7853] System zones: 0-1, 3-36 [ 127.825514][ T7853] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1342: bad orphan inode 134217728 [ 127.862213][ T7853] loop7: lost filesystem error report for type 5 error -117 [ 127.871133][ T7853] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.061552][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1350'. [ 128.105864][ T6343] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.401774][ T7894] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1359'. [ 128.466869][ T7897] batadv_slave_1: entered promiscuous mode [ 128.493582][ T7897] batadv_slave_0: entered promiscuous mode [ 128.508099][ T7896] batadv_slave_0: left promiscuous mode [ 128.524264][ T7896] batadv_slave_1: left promiscuous mode [ 128.558207][ T7901] loop4: detected capacity change from 0 to 512 [ 128.614664][ T7905] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 128.621325][ T7905] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.654883][ T7905] vhci_hcd vhci_hcd.0: Device attached [ 128.663301][ T7901] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 128.673330][ T7905] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1364'. [ 128.684216][ T7906] vhci_hcd: connection closed [ 128.684478][ T4511] vhci_hcd vhci_hcd.7: stop threads [ 128.687137][ T7901] EXT4-fs (loop4): orphan cleanup on readonly fs [ 128.689290][ T4511] vhci_hcd vhci_hcd.7: release socket [ 128.689310][ T4511] vhci_hcd vhci_hcd.7: disconnect device [ 128.734926][ T7901] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.1362: corrupted inode contents [ 128.748191][ T7901] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 128.749613][ T7901] EXT4-fs (loop4): Remounting filesystem read-only [ 128.760215][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 128.760442][ C0] EXT4-fs (loop4): initial error at time 1771625601: ext4_do_update_inode:5569: inode 16 [ 128.761049][ C0] EXT4-fs (loop4): last error at time 1771625601: ext4_do_update_inode:5569: inode 16 [ 128.800409][ T7901] EXT4-fs (loop4): 1 truncate cleaned up [ 128.813478][ T4517] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 128.824295][ T4517] __quota_error: 22 callbacks suppressed [ 128.824312][ T4517] Quota error (device loop4): write_blk: dquota write failed [ 128.839020][ T4517] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 128.849882][ T4517] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 128.861841][ T4517] Quota error (device loop4): write_blk: dquota write failed [ 128.869615][ T4517] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 128.880260][ T4517] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 128.890946][ T4517] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 128.900042][ T4517] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 128.925769][ T7901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.990392][ T7013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.161499][ T7916] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 129.168079][ T7916] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 129.195980][ T7916] vhci_hcd vhci_hcd.0: Device attached [ 129.215505][ T7916] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 129.222078][ T7916] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 129.253508][ T7916] vhci_hcd vhci_hcd.0: Device attached [ 129.255040][ T7925] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(8) [ 129.265675][ T7925] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 129.312482][ T7925] vhci_hcd vhci_hcd.0: Device attached [ 129.325125][ T7916] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 129.335312][ T7916] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 129.342035][ T7916] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 129.380146][ T7916] vhci_hcd vhci_hcd.0: Device attached [ 129.406020][ T7925] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 129.412682][ T7925] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 129.429803][ T7925] vhci_hcd vhci_hcd.0: Device attached [ 129.434929][ T35] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 129.443527][ T7916] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(15) [ 129.450179][ T7916] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 129.478112][ T7916] vhci_hcd vhci_hcd.0: Device attached [ 129.488614][ T7917] vhci_hcd: connection reset by peer [ 129.488711][ T7939] vhci_hcd: connection closed [ 129.494113][ T50] vhci_hcd vhci_hcd.2: stop threads [ 129.504370][ T7926] vhci_hcd: connection closed [ 129.504393][ T7921] vhci_hcd: connection closed [ 129.509285][ T7930] vhci_hcd: connection closed [ 129.514270][ T7934] vhci_hcd: connection closed [ 129.524828][ T50] vhci_hcd vhci_hcd.2: release socket [ 129.554890][ T50] vhci_hcd vhci_hcd.2: disconnect device [ 129.573482][ T50] vhci_hcd vhci_hcd.2: stop threads [ 129.594099][ T50] vhci_hcd vhci_hcd.2: release socket [ 129.603992][ T50] vhci_hcd vhci_hcd.2: disconnect device [ 129.615357][ T7944] loop5: detected capacity change from 0 to 512 [ 129.621771][ T50] vhci_hcd vhci_hcd.2: stop threads [ 129.659875][ T50] vhci_hcd vhci_hcd.2: release socket [ 129.662856][ T7944] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 129.684140][ T50] vhci_hcd vhci_hcd.2: disconnect device [ 129.704954][ T7944] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 129.716577][ T50] vhci_hcd vhci_hcd.2: stop threads [ 129.721820][ T50] vhci_hcd vhci_hcd.2: release socket [ 129.727687][ T7944] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1374: Corrupt directory, running e2fsck is recommended [ 129.745833][ T50] vhci_hcd vhci_hcd.2: disconnect device [ 129.768996][ T50] vhci_hcd vhci_hcd.2: stop threads [ 129.782805][ T7944] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 129.791505][ T50] vhci_hcd vhci_hcd.2: release socket [ 129.813568][ T50] vhci_hcd vhci_hcd.2: disconnect device [ 129.827134][ T7944] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.1374: corrupted in-inode xattr: e_name out of bounds [ 129.853648][ T50] vhci_hcd vhci_hcd.2: stop threads [ 129.864778][ T50] vhci_hcd vhci_hcd.2: release socket [ 129.874818][ T7944] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 129.880116][ T50] vhci_hcd vhci_hcd.2: disconnect device [ 129.884829][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 129.901418][ C1] EXT4-fs (loop5): initial error at time 1771625602: ext4_iget_extra_inode:5025: inode 15 [ 129.911590][ C1] EXT4-fs (loop5): last error at time 1771625602: ext4_iget_extra_inode:5025: inode 15 [ 129.921408][ T7944] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1374: couldn't read orphan inode 15 (err -117) [ 129.944115][ T7944] loop5: lost filesystem error report for type 5 error -117 [ 129.945148][ T7944] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.980730][ T7944] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 129.997656][ T7952] bridge1: entered allmulticast mode [ 130.034389][ T7944] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 130.074868][ T7944] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1374: Corrupt directory, running e2fsck is recommended [ 130.106263][ T7953] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 130.163311][ T7953] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 130.205813][ T7953] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1374: Corrupt directory, running e2fsck is recommended [ 130.247707][ T7944] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 130.326723][ T7965] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 130.357587][ T7958] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 130.384863][ T7965] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 130.473813][ T5656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.630287][ T7982] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1388'. [ 131.425880][ T8002] netlink: 'syz.7.1394': attribute type 10 has an invalid length. [ 131.449001][ T8002] team0: Failed to send options change via netlink (err -105) [ 131.464880][ T8002] team0: Port device dummy0 added [ 131.990839][ T28] audit: type=1400 audit(1771625604.284:1725): avc: denied { read } for pid=8026 comm="syz.3.1404" lport=60078 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.036042][ T28] audit: type=1326 audit(1771625604.334:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8032 comm="syz.5.1407" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc92b4fc629 code=0x0 [ 132.136372][ T8042] process 'syz.2.1410' launched './file1' with NULL argv: empty string added [ 132.164966][ T28] audit: type=1400 audit(1771625604.464:1727): avc: denied { execute_no_trans } for pid=8041 comm="syz.2.1410" path="/273/file1" dev="tmpfs" ino=1441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 132.251245][ T8049] loop2: detected capacity change from 0 to 128 [ 132.291459][ T28] audit: type=1400 audit(1771625604.574:1728): avc: denied { create } for pid=8045 comm="syz.7.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.577251][ T8066] syzkaller0: entered promiscuous mode [ 132.591891][ T8066] syzkaller0: entered allmulticast mode [ 132.595629][ T8071] netlink: 'syz.3.1421': attribute type 6 has an invalid length. [ 132.887980][ T8090] loop4: detected capacity change from 0 to 128 [ 132.959409][ T8092] veth1_to_bond: entered allmulticast mode [ 132.970134][ T8092] veth1_to_bond: left allmulticast mode [ 133.000601][ T8096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1431'. [ 133.524232][ T8139] loop2: detected capacity change from 0 to 512 [ 133.550487][ T8139] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 133.563350][ T8139] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 133.572244][ T8139] System zones: 1-2, 4-12, 8-8 [ 133.578301][ T8139] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1447: iget: bad i_size value: 38620345925642 [ 133.591855][ T8139] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 133.592027][ T8139] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1447: couldn't read orphan inode 15 (err -117) [ 133.601214][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 133.601233][ C0] EXT4-fs (loop2): initial error at time 1771625605: ext4_orphan_get:1391: inode 15 [ 133.601273][ C0] EXT4-fs (loop2): last error at time 1771625605: ext4_orphan_get:1391: inode 15 [ 133.638912][ T8139] loop2: lost filesystem error report for type 5 error -117 [ 133.639524][ T8139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.642508][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1449'. [ 133.726598][ T8146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.730025][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1449'. [ 133.745289][ T8146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.764989][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1449'. [ 133.773922][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1449'. [ 134.114807][ T8141] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 134.157364][ T3868] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 134.173369][ T3868] EXT4-fs (loop2): This should not happen!! Data will be lost [ 134.173369][ T3868] [ 134.200480][ T3868] EXT4-fs (loop2): Total free blocks count 0 [ 134.245252][ T3868] EXT4-fs (loop2): Free/Dirty block details [ 134.253045][ T3868] EXT4-fs (loop2): free_blocks=0 [ 134.263630][ T3868] EXT4-fs (loop2): dirty_blocks=12288 [ 134.271803][ T8172] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1463'. [ 134.281739][ T3868] EXT4-fs (loop2): Block reservation details [ 134.288025][ T3868] EXT4-fs (loop2): i_reserved_data_blocks=12288 [ 134.465540][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1467'. [ 134.516523][ T35] usb 5-1: enqueue for inactive port 0 [ 134.522094][ T35] usb 5-1: enqueue for inactive port 0 [ 134.568149][ T8188] loop4: detected capacity change from 0 to 2048 [ 134.594945][ T35] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 134.603176][ T8188] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.621836][ T8196] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1471'. [ 134.699707][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 134.699721][ T28] audit: type=1400 audit(1771625606.994:1765): avc: denied { connect } for pid=8197 comm="syz.7.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 134.755898][ T8202] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 134.790915][ T8202] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 384 with error 28 [ 134.837670][ T8202] EXT4-fs (loop4): This should not happen!! Data will be lost [ 134.837670][ T8202] [ 134.875499][ T3868] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 134.906405][ T8209] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1477'. [ 134.925289][ T8202] EXT4-fs (loop4): Total free blocks count 0 [ 134.961855][ T8202] EXT4-fs (loop4): Free/Dirty block details [ 134.994790][ T8202] EXT4-fs (loop4): free_blocks=2415919504 [ 135.000664][ T8202] EXT4-fs (loop4): dirty_blocks=2176 [ 135.073174][ T8202] EXT4-fs (loop4): Block reservation details [ 135.079797][ T8202] EXT4-fs (loop4): i_reserved_data_blocks=156 [ 135.368049][ T8232] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 135.368049][ T8232] The task syz.7.1480 (8232) triggered the difference, watch for misbehavior. [ 135.469104][ T8188] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 384 with max blocks 2048 with error 28 [ 135.913401][ T8253] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1493'. [ 135.934412][ T8253] gtp1: entered promiscuous mode [ 136.073493][ T8259] hugetlbfs: syz.5.1495 (8259): Using mlock ulimits for SHM_HUGETLB is obsolete [ 136.221141][ T8276] loop2: detected capacity change from 0 to 4096 [ 136.228158][ T8276] EXT4-fs: Ignoring removed bh option [ 136.233684][ T8276] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.244394][ T8276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.339722][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.509494][ T8302] gretap0: entered promiscuous mode [ 136.518287][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1513'. [ 136.527503][ T8302] gretap0: left promiscuous mode [ 136.819337][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1533'. [ 136.878641][ T28] audit: type=1400 audit(1771625609.174:1766): avc: denied { connect } for pid=8329 comm="syz.4.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 136.913002][ T28] audit: type=1400 audit(1771625609.184:1767): avc: denied { read } for pid=8329 comm="syz.4.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 137.121315][ T8338] loop4: detected capacity change from 0 to 1024 [ 137.203941][ T8338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 137.229788][ T8338] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.240931][ T3303] usb usb6-port1: attempt power cycle [ 137.296619][ T8338] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 3: comm syz.4.1528: lblock 3 mapped to illegal pblock 3 (length 3) [ 137.314073][ T8338] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 137.327746][ T8338] EXT4-fs (loop4): This should not happen!! Data will be lost [ 137.327746][ T8338] [ 137.354172][ T4509] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:20: lblock 8 mapped to illegal pblock 8 (length 8) [ 137.368909][ T4509] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 137.382771][ T4509] EXT4-fs (loop4): This should not happen!! Data will be lost [ 137.382771][ T4509] [ 137.396323][ T7013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 138.030005][ T8376] netlink: 'syz.2.1543': attribute type 3 has an invalid length. [ 138.042816][ T8376] netlink: 'syz.2.1543': attribute type 1 has an invalid length. [ 138.050872][ T8376] netlink: 198116 bytes leftover after parsing attributes in process `syz.2.1543'. [ 138.066520][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1542'. [ 138.081997][ T8379] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1544'. [ 138.108357][ T8379] gtp1: entered promiscuous mode [ 138.118299][ T8381] loop5: detected capacity change from 0 to 2048 [ 138.181062][ T8381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.332779][ T8403] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 138.375819][ T8403] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 192 with error 28 [ 138.434592][ T8403] EXT4-fs (loop5): This should not happen!! Data will be lost [ 138.434592][ T8403] [ 138.474852][ T8403] EXT4-fs (loop5): Total free blocks count 0 [ 138.482091][ T8403] EXT4-fs (loop5): Free/Dirty block details [ 138.505568][ T8403] EXT4-fs (loop5): free_blocks=2415919504 [ 138.527125][ T8403] EXT4-fs (loop5): dirty_blocks=1376 [ 138.532630][ T8403] EXT4-fs (loop5): Block reservation details [ 138.538958][ T8403] EXT4-fs (loop5): i_reserved_data_blocks=86 [ 139.085171][ T3303] usb usb6-port1: unable to enumerate USB device [ 139.104179][ T8381] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 192 with max blocks 2048 with error 28 [ 139.254943][ T8423] gretap0: entered promiscuous mode [ 139.271148][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1559'. [ 139.298586][ T8423] gretap0: left promiscuous mode [ 139.371598][ T8426] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1564'. [ 139.524826][ T28] audit: type=1400 audit(1771625611.804:1768): avc: denied { setopt } for pid=8437 comm="syz.3.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.656815][ T8446] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 139.678186][ T8444] loop2: detected capacity change from 0 to 2048 [ 139.806414][ T8444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.840144][ T8456] loop4: detected capacity change from 0 to 512 [ 139.858270][ T8456] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 139.870690][ T8456] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.1574: corrupted xattr entries [ 139.883900][ T8456] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 139.884786][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 139.900412][ C1] EXT4-fs (loop4): initial error at time 1771625612: xattr_find_entry:337: inode 15 [ 139.909945][ C1] EXT4-fs (loop4): last error at time 1771625612: xattr_find_entry:337: inode 15 [ 139.915237][ T8456] EXT4-fs (loop4): 1 orphan inode deleted [ 139.943411][ T8456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.015474][ T7013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.193554][ T8473] loop4: detected capacity change from 0 to 2048 [ 140.252433][ T3301] Alternate GPT is invalid, using primary GPT. [ 140.259539][ T3301] loop4: p1 p2 p3 [ 140.264463][ T3301] loop4: partition table partially beyond EOD, truncated [ 140.287790][ T8473] Alternate GPT is invalid, using primary GPT. [ 140.304254][ T8473] loop4: p1 p2 p3 [ 140.314279][ T8473] loop4: partition table partially beyond EOD, truncated [ 140.326355][ T8465] loop5: detected capacity change from 0 to 1024 [ 140.464307][ T8465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 140.548946][ T8465] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.603112][ T8443] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 140.670670][ T8465] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 3: comm syz.5.1577: lblock 3 mapped to illegal pblock 3 (length 3) [ 140.692944][ T8443] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 936 with error 28 [ 140.706049][ T8443] EXT4-fs (loop2): This should not happen!! Data will be lost [ 140.706049][ T8443] [ 140.727586][ T8465] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 140.757463][ T8465] EXT4-fs (loop5): This should not happen!! Data will be lost [ 140.757463][ T8465] [ 140.857321][ T8443] EXT4-fs (loop2): Total free blocks count 0 [ 140.894807][ T8443] EXT4-fs (loop2): Free/Dirty block details [ 140.944792][ T8443] EXT4-fs (loop2): free_blocks=2415919504 [ 140.960344][ T8443] EXT4-fs (loop2): dirty_blocks=3200 [ 140.978559][ T8443] EXT4-fs (loop2): Block reservation details [ 140.984670][ T8443] EXT4-fs (loop2): i_reserved_data_blocks=200 [ 141.040908][ T3868] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 141.049043][ T4511] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 936 with max blocks 2048 with error 28 [ 141.078970][ T3868] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 141.098781][ T3868] EXT4-fs (loop5): This should not happen!! Data will be lost [ 141.098781][ T3868] [ 141.115570][ T5656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 141.264182][ T28] audit: type=1400 audit(1771625613.554:1769): avc: denied { accept } for pid=8502 comm="syz.5.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 141.330432][ T8507] vlan0: entered promiscuous mode [ 141.436912][ T8506] vlan0: left promiscuous mode [ 141.828931][ T8517] loop2: detected capacity change from 0 to 1024 [ 141.880406][ T8517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 141.894244][ T8517] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.928525][ T8517] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: block 3: comm syz.2.1598: lblock 3 mapped to illegal pblock 3 (length 3) [ 141.943936][ T8517] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 141.956967][ T8517] EXT4-fs (loop2): This should not happen!! Data will be lost [ 141.956967][ T8517] [ 141.979646][ T50] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 141.996651][ T50] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 142.014271][ T50] EXT4-fs (loop2): This should not happen!! Data will be lost [ 142.014271][ T50] [ 142.014566][ T8524] sg_write: process 220 (syz.4.1601) changed security contexts after opening file descriptor, this is not allowed. [ 142.027287][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 142.069918][ T8528] loop5: detected capacity change from 0 to 1024 [ 142.093612][ T8528] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 142.103039][ T8528] System zones: 0-1, 3-36 [ 142.111356][ T8528] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1602: bad orphan inode 134217728 [ 142.144671][ T8528] loop5: lost filesystem error report for type 5 error -117 [ 142.145610][ T8528] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.221938][ T8528] EXT4-fs: Cannot specify journal on remount [ 142.245794][ T5656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.256235][ T8541] loop4: detected capacity change from 0 to 1024 [ 142.265226][ T8541] EXT4-fs: Ignoring removed bh option [ 142.307748][ T8541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 142.376131][ T28] audit: type=1400 audit(1771625614.674:1770): avc: denied { rename } for pid=8540 comm="syz.4.1605" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.423359][ T28] audit: type=1400 audit(1771625614.704:1771): avc: denied { unlink } for pid=8540 comm="syz.4.1605" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.439690][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1611'. [ 142.454777][ T8551] netlink: 'syz.5.1611': attribute type 5 has an invalid length. [ 142.462618][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1611'. [ 142.463927][ T7013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 142.478388][ T8551] geneve2: entered promiscuous mode [ 142.486222][ T8551] geneve2: entered allmulticast mode [ 142.494245][ T3868] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 46709 - 0 [ 142.516149][ T3868] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 46709 - 0 [ 142.554656][ T3868] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 46709 - 0 [ 142.563663][ T3868] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 46709 - 0 [ 142.586092][ T8553] vlan0: entered promiscuous mode [ 142.681025][ T8552] vlan0: left promiscuous mode [ 142.752494][ T8569] loop5: detected capacity change from 0 to 8192 [ 142.770884][ T28] audit: type=1400 audit(1771625615.064:1772): avc: denied { mounton } for pid=8568 comm="syz.5.1619" path="/177/file2/bus" dev="loop5" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 142.803315][ T8573] loop2: detected capacity change from 0 to 8192 [ 142.824076][ T5656] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 142.832261][ T5656] FAT-fs (loop5): Filesystem has been set read-only [ 143.106184][ T8607] all: renamed from veth1_to_bond (while UP) [ 143.154883][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.164237][ T5105] Bluetooth: hci0: command 0x1003 tx timeout [ 143.170345][ T3693] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 143.217685][ T8615] atomic_op ffff888100a44128 conn xmit_atomic 0000000000000000 [ 143.232193][ T4511] Bluetooth: hci0: Frame reassembly failed (-84) [ 143.367794][ T8622] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.375086][ T8622] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.483713][ T8622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.513390][ T8622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.584865][ T4511] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.601554][ T4511] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.624974][ T8632] kernel read not supported for file /vcs (pid: 8632 comm: kworker/1:6) [ 143.635919][ T4511] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.666316][ T8635] kernel read not supported for file /vcs (pid: 8635 comm: kworker/1:9) [ 143.687358][ T4511] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.738727][ T4511] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.781862][ T4511] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.869558][ T4511] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.881894][ T4511] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.955591][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1652'. [ 143.971392][ T8653] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.008777][ T8659] loop5: detected capacity change from 0 to 256 [ 144.024362][ T8659] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 144.037765][ T8659] FAT-fs (loop5): Filesystem has been set read-only [ 144.044645][ T8659] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 144.044983][ T8653] bond1: (slave macvlan0): Enslaving as an active interface with an up link [ 144.054204][ T8659] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 144.072492][ T8659] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 144.084974][ T8659] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 144.115319][ T8663] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 144.124165][ T8663] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 144.133163][ T8659] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 144.142090][ T8659] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 144.151119][ T8663] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 144.179752][ T8668] loop4: detected capacity change from 0 to 256 [ 144.652395][ T8681] xt_limit: Overflow, try lower: 65536/2147483648 [ 144.862045][ T8679] loop4: detected capacity change from 0 to 512 [ 144.879678][ T8679] EXT4-fs: Ignoring removed oldalloc option [ 144.908316][ T8679] EXT4-fs (loop4): 1 truncate cleaned up [ 144.919265][ T8679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.954921][ T28] audit: type=1400 audit(1771625617.254:1773): avc: denied { ioctl } for pid=8698 comm="syz.7.1671" path="socket:[26947]" dev="sockfs" ino=26947 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 145.129131][ T8723] loop5: detected capacity change from 0 to 128 [ 145.168217][ T7013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.235389][ T3693] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 145.241557][ T5105] Bluetooth: hci0: command 0x1003 tx timeout [ 145.293724][ T28] audit: type=1400 audit(1771625617.584:1774): avc: denied { write } for pid=8728 comm="syz.5.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 145.390957][ T28] audit: type=1400 audit(1771625617.684:1775): avc: denied { open } for pid=8735 comm="syz.4.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 145.434863][ T28] audit: type=1400 audit(1771625617.684:1776): avc: denied { kernel } for pid=8735 comm="syz.4.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 145.464978][ T28] audit: type=1400 audit(1771625617.684:1777): avc: denied { tracepoint } for pid=8735 comm="syz.4.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 145.663344][ T28] audit: type=1400 audit(1771625617.954:1778): avc: denied { mount } for pid=8750 comm="syz.3.1690" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 145.693234][ T8753] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1691'. [ 145.870581][ T8763] loop4: detected capacity change from 0 to 1024 [ 145.896305][ T8763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 145.924784][ T8763] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.022763][ T8768] EXT4-fs error (device loop4): ext4_free_blocks:6726: comm syz.4.1696: Freeing blocks not in datazone - block = 0, count = 16 [ 146.117537][ T3868] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 112: padding at end of block bitmap is not set [ 146.142518][ T3868] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 146.164864][ T3868] EXT4-fs (loop4): This should not happen!! Data will be lost [ 146.164864][ T3868] [ 146.182684][ T3868] EXT4-fs (loop4): Total free blocks count 0 [ 146.195055][ T3868] EXT4-fs (loop4): Free/Dirty block details [ 146.205594][ T3868] EXT4-fs (loop4): free_blocks=16 [ 146.210670][ T3868] EXT4-fs (loop4): dirty_blocks=16 [ 146.224893][ T3868] EXT4-fs (loop4): Block reservation details [ 146.235753][ T3868] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 146.282379][ T7013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 146.406954][ T8795] loop2: detected capacity change from 0 to 512 [ 146.446857][ T8795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.459846][ T4511] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x20 [ 146.507024][ T8795] ext4 filesystem being mounted at /330/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.564946][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.587227][ T8808] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.601918][ T8808] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.623853][ T8808] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 46709 - 0 [ 146.674717][ T8808] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.686022][ T8808] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.704878][ T8808] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 46709 - 0 [ 146.740850][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 146.740865][ T28] audit: type=1326 audit(1771625875.039:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8815 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b725c629 code=0x7fc00000 [ 146.781497][ T8825] netlink: 'syz.2.1722': attribute type 1 has an invalid length. [ 146.785245][ T28] audit: type=1326 audit(1771625875.039:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8815 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb6b725c629 code=0x7fc00000 [ 146.813183][ T28] audit: type=1326 audit(1771625875.039:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8815 comm="syz.2.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b725c629 code=0x7fc00000 [ 146.816633][ T8825] netlink: 'syz.2.1722': attribute type 4 has an invalid length. [ 146.872396][ T8825] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1722'. [ 146.914541][ T8808] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.944896][ T8808] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.960491][ T8808] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 46709 - 0 [ 146.979783][ T8836] loop2: detected capacity change from 0 to 512 [ 146.998364][ T8836] EXT4-fs: Ignoring removed i_version option [ 147.009839][ T8836] EXT4-fs: Ignoring removed bh option [ 147.018199][ T28] audit: type=1400 audit(1771625875.319:1802): avc: denied { cpu } for pid=8833 comm="syz.4.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 147.057958][ T8808] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.090639][ T8836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.104802][ T8808] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.121958][ T8808] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 46709 - 0 [ 147.135144][ T8836] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.169061][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.210652][ T50] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.246016][ T50] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 46709 - 0 [ 147.263185][ T50] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 147.300176][ T50] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.327709][ T50] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 46709 - 0 [ 147.346174][ T50] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 147.388142][ T50] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.403440][ T50] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 46709 - 0 [ 147.421892][ T50] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 147.430992][ T8854] loop5: detected capacity change from 0 to 512 [ 147.440457][ T50] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.460549][ T50] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 46709 - 0 [ 147.469211][ T50] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 147.505162][ T8854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.524873][ T8854] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.589870][ T5656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.349856][ T8903] loop7: detected capacity change from 0 to 1024 [ 148.366294][ T8903] EXT4-fs: Ignoring removed orlov option [ 148.377242][ T8903] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.396998][ T8903] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8043c118, mo2=0002] [ 148.416920][ T8903] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.441000][ T28] audit: type=1400 audit(1771625876.739:1803): avc: denied { mounton } for pid=8902 comm="syz.7.1754" path="/137/file1/bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 148.475254][ T28] audit: type=1400 audit(1771625876.779:1805): avc: denied { sys_module } for pid=8910 comm="syz.3.1757" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 148.477485][ T8909] SELinux: failed to load policy [ 148.497659][ T28] audit: type=1400 audit(1771625876.769:1804): avc: denied { load_policy } for pid=8908 comm="syz.2.1756" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 148.524833][ T8903] loop7: detected capacity change from 1024 to 64 [ 148.566270][ T6343] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /137/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 148.593076][ T28] audit: type=1326 audit(1771625876.889:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.3.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb107c629 code=0x7ffc0000 [ 148.624963][ T28] audit: type=1326 audit(1771625876.889:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.3.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb107c629 code=0x7ffc0000 [ 148.649135][ T28] audit: type=1326 audit(1771625876.919:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8918 comm="syz.3.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb107c629 code=0x7ffc0000 [ 148.771150][ T8925] netlink: 'syz.3.1763': attribute type 6 has an invalid length. [ 148.794965][ T8925] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1763'. [ 148.907899][ T8191] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.920098][ T8906] kmmpd-loop7: attempt to access beyond end of device [ 148.920098][ T8906] loop7: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 148.940016][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1765'. [ 148.949219][ T8906] Buffer I/O error on dev loop7, logical block 64, lost sync page write [ 148.958078][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1765'. [ 149.045796][ T8943] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1770'. [ 149.071737][ T8946] loop5: detected capacity change from 0 to 512 [ 149.083658][ T8946] EXT4-fs: Ignoring removed i_version option [ 149.090205][ T8946] EXT4-fs: Ignoring removed bh option [ 149.106572][ T8946] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.119739][ T8946] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.196192][ T5656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.264259][ T3879] bridge_slave_1: left allmulticast mode [ 149.290370][ T3879] bridge_slave_1: left promiscuous mode [ 149.298590][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1780'. [ 149.309335][ T3879] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.319026][ T3879] bridge_slave_0: left allmulticast mode [ 149.330503][ T3879] bridge_slave_0: left promiscuous mode [ 149.339813][ T3879] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.360934][ T8973] loop5: detected capacity change from 0 to 256 [ 149.396133][ T8973] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.412379][ T8973] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.444411][ T8982] loop2: detected capacity change from 0 to 512 [ 149.462107][ T3879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.476684][ T8982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.495718][ T3879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.516990][ T8982] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.537746][ T3879] bond0 (unregistering): Released all slaves [ 149.582367][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.609528][ T3879] hsr_slave_0: left promiscuous mode [ 149.616051][ T3879] hsr_slave_1: left promiscuous mode [ 149.621730][ T3879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.648067][ T3879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.696200][ T3879] team0 (unregistering): Port device team_slave_1 removed [ 149.711084][ T3879] team0 (unregistering): Port device team_slave_0 removed [ 149.752480][ T3879] team0 (unregistering): Port device dummy0 removed [ 149.971237][ T8955] chnl_net:caif_netlink_parms(): no params data found [ 150.200112][ T8955] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.217556][ T8955] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.228262][ T8955] bridge_slave_0: entered allmulticast mode [ 150.235088][ T8955] bridge_slave_0: entered promiscuous mode [ 150.257623][ T8955] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.264849][ T8955] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.272217][ T8955] bridge_slave_1: entered allmulticast mode [ 150.279224][ T8955] bridge_slave_1: entered promiscuous mode [ 150.297434][ T8955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.308022][ T8955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.380632][ T8955] team0: Port device team_slave_0 added [ 150.381175][ T9032] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 150.392792][ T9032] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 150.400771][ T8955] team0: Port device team_slave_1 added [ 150.418726][ T9032] vhci_hcd vhci_hcd.0: Device attached [ 150.434526][ T9034] vhci_hcd: connection closed [ 150.436033][ T1979] vhci_hcd vhci_hcd.4: stop threads [ 150.451644][ T8955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.459481][ T1979] vhci_hcd vhci_hcd.4: release socket [ 150.465305][ T8955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.491437][ T1979] vhci_hcd vhci_hcd.4: disconnect device [ 150.505167][ T8955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.518822][ T8955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.529174][ T8955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.571284][ T8955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.612815][ T8955] hsr_slave_0: entered promiscuous mode [ 150.619289][ T8955] hsr_slave_1: entered promiscuous mode [ 150.625281][ T8955] debugfs: 'hsr0' already exists in 'hsr' [ 150.631120][ T8955] Cannot create hsr debugfs directory [ 150.736560][ T8955] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 150.750353][ T8955] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 150.760469][ T8955] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 150.776192][ T8955] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 150.824283][ T8955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.846394][ T8955] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.857816][ T3879] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.865013][ T3879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.903568][ T3879] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.910693][ T3879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.018424][ T8955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.130034][ T9065] loop2: detected capacity change from 0 to 32768 [ 151.260204][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1797'. [ 151.394456][ T8955] veth0_vlan: entered promiscuous mode [ 151.446038][ T8955] veth1_vlan: entered promiscuous mode [ 151.485784][ T8955] veth0_macvtap: entered promiscuous mode [ 151.505757][ T8955] veth1_macvtap: entered promiscuous mode [ 151.528114][ T8955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.545969][ T8955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.559217][ T3879] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.588311][ T3879] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.597998][ T3879] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.607487][ T3879] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.728147][ T9135] loop2: detected capacity change from 0 to 128 [ 152.075550][ T9148] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1809'. [ 152.098698][ T9151] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 152.113644][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1810'. [ 152.181045][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1822'. [ 152.190952][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1822'. [ 152.299447][ T9165] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 152.306786][ T9165] IPv6: NLM_F_CREATE should be set when creating new route [ 152.336309][ T9161] SELinux: failed to load policy [ 153.247557][ T9195] loop5: detected capacity change from 0 to 32768 [ 153.510564][ T9195] loop5: p1 p2 p3 < p5 p6 p7 > [ 153.531502][ T9195] loop5: p2 size 16775168 extends beyond EOD, truncated [ 153.545910][ T9195] loop5: p5 start 4294970168 is beyond EOD, truncated [ 153.744092][ T9221] loop4: detected capacity change from 0 to 512 [ 153.783357][ T9221] EXT4-fs: Ignoring removed i_version option [ 153.805689][ T9221] EXT4-fs: Ignoring removed bh option [ 153.815173][ T9225] netlink: 'syz.8.1840': attribute type 29 has an invalid length. [ 153.845499][ T9225] netlink: 'syz.8.1840': attribute type 29 has an invalid length. [ 153.859282][ T9221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.885485][ T9225] __nla_validate_parse: 1 callbacks suppressed [ 153.885502][ T9225] netlink: 500 bytes leftover after parsing attributes in process `syz.8.1840'. [ 153.907428][ T9221] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.086546][ T9238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1844'. [ 154.130381][ T9238] team1: entered promiscuous mode [ 154.138184][ T7013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.141499][ T9238] team1: entered allmulticast mode [ 154.153182][ T9240] -: renamed from syzkaller0 [ 154.215243][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 154.215261][ T28] audit: type=1400 audit(1771625882.519:1845): avc: denied { ioctl } for pid=9241 comm="syz.2.1847" path="socket:[29286]" dev="sockfs" ino=29286 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 154.345442][ T3389] Process accounting resumed [ 154.482537][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1853'. [ 154.523496][ T9262] loop4: detected capacity change from 0 to 2048 [ 154.533856][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1853'. [ 154.540284][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1853'. [ 154.573898][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1853'. [ 154.645669][ T9262] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.664802][ T28] audit: type=1400 audit(1771625882.959:1846): avc: denied { cmd } for pid=9268 comm="syz.3.1855" path="socket:[29331]" dev="sockfs" ino=29331 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 154.705165][ T9262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.745708][ T9274] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1857'. [ 154.867865][ T9278] netlink: 'syz.3.1859': attribute type 4 has an invalid length. [ 154.907312][ T9278] netlink: 'syz.3.1859': attribute type 4 has an invalid length. [ 155.049494][ T28] audit: type=1400 audit(1771625883.349:1847): avc: denied { ioctl } for pid=9284 comm="syz.8.1863" path="socket:[29370]" dev="sockfs" ino=29370 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 155.211604][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1866'. [ 155.442039][ T9311] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=9311 comm=syz.2.1872 [ 155.529311][ T9316] netlink: 'syz.2.1874': attribute type 1 has an invalid length. [ 155.739993][ T9317] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 155.764133][ T9317] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 155.789667][ T9317] bond2: (slave ip6gre1): making interface the new active one [ 155.797892][ T9317] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 155.806851][ T9321] bond2: option fail_over_mac: unable to set because the bond device has slaves [ 155.921865][ T9319] loop8: detected capacity change from 0 to 1024 [ 155.939999][ T9323] netlink: 'syz.2.1876': attribute type 1 has an invalid length. [ 156.128961][ T9331] loop4: detected capacity change from 0 to 8192 [ 156.191709][ T9323] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.283226][ T9329] bond3: (slave veth3): Enslaving as an active interface with a down link [ 156.376481][ T9319] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 156.441172][ T9319] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.657692][ T9356] tipc: Disabling bearer [ 156.672776][ T9319] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: block 3: comm syz.8.1875: lblock 3 mapped to illegal pblock 3 (length 3) [ 156.689946][ T9319] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 156.710321][ T9319] EXT4-fs (loop8): This should not happen!! Data will be lost [ 156.710321][ T9319] [ 156.782428][ T4511] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:21: lblock 8 mapped to illegal pblock 8 (length 8) [ 156.806976][ T4511] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 156.834613][ T4511] EXT4-fs (loop8): This should not happen!! Data will be lost [ 156.834613][ T4511] [ 156.856762][ T8955] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 157.523089][ T9388] syzkaller0: entered promiscuous mode [ 157.529023][ T9388] syzkaller0: entered allmulticast mode [ 157.684002][ T9398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1901'. [ 157.759064][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1902'. [ 157.935144][ T28] audit: type=1400 audit(1771625886.229:1848): avc: denied { mounton } for pid=9418 comm="syz.3.1910" path="/file0" dev="ramfs" ino=29507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 158.045156][ T9426] loop8: detected capacity change from 0 to 512 [ 158.066795][ T9426] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 158.107786][ T9426] EXT4-fs (loop8): 1 truncate cleaned up [ 158.114446][ T9426] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.436150][ T8955] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.420758][ T9470] pim6reg1: entered promiscuous mode [ 159.438249][ T9470] pim6reg1: entered allmulticast mode [ 159.847199][ T9488] netlink: 'syz.5.1939': attribute type 1 has an invalid length. [ 159.875019][ T9488] netlink: 'syz.5.1939': attribute type 4 has an invalid length. [ 159.883446][ T9488] __nla_validate_parse: 5 callbacks suppressed [ 159.883463][ T9488] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1939'. [ 159.918685][ T9491] netlink: 'syz.5.1939': attribute type 1 has an invalid length. [ 159.963901][ T9491] netlink: 'syz.5.1939': attribute type 4 has an invalid length. [ 159.983694][ T9497] loop4: detected capacity change from 0 to 256 [ 160.006142][ T9491] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1939'. [ 160.018333][ T9497] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 160.027356][ T9497] FAT-fs (loop4): Filesystem has been set read-only [ 160.034029][ T9497] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 160.043395][ T9497] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 160.074925][ T9497] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 160.084594][ T9497] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 160.094085][ T9497] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 160.103708][ T9497] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 160.115132][ T9497] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 160.123997][ T9497] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 160.135368][ T9497] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 160.290328][ T9510] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.1948'. [ 160.329135][ T9510] netlink: zone id is out of range [ 160.366900][ T9510] netlink: zone id is out of range [ 160.373264][ T9510] netlink: zone id is out of range [ 160.430060][ T9510] netlink: del zone limit has 8 unknown bytes [ 160.626741][ T9528] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1953'. [ 160.688950][ T9530] loop5: detected capacity change from 0 to 512 [ 160.699305][ T9530] EXT4-fs: Ignoring removed nobh option [ 160.720505][ T9530] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 160.744336][ T9530] EXT4-fs (loop5): 1 truncate cleaned up [ 160.766749][ T9530] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.172905][ T9548] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.195584][ T9548] bridge_slave_1: left allmulticast mode [ 161.214892][ T9548] bridge_slave_1: left promiscuous mode [ 161.221512][ T9548] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.243490][ T9555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.252827][ T9548] bridge_slave_1: entered promiscuous mode [ 161.274624][ T9555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.583597][ T5656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.700299][ T9573] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.1965'. [ 161.720437][ T9573] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1965'. [ 161.918898][ T28] audit: type=1400 audit(1771625890.219:1849): avc: denied { kexec_image_load } for pid=9594 comm="syz.8.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 162.499205][ T9637] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1980'. [ 162.583057][ T8634] IPVS: starting estimator thread 0... [ 162.744902][ T9642] IPVS: using max 2208 ests per chain, 110400 per kthread [ 162.989932][ T9654] tipc: Started in network mode [ 163.004904][ T9654] tipc: Node identity d2bf90a4f55, cluster identity 4711 [ 163.012096][ T9654] tipc: Enabled bearer , priority 0 [ 163.021927][ T9654] syzkaller0: MTU too low for tipc bearer [ 163.027953][ T9654] tipc: Disabling bearer [ 163.132962][ T9656] loop4: detected capacity change from 0 to 128 [ 163.300367][ T9595] kexec: Could not allocate control_code_buffer [ 163.372451][ T28] audit: type=1400 audit(1771625891.669:1850): avc: denied { append } for pid=9669 comm="syz.4.1994" name="rt_cache" dev="proc" ino=4026532862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 163.438637][ T9674] netlink: 'syz.8.1995': attribute type 1 has an invalid length. [ 163.456603][ T9679] syz_tun: entered allmulticast mode [ 163.498522][ T9674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.526941][ T9678] syz_tun: left allmulticast mode [ 163.596255][ T9674] bond1: (slave veth5): Enslaving as an active interface with a down link [ 163.669894][ T9690] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 163.714192][ T9690] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 163.768432][ T28] audit: type=1400 audit(1771625892.069:1851): avc: denied { mount } for pid=9700 comm="syz.3.2001" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 163.900368][ T9710] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2005'. [ 164.104676][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2012'. [ 164.121032][ T9729] loop5: detected capacity change from 0 to 512 [ 164.172073][ T9729] EXT4-fs (loop5): 1 truncate cleaned up [ 164.179442][ T9729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.202158][ T9729] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2013: bg 0: block 465: padding at end of block bitmap is not set [ 164.266887][ T9729] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 164.320378][ T9729] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2013: invalid indirect mapped block 234881024 (level 0) [ 164.759623][ T5656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.934343][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2022'. [ 165.146126][ T28] audit: type=1326 audit(1771625893.449:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.5.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92b4fc629 code=0x7fc00000 [ 165.807967][ T28] audit: type=1326 audit(1771625894.109:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.5.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc92b4f6417 code=0x7fc00000 [ 165.908833][ T28] audit: type=1326 audit(1771625894.209:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9768 comm="syz.8.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fc5ac629 code=0x7fc00000 [ 166.144818][ T9795] loop2: detected capacity change from 0 to 7 [ 166.149957][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2037'. [ 166.178536][ T9799] mmap: syz.3.2038 (9799) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 166.185062][ T28] audit: type=1326 audit(1771625894.469:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.2.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b725c629 code=0x7fc00000 [ 166.215354][ T9795] loop2: [ 166.224492][ T2999] loop2: [ 166.256261][ T28] audit: type=1326 audit(1771625894.489:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.3.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb107c629 code=0x7ffc0000 [ 166.263996][ T9803] loop5: detected capacity change from 0 to 1024 [ 166.291091][ T28] audit: type=1326 audit(1771625894.489:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.3.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb107c629 code=0x7ffc0000 [ 166.334107][ T28] audit: type=1326 audit(1771625894.489:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.3.2038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cb107c629 code=0x7ffc0000 [ 166.415363][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2042'. [ 166.424956][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2042'. [ 167.107622][ T9803] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 167.134885][ T9803] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.184558][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 167.184578][ T28] audit: type=1400 audit(1771625895.469:1877): avc: denied { append } for pid=9801 comm="syz.5.2039" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 167.336671][ T5656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 167.801231][ T9928] loop8: detected capacity change from 0 to 128 [ 167.809383][ T9928] vfat: Unknown parameter 'ÿÿÿÿ01777777777777777777777' [ 168.044303][ T9953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.063669][ T9955] loop2: detected capacity change from 0 to 128 [ 168.077117][ T9953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.085613][ T9955] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 168.095447][ T9955] FAT-fs (loop2): Filesystem has been set read-only [ 168.107813][ T9955] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 168.272980][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2069'. [ 168.293590][ T9981] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2069'. [ 168.327132][ T9981] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2069'. [ 168.565743][T10017] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2076'. [ 168.660894][T10029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2079'. [ 168.753915][T10042] syzkaller1: entered promiscuous mode [ 168.759729][T10042] syzkaller1: entered allmulticast mode [ 168.983479][ T28] audit: type=1400 audit(1771625897.279:1878): avc: denied { read } for pid=10064 comm="syz.4.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 169.009875][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2088'. [ 169.020231][T10067] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.034256][ T28] audit: type=1400 audit(1771625897.329:1879): avc: denied { setopt } for pid=10064 comm="syz.4.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 169.066965][T10067] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.140635][T10067] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.203169][T10067] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.332178][ T3868] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.344674][ T3868] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.356592][ T3868] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.378363][ T3868] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.489836][T10089] netlink: 'syz.8.2098': attribute type 1 has an invalid length. [ 169.505267][T10089] netlink: 'syz.8.2098': attribute type 4 has an invalid length. [ 169.754499][T10097] loop5: detected capacity change from 0 to 512 [ 169.780958][T10097] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 169.830046][T10097] EXT4-fs (loop5): 1 truncate cleaned up [ 169.845406][T10097] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.995018][ T28] audit: type=1400 audit(1771625898.279:1880): avc: denied { bind } for pid=10113 comm="syz.4.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 170.101891][ T5656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.122977][T10123] __nla_validate_parse: 3 callbacks suppressed [ 170.122992][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'. [ 170.159357][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'. [ 170.234513][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2116'. [ 170.277043][T10129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2116'. [ 170.838059][ T28] audit: type=1400 audit(1771625899.139:1881): avc: denied { getopt } for pid=10158 comm="syz.5.2127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.160067][T10171] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2131'. [ 171.332269][T10180] syzkaller0: entered allmulticast mode [ 171.350064][T10180] syzkaller0: entered promiscuous mode [ 171.368918][T10184] xt_l2tp: v2 tid > 0xffff: 37482740 [ 171.386089][T10180] syzkaller0 (unregistering): left promiscuous mode [ 171.392741][T10180] syzkaller0 (unregistering): left allmulticast mode [ 171.578005][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2146'. [ 171.593732][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2145'. [ 171.629266][T10200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2146'. [ 171.679789][T10199] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.762023][T10199] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.053643][T10199] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.102215][T10199] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.177654][ T4517] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.192667][ T4517] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.215585][ T4517] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.230889][ T4517] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.701388][ T28] audit: type=1400 audit(1771625900.999:1882): avc: denied { write } for pid=10235 comm="syz.5.2159" name="/" dev="configfs" ino=2081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 173.154168][T10248] loop4: detected capacity change from 0 to 2048 [ 173.199331][T10248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.397606][T10248] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2163: bg 0: block 234: padding at end of block bitmap is not set [ 173.452750][T10248] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 622 with error 28 [ 173.504761][T10248] EXT4-fs (loop4): This should not happen!! Data will be lost [ 173.504761][T10248] [ 173.534875][T10248] EXT4-fs (loop4): Total free blocks count 0 [ 173.540977][T10248] EXT4-fs (loop4): Free/Dirty block details [ 173.574795][T10248] EXT4-fs (loop4): free_blocks=0 [ 173.579788][T10248] EXT4-fs (loop4): dirty_blocks=624 [ 173.602779][T10248] EXT4-fs (loop4): Block reservation details [ 173.618629][T10248] EXT4-fs (loop4): i_reserved_data_blocks=39 [ 173.694592][T10269] loop8: detected capacity change from 0 to 128 [ 173.874891][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.903203][ T7013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.140129][T10283] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 174.168238][T10283] syzkaller0: Linktype set failed because interface is up [ 174.313065][T10290] loop5: detected capacity change from 0 to 128 [ 174.324139][T10296] loop4: detected capacity change from 0 to 512 [ 174.353347][T10296] EXT4-fs: test_dummy_encryption option not supported [ 174.419129][T10290] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 174.486113][T10290] ext4 filesystem being mounted at /281/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 174.773591][ T5656] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.971698][ T8632] IPVS: starting estimator thread 0... [ 174.977999][T10310] IPVS: fo: FWM 3 0x00000003 - no destination available [ 175.074919][T10311] IPVS: using max 2256 ests per chain, 112800 per kthread [ 175.391015][T10332] netlink: 'syz.5.2194': attribute type 4 has an invalid length. [ 175.404087][T10332] netlink: 'syz.5.2194': attribute type 4 has an invalid length. [ 175.504166][ T4517] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.537366][ T4517] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 46709 - 0 [ 175.556294][ T4517] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 175.574851][ T4517] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.588799][ T4517] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 46709 - 0 [ 175.597920][ T4517] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 175.606653][ T4517] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.615410][ T4517] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 46709 - 0 [ 175.623908][ T4517] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 175.632703][ T4517] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.641493][ T4517] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 46709 - 0 [ 175.650191][ T4517] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 175.684794][ T28] audit: type=1400 audit(1771625903.979:1883): avc: denied { setopt } for pid=10338 comm="syz.5.2196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 175.784509][T10341] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2197'. [ 175.869794][T10348] -1: renamed from syzkaller0 [ 176.227101][T10360] hub 3-0:1.0: USB hub found [ 176.244932][T10360] hub 3-0:1.0: 8 ports detected [ 176.994322][T10376] loop8: detected capacity change from 0 to 32768 [ 177.017756][T10382] netlink: 'syz.3.2212': attribute type 4 has an invalid length. [ 177.066049][T10382] netlink: 'syz.3.2212': attribute type 4 has an invalid length. [ 177.073948][ T3301] loop8: p1 p3 < p5 p6 > [ 177.087880][ T3301] loop8: partition table partially beyond EOD, truncated [ 177.125007][T10376] loop8: p1 p3 < p5 p6 > [ 177.130063][T10376] loop8: partition table partially beyond EOD, truncated [ 177.158935][ T3879] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.183530][ T3879] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.229023][ T3879] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.300767][ T3879] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.409440][T10387] loop5: detected capacity change from 0 to 1024 [ 177.460031][T10387] EXT4-fs (loop5): orphan cleanup on readonly fs [ 177.497335][T10387] EXT4-fs (loop5): 1 truncate cleaned up [ 177.505435][T10387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 177.528245][ T28] audit: type=1400 audit(1771625905.829:1884): avc: denied { setopt } for pid=10393 comm="syz.3.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 177.600812][ T5656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.997881][T10420] loop8: detected capacity change from 0 to 1024 [ 178.008808][T10420] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 178.037427][T10422] loop5: detected capacity change from 0 to 1024 [ 178.135534][T10422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.285878][ T5656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.668218][T10441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2236'. [ 178.703158][T10441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2236'. [ 178.973200][T10448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.012506][T10448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.029663][T10448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.047108][T10448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.895543][T10459] tipc: Resetting bearer [ 179.993001][T10459] bond0: left promiscuous mode [ 180.023596][ T4517] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.048667][ T4517] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.088792][ T4517] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.098271][ T4517] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.115025][ T4517] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.123938][ T4517] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.192164][ T3868] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.213348][ T3868] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.224943][ T28] audit: type=1400 audit(1771625908.529:1885): avc: denied { shutdown } for pid=10485 comm="syz.3.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 180.260094][T10491] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2251'. [ 180.479917][T10506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2257'. [ 180.545126][T10506] 8021q: adding VLAN 0 to HW filter on device bond4 [ 180.563134][T10506] bond3: (slave bond4): Enslaving as an active interface with an up link [ 180.599467][T10506] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2257'. [ 180.635637][T10506] 8021q: adding VLAN 0 to HW filter on device bond3 [ 181.528206][ T28] audit: type=1326 audit(1771625909.819:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10511 comm="syz.5.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92b4fc629 code=0x7fc00000 [ 181.574767][ T28] audit: type=1326 audit(1771625909.819:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10511 comm="syz.5.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc92b4fc629 code=0x7fc00000 [ 181.598438][ T28] audit: type=1326 audit(1771625909.819:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10511 comm="syz.5.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92b4fc629 code=0x7fc00000 [ 181.622163][ T28] audit: type=1326 audit(1771625909.819:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10511 comm="syz.5.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92b4fc629 code=0x7fc00000 [ 181.648737][ T28] audit: type=1326 audit(1771625909.819:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10511 comm="syz.5.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92b4fc629 code=0x7fc00000 [ 181.674337][ T28] audit: type=1326 audit(1771625909.819:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10511 comm="syz.5.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92b4fc629 code=0x7fc00000 [ 181.697897][ T28] audit: type=1326 audit(1771625909.819:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10511 comm="syz.5.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92b4fc629 code=0x7fc00000 [ 181.722168][ T28] audit: type=1326 audit(1771625909.819:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10511 comm="syz.5.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92b4fc629 code=0x7fc00000 [ 181.745922][ T28] audit: type=1326 audit(1771625909.819:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10511 comm="syz.5.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc92b4fc629 code=0x7fc00000 [ 181.793348][T10521] loop8: detected capacity change from 0 to 1024 [ 181.844675][T10521] EXT4-fs: Ignoring removed oldalloc option [ 181.850968][T10521] EXT4-fs: Ignoring removed bh option [ 181.882683][T10521] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.895249][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2268'. [ 181.895898][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2268'. [ 182.136616][T10521] ================================================================== [ 182.144766][T10521] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 182.152820][T10521] [ 182.155171][T10521] write to 0xffff88811bd3cb4c of 4 bytes by task 10539 on cpu 1: [ 182.162919][T10521] xas_set_mark+0x12b/0x140 [ 182.167469][T10521] __folio_start_writeback+0x17b/0x370 [ 182.172973][T10521] ext4_bio_write_folio+0x5ad/0x9f0 [ 182.178304][T10521] mpage_process_page_bufs+0x4a1/0x620 [ 182.183794][T10521] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 182.189639][T10521] ext4_do_writepages+0xa07/0x2840 [ 182.194869][T10521] ext4_writepages+0x18f/0x320 [ 182.199686][T10521] do_writepages+0x1c6/0x310 [ 182.204311][T10521] file_write_and_wait_range+0x178/0x2f0 [ 182.209977][T10521] generic_buffers_fsync_noflush+0x45/0x130 [ 182.215915][T10521] ext4_sync_file+0x1aa/0x6b0 [ 182.220626][T10521] vfs_fsync_range+0xc5/0xe0 [ 182.225255][T10521] ext4_buffered_write_iter+0x34f/0x3c0 [ 182.230855][T10521] ext4_file_write_iter+0x380/0xfa0 [ 182.236125][T10521] iter_file_splice_write+0x6bc/0xa80 [ 182.241521][T10521] direct_splice_actor+0x156/0x2a0 [ 182.246669][T10521] splice_direct_to_actor+0x311/0x670 [ 182.252163][T10521] do_splice_direct+0x119/0x1a0 [ 182.257137][T10521] do_sendfile+0x382/0x650 [ 182.261612][T10521] __x64_sys_sendfile64+0x105/0x150 [ 182.266848][T10521] x64_sys_call+0x2dc4/0x3020 [ 182.271578][T10521] do_syscall_64+0x12c/0x370 [ 182.276217][T10521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.282143][T10521] [ 182.284492][T10521] read to 0xffff88811bd3cb4c of 4 bytes by task 10521 on cpu 0: [ 182.292142][T10521] file_write_and_wait_range+0x130/0x2f0 [ 182.297839][T10521] generic_buffers_fsync_noflush+0x45/0x130 [ 182.303791][T10521] ext4_sync_file+0x1aa/0x6b0 [ 182.308500][T10521] vfs_fsync_range+0xc5/0xe0 [ 182.313136][T10521] ext4_buffered_write_iter+0x34f/0x3c0 [ 182.318746][T10521] ext4_file_write_iter+0x380/0xfa0 [ 182.323991][T10521] iter_file_splice_write+0x6bc/0xa80 [ 182.329391][T10521] direct_splice_actor+0x156/0x2a0 [ 182.334539][T10521] splice_direct_to_actor+0x311/0x670 [ 182.339944][T10521] do_splice_direct+0x119/0x1a0 [ 182.344918][T10521] do_sendfile+0x382/0x650 [ 182.349372][T10521] __x64_sys_sendfile64+0x105/0x150 [ 182.354596][T10521] x64_sys_call+0x2dc4/0x3020 [ 182.359391][T10521] do_syscall_64+0x12c/0x370 [ 182.364034][T10521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.369963][T10521] [ 182.372311][T10521] value changed: 0x0a000021 -> 0x04000021 [ 182.378041][T10521] [ 182.380391][T10521] Reported by Kernel Concurrency Sanitizer on: [ 182.386683][T10521] CPU: 0 UID: 0 PID: 10521 Comm: syz.8.2262 Not tainted syzkaller #0 PREEMPT(full) [ 182.396084][T10521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 182.406178][T10521] ================================================================== [ 182.735259][ T8955] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.